$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa File: 1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa (raw, json) Hash identifier: 2gnMq9KHXe6mzXblGFFZ5ia1Z33PjnDnlpfF7abCx4I= Subject key identifier: 6E:78:A6:DF:A4:54:77:86:29:A3:73:AD:DB:26:97:95:A4:68:47:DE Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F43285849665FC4ECA37D083F26B9FE80 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa Signing time: Thu 03 Apr 2025 04:59:14 +0000 ROA not before: Thu 03 Apr 2025 04:59:14 +0000 ROA not after: Wed 02 Jul 2025 04:59:14 +0000 asID: 63414 IP address blocks: 64.21.228.0/22 maxlen: 24 64.255.144.0/21 maxlen: 24 66.163.144.0/21 maxlen: 24 66.163.152.0/24 maxlen: 24 66.163.155.0/24 maxlen: 24 66.163.156.0/22 maxlen: 24 69.178.192.0/22 maxlen: 24 69.178.196.0/23 maxlen: 24 69.178.200.0/22 maxlen: 24 76.10.124.0/22 maxlen: 24 209.243.0.0/21 maxlen: 24 209.243.8.0/22 maxlen: 24 209.243.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:66:5f:c4:ec:a3:7d:08:3f:26:b9:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Apr 3 04:59:14 2025 GMT Not After : Jul 2 04:59:14 2025 GMT Subject: CN=49a0bf5a-9c65-4aa9-8352-02aba4ccf1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:ed:f7:48:b7:bc:5a:09:fe:a3:e4:82:fc: 58:fd:98:8a:3d:f6:1c:80:44:bf:1b:1c:4e:b7:5d: ec:6d:bd:f7:f7:1c:90:dc:3b:fb:f6:7d:12:7b:65: 9c:8b:fb:12:27:d8:34:3f:da:da:13:52:1d:8d:78: 03:46:16:90:0a:1f:46:06:5d:2e:7a:23:3f:75:45: 96:d6:11:bc:58:96:25:f9:3e:64:7a:06:cc:5f:84: 8e:5b:55:06:20:07:ed:a4:16:d6:77:d5:1b:4c:6b: 9f:4f:9a:9e:11:d7:79:21:bf:ea:74:84:41:0d:fe: e5:e9:e5:93:44:48:49:4a:0e:77:c3:b1:12:87:3e: 38:44:49:fd:49:cf:10:04:39:56:de:71:9e:a2:60: 3b:70:77:21:26:3a:14:47:36:1b:2d:b1:7a:6d:81: 8c:d4:79:e5:aa:97:79:25:b2:9a:eb:fe:ff:cf:00: ab:59:16:37:93:06:bc:9a:d1:94:0e:01:6b:62:9d: 03:fd:fa:a0:87:1e:d4:b5:f0:2d:aa:6f:62:cf:68: 0a:45:a2:15:c0:cb:02:ad:38:e1:d1:04:55:2d:cd: 0e:01:3a:d9:6b:59:31:09:0f:87:e6:54:33:3f:b0: f3:ab:a0:5e:65:ad:be:2b:91:fa:5c:90:74:e6:1c: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:78:A6:DF:A4:54:77:86:29:A3:73:AD:DB:26:97:95:A4:68:47:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/1283eb3a-04e0-32f2-b54b-1bf5a9618c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.228.0/22 64.255.144.0/21 66.163.144.0-66.163.152.255 66.163.155.0-66.163.159.255 69.178.192.0-69.178.197.255 69.178.200.0/22 76.10.124.0/22 209.243.0.0-209.243.11.255 209.243.