$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa File: 3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa (raw, json) Hash identifier: 4DEhiUSRdMxotztWC/VFvruojuGjatmuAjQX7gYR7BE= Subject key identifier: 5A:98:75:3C:17:70:7D:97:12:CB:5C:9B:82:A2:7B:7F:E4:7F:18:EB Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Certificate serial: 010D0C9F43285849350EA58570A3F201ECF79B80 Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 30698 IP address blocks: 209.221.240.0/24 maxlen: 24 209.221.241.0/24 maxlen: 24 209.221.242.0/24 maxlen: 24 209.221.243.0/24 maxlen: 24 209.221.244.0/24 maxlen: 24 209.221.245.0/24 maxlen: 24 209.221.246.0/24 maxlen: 24 209.221.247.0/24 maxlen: 24 209.221.248.0/24 maxlen: 24 209.221.249.0/24 maxlen: 24 209.221.250.0/24 maxlen: 24 209.221.251.0/24 maxlen: 24 209.221.252.0/24 maxlen: 24 209.221.253.0/24 maxlen: 24 216.213.48.0/24 maxlen: 24 216.213.49.0/24 maxlen: 24 216.213.50.0/24 maxlen: 24 216.213.51.0/24 maxlen: 24 216.213.56.0/24 maxlen: 24 216.213.57.0/24 maxlen: 24 216.213.58.0/24 maxlen: 24 216.213.59.0/24 maxlen: 24 216.213.60.0/24 maxlen: 24 216.213.61.0/24 maxlen: 24 216.213.62.0/24 maxlen: 24 216.213.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a5:85:70:a3:f2:01:ec:f7:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=3bce2374-9348-4096-982e-92e149e2e97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:c7:7c:df:40:5e:6b:33:45:30:74:6e:cd: f0:c8:be:e6:e3:4a:44:1f:dd:e8:c5:0b:59:6b:45: 68:b5:94:59:59:e4:d6:5a:21:e0:e9:cd:42:07:47: b3:05:cc:c2:ca:83:38:8a:33:7f:cb:b8:44:9f:52: c3:78:4a:e0:da:16:79:ce:c5:6b:b0:a0:74:81:05: ef:8f:35:32:71:67:72:0d:3b:68:b0:0b:3c:1e:bd: 75:84:60:63:6d:0b:fe:85:68:f7:b6:e4:57:de:4f: a0:f5:6b:d2:57:b7:ab:8f:95:d3:d8:3c:7a:fa:c7: a1:45:b6:23:74:ed:18:e9:cc:7d:9e:7a:9b:7c:9b: eb:f2:53:53:4f:c8:98:99:18:e2:68:a4:0f:a5:54: 68:be:e3:9f:8b:23:3e:d8:3d:53:41:a0:80:e5:87: e1:45:dd:7d:d9:07:83:4a:fa:5f:fe:50:b5:ce:20: 38:31:a7:89:b4:02:60:10:0e:29:22:b7:b9:f1:75: d9:24:f4:ea:9a:10:e4:b9:8c:d7:38:31:63:e9:8b: db:d5:db:81:f3:59:bb:83:52:f0:ae:8a:58:40:bb: 99:66:e8:ec:57:c6:ff:87:9a:e2:d3:a7:6c:7b:57: cd:78:33:68:85:f2:c1:6e:ad:d8:e3:61:e1:df:c1: 1e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:98:75:3C:17:70:7D:97:12:CB:5C:9B:82:A2:7B:7F:E4:7F:18:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl X509v3 Authority Key Identifier: keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer sbgp-ipAddrBlock: critical IPv4: 209.221.240.0-209.221.253.255 216.213.48.0/22 216.213.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c2:c9:c9:16:50:74:6f:49:90:0a:f8:47:32:96:9b:c2:b3: 51:b4:aa:45:6b:e1:f0:10:af:b4:8b:95:c2:83:0a:53:fb:c7: 31:15:e1:11:0d:0c:90:a0:59:3d:7c:09:0d:1a:02:47:9d:81: 9f:28:12:09:3c:aa:52:1a:d8:f6:90:9b:7a:76:66:bb:0a:2e: 3e:ec:9a:6a:98:9f:a1:8b:a1:30:b1:77:38:a8:76:d6:b7:24: c3:d0:d6:dc:ed:6d:84:86:bd:66:43:f1:c7:93:6a:96:22:d5: b9:94:16:fc:c7:5c:01:59:8d:e9:a9:e7:9a:f4:20:e5:fb:cc: e4:d3:10:51:32:bf:86:43:f1:40:08:4e:87:ad:a5:7d:6f:6c: b3:0b:00:c7:9c:b5:1a:f4:20:88:4e:96:15:74:21:96:0d:53: 69:2a:2b:8f:8c:97:f8:02:7c:10:fb:94:6e:95:03:d9:6a:b6: 65:51:91:ff:af:07:45:ae:d0:f3:c9:b0:b9:9a:84:a2:37:33: 05:4d:59:14:1d:ee:39:51:dd:f6:81:91:8c:a8:ca:6b:89:6a: 54:f5:d3:e8:c0:8d:51:0e:77:53:27:e4:bb:61:cf:e9:b2:0e: 78:79:b3:3f:cf:7d:7a:76:7f:8e:f4:21:19:4a:d5:e4:5b:21: 71:ab:77:bd -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEk1DqWFcKPyAez3m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl YjQ5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk M2JjZTIzNzQtOTM0OC00MDk2LTk4MmUtOTJlMTQ5ZTJlOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpnHfN9AXmszRTB0bs3wyL7m40pEH93oxQtZ a0VotZRZWeTWWiHg6c1CB0ezBczCyoM4ijN/y7hEn1LDeErg2hZ5zsVrsKB0gQXv jzUycWdyDTtosAs8Hr11hGBjbQv+hWj3tuRX3k+g9WvSV7erj5XT2Dx6+sehRbYj dO0Y6cx9nnqbfJvr8lNTT8iYmRjiaKQPpVRovuOfiyM+2D1TQaCA5YfhRd192QeD Svpf/lC1ziA4MaeJtAJgEA4pIre58XXZJPTqmhDkuYzXODFj6Yvb1duB81m7g1Lw ropYQLuZZujsV8b/h5ri06dse1fNeDNohfLBbq3Y42Hh38EeMwIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFFqYdTwXcH2XEstcm4Kie3/kfxjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0 OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvM2E1NmY2YzAtZThmOC0z NzVhLThkODYtZTRiNjJjNGY2M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw M2E2ZWViNDkuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBATR3fAD BAHR3fwDBALY1TADBAPY1TgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfsLJyRZQdG9JkAr4RzKWm8KzUbSq RWvh8BCvtIuVwoMKU/vHMRXhEQ0MkKBZPXwJDRoCR52BnygSCTyqUhrY9pCbenZm uwouPuyaapifoYuhMLF3OKh21rckw9DW3O1thIa9ZkPxx5NqliLVuZQW/MdcAVmN 6annmvQg5fvM5NMQUTK/hkPxQAhOh62lfW9sswsAx5y1GvQgiE6WFXQhlg1TaSor j4yX+AJ8EPuUbpUD2Wq2ZVGR/68HRa7Q88mwuZqEojczBU1ZFB3uOVHd9oGRjKjK a4lqVPXT6MCNUQ53Uyfku2HP6bIOeHmzP899enZ/jvQhGUrV5Fshcat3vQ== -----END CERTIFICATE-----Generated at Fri Apr 11 21:11:09 2025 by rpki-client