$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa File: b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa (raw, json) Hash identifier: BW1ffiaT2OmaDZAl+EwEYWKPF3ZaAw4N/ReGKMHyAbQ= Subject key identifier: 9D:C3:27:2A:F4:80:09:9B:4D:7C:B8:80:7F:78:83:97:5A:A6:A8:C8 Certificate issuer: /CN=ce440a32-2e1e-4948-9661-7ae2aa059c20 Certificate serial: 010D0C9F43285849393E7AE1BADCBC8B7B648100 Authority key identifier: 8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 13319 IP address blocks: 104.192.232.0/22 maxlen: 24 199.167.116.0/22 maxlen: 24 199.246.168.0/23 maxlen: 24 209.87.224.0/19 maxlen: 24 216.106.96.0/20 maxlen: 24 2607:f0b0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:7a:e1:ba:dc:bc:8b:7b:64:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce440a32-2e1e-4948-9661-7ae2aa059c20 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=cb4681d3-981a-4566-a22e-6c4cd480fec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:7e:cc:8a:1f:f0:89:e2:f6:f3:8d:72:91: 95:30:24:a9:09:16:55:de:bc:4b:68:1d:98:64:3c: 61:43:14:09:13:0f:31:4d:76:30:ce:ee:2d:87:e0: 1e:2e:ff:13:71:f8:bc:fe:27:80:2e:b9:00:d1:48: b7:da:51:12:50:f6:2b:8d:a8:89:00:29:2e:90:e0: e8:57:cb:b2:02:e6:3c:ae:62:23:2a:6f:46:89:05: ae:b5:bd:81:f4:9a:63:30:4f:ab:36:5e:86:17:f4: aa:10:13:8b:cb:63:f4:9a:65:7f:02:05:b5:39:03: 3c:ae:86:2b:bc:c6:16:a7:e1:15:a8:99:28:2e:72: 91:31:01:be:1c:39:ae:5f:35:32:81:8a:15:56:eb: 7b:67:dd:c5:01:8d:f8:af:3c:5f:a2:18:bd:bc:3f: 4e:75:b2:2a:4d:ba:21:1e:33:f7:14:ed:29:97:c8: e1:bb:07:af:68:52:5a:f4:e6:9c:8a:e5:0d:44:35: cf:45:23:16:59:4c:e2:ed:c1:f5:80:96:a0:6b:92: 71:4e:71:dd:f1:e4:77:e8:20:19:d1:68:d1:ca:a5: 1c:71:d0:6a:22:18:9e:4c:13:9d:ac:a8:6a:c2:f0: 91:c8:b4:ef:b7:f6:a3:6f:24:3f:a5:da:0c:ee:cc: 9d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C3:27:2A:F4:80:09:9B:4D:7C:B8:80:7F:78:83:97:5A:A6:A8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/b1fb16a3-bfd3-3c73-93f4-56c6567e67d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20/ce440a32-2e1e-4948-9661-7ae2aa059c20.crl X509v3 Authority Key Identifier: keyid:8E:A5:2B:D0:10:F2:A4:82:49:D9:0F:64:B8:29:2C:9A:6B:58:F6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce440a32-2e1e-4948-9661-7ae2aa059c20.cer sbgp-ipAddrBlock: critical IPv4: 104.192.232.0/22 199.167.116.0/22 199.246.168.0/23 209.87.224.0/19 216.106.96.0/20 IPv6: 2607:f0b0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:87:21:8b:19:65:b8:26:ed:44:16:ef:4d:ae:67:ec:45:4d: 7d:dd:00:ae:c5:3d:73:49:7c:2a:6b:67:ac:49:bc:60:3a:05: 