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:2e:89:67:d6:ec:e4:28:5a:b4:b0:41:a0:a6:e7:ca:84:09: 22:70:96:85:9a:df:97:af:47:93:11:50:d8:eb:bf:e4:5d:d0: 67:76:6e:96:da:ff:f2:b6:85:6b:08:23:7e:d5:26:28:d0:54: 01:f9:c4:6c:e6:10:2e:61:f5:d9:a8:c7:22:a6:86:f5:98:c9: 73:09:e9:6d:a9:a9:4d:31:51:01:ac:6c:80:db:4d:07:3c:97: 94:27:d0:e4:bd:9d:0f:f4:8c:b5:82:cb:1b:39:b2:22:73:fd: 13:54:90:af:e1:1f:1d:b3:f7:95:1e:a8:16:cc:db:29:2d:74: 0d:81:7f:ab:71:5f:b0:80:46:43:fb:cd:46:1c:16:65:74:c6: 4b:b0:02:77:b7:cc:0d:4a:67:69:30:d5:8c:99:82:43:50:66: dc:26:fb:08:5c:c6:1f:5d:6e:d6:53:b6:9d:b7:ae:ff:d7:66: e3:6a:b7:84:10:18:d2:cc:e9:96:3c:e0:c2:2c:0b:86:4c:d7: 1b:55:d3:eb:05:ce:08:c4:52:c7:11:a9:25:8c:22:f3:b7:25: 6f:6d:2e:18:83:31:a0:aa:cb:03:9e:f8:6f:df:79:1b:fb:86: 34:a6:23:a8:b5:21:22:8a:0f:a0:1a:db:c0:89:98:c8:f6:e4: 65:a3:44:80 -----BEGIN CERTIFICATE----- MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWElmX8Tso30IPya5/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MDQwMzA0NTkxNFoXDTI1MDcwMjA0NTkxNFowLzEtMCsGA1UEAxMk NDlhMGJmNWEtOWM2NS00YWE5LTgzNTItMDJhYmE0Y2NmMWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqzt90i3vFoJ/qPkgvxY/ZiKPfYcgES/GxxO t13sbb339xyQ3Dv79n0Se2Wci/sSJ9g0P9raE1IdjXgDRhaQCh9GBl0ueiM/dUWW 1hG8WJYl+T5kegbMX4SOW1UGIAftpBbWd9UbTGufT5qeEdd5Ib/qdIRBDf7l6eWT REhJSg53w7EShz44REn9Sc8QBDlW3nGeomA7cHchJjoURzYbLbF6bYGM1Hnlqpd5 JbKa6/7/zwCrWRY3kwa8mtGUDgFrYp0D/fqghx7UtfAtqm9iz2gKRaIVwMsCrTjh 0QRVLc0OATrZa1kxCQ+H5lQzP7Dzq6BeZa2+K5H6XJB05hyfoQIDAQABo4IDpDCC A6AwHQYDVR0OBBYEFG54pt+kVHeGKaNzrdsml5WkaEfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvMTI4M2ViM2EtMDRlMC0z MmYyLWI1NGItMWJmNWE5NjE4YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVAwQCQBXkAwQD QP+QMAwDBARCo5ADBABCo5gwDAMEAEKjmwMEBUKjgDAMAwQGRbLAAwQBRbLEAwQC RbLIAwQCTAp8MAsDAwDR8wMEAtHzCAMEA9HzEDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnLoln1uzkKFq0 sEGgpufKhAkicJaFmt+Xr0eTEVDY67/kXdBndm6W2v/ytoVrCCN+1SYo0FQB+cRs 5hAuYfXZqMcipob1mMlzCeltqalNMVEBrGyA200HPJeUJ9DkvZ0P9Iy1gssbObIi c/0TVJCv4R8ds/eVHqgWzNspLXQNgX+rcV+wgEZD+81GHBZldMZLsAJ3t8wNSmdp MNWMmYJDUGbcJvsIXMYfXW7WU7adt67/12bjareEEBjSzOmWPODCLAuGTNcbVdPr Bc4IxFLHEakljCLztyVvbS4YgzGgqssDnvhv33kb+4Y0piOotSEiig+gGtvAiZjI 9uRlo0SA -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:59 2025 by rpki-client