3b:7b:99:5b:f2:b3:58:d9:32:e8:78:3a:3a:3f:46:7f:e7:03: 20:9d:51:66:75:dc:0c:68:d1:61:bc:e7:5a:cd:08:86:9b:64: 55:d6:b1:ec:af:fe:c9:50:57:6d:e2:0b:c4:52:9a:fd:64:5e: e6:25:f4:be:6d:97:bc:f5:33:0d:8d:58:17:42:c9:30:90:80: 57:59:24:d6:af:6f:1c:ce:3e:c4:8b:01:31:d0:ae:e4:cf:6f: d5:ff:93:0c:ad:86:b6:62:82:55:1f:3d:3b:ad:9c:43:2b:56: 48:7b:0e:b1:57:2a:43:b4:bf:98:9f:ef:8b:5f:7a:e6:55:95: 64:49:0a:cf:b2:d7:2a:cd:30:27:77:f0:1f:9d:0e:9c:f0:b3: 6f:29:6d:53:b1:77:9c:b9:e6:41:c7:e0:54:13:6b:d7:8f:6c: ff:7b:e8:64:16:b9:fc:26:4f:4f:2e:85:12:6a:b6:c8:df:2a: a1:9c:60:29:eb:a5:6d:5c:8c:20:3a:ee:be:d8:79:16:70:d0: 71:e7:0b:d2:de:32:cc:d5:dd:04:cb:54:eb:52:00:55:a4:3b: 43:09:77:0c -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEk5Pnrhuty8i3tkgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0NDBhMzItMmUxZS00OTQ4LTk2NjEtN2FlMmFhMDU5 YzIwMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk Y2I0NjgxZDMtOTgxYS00NTY2LWEyMmUtNmM0Y2Q0ODBmZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17R+zIof8Ini9vONcpGVMCSpCRZV3rxLaB2Y ZDxhQxQJEw8xTXYwzu4th+AeLv8Tcfi8/ieALrkA0Ui32lESUPYrjaiJACkukODo V8uyAuY8rmIjKm9GiQWutb2B9JpjME+rNl6GF/SqEBOLy2P0mmV/AgW1OQM8roYr vMYWp+EVqJkoLnKRMQG+HDmuXzUygYoVVut7Z93FAY34rzxfohi9vD9OdbIqTboh HjP3FO0pl8jhuwevaFJa9OaciuUNRDXPRSMWWUzi7cH1gJaga5JxTnHd8eR36CAZ 0WjRyqUccdBqIhieTBOdrKhqwvCRyLTvt/ajbyQ/pdoM7sydcQIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFJ3DJyr0gAmbTXy4gH94g5dapqjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTQ0 MGEzMi0yZTFlLTQ5NDgtOTY2MS03YWUyYWEwNTljMjAvYjFmYjE2YTMtYmZkMy0z YzczLTkzZjQtNTZjNjU2N2U2N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U0NDBhMzItMmUxZS00OTQ4LTk2 NjEtN2FlMmFhMDU5YzIwL2NlNDQwYTMyLTJlMWUtNDk0OC05NjYxLTdhZTJhYTA1 OWMyMC5jcmwwHwYDVR0jBBgwFoAUjqUr0BDypIJJ2Q9kuCksmmtY9lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTQ0MGEzMi0yZTFlLTQ5NDgtOTY2MS03YWUy YWEwNTljMjAuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCaMDoAwQC x6d0AwQBx/aoAwQF0VfgAwQE2GpgMA0EAgACMAcDBQAmB/CwMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHKH IYsZZbgm7UQW702uZ+xFTX3dAK7FPXNJfCprZ6xJvGA6BTt7mVvys1jZMuh4Ojo/ Rn/nAyCdUWZ13Axo0WG851rNCIabZFXWseyv/slQV23iC8RSmv1kXuYl9L5tl7z1 Mw2NWBdCyTCQgFdZJNavbxzOPsSLATHQruTPb9X/kwythrZiglUfPTutnEMrVkh7 DrFXKkO0v5if74tfeuZVlWRJCs+y1yrNMCd38B+dDpzws28pbVOxd5y55kHH4FQT a9ePbP976GQWufwmT08uhRJqtsjfKqGcYCnrpW1cjCA67r7YeRZw0HHnC9LeMszV 3QTLVOtSAFWkO0MJdww= -----END CERTIFICATE-----Generated at Fri Apr 4 16:04:54 2025 by rpki-client