$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3e519e15-ed2f-37f7-b867-1bc35f84f338.roa File: 3e519e15-ed2f-37f7-b867-1bc35f84f338.roa (raw, json) Hash identifier: 2DNlz+oRY+zAWr+DPOA9P8qwL2MNM3ADwusY5ZIQ+zM= Subject key identifier: 28:B9:FC:93:CB:3C:0E:77:8D:C2:EF:47:99:B4:24:95:50:3C:56:BA Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584894A5E251CF92F71A7CE16DE0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3e519e15-ed2f-37f7-b867-1bc35f84f338.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 62240 IP address blocks: 65.254.57.0/24 maxlen: 24 65.254.60.0/24 maxlen: 24 72.9.230.0/24 maxlen: 24 72.9.245.0/24 maxlen: 24 72.9.247.0/24 maxlen: 24 75.127.119.0/24 maxlen: 24 205.251.132.0/24 maxlen: 24 205.251.133.0/24 maxlen: 24 205.251.134.0/24 maxlen: 24 207.210.76.0/24 maxlen: 24 207.210.77.0/24 maxlen: 24 207.210.78.0/24 maxlen: 24 207.210.81.0/24 maxlen: 24 209.51.148.0/24 maxlen: 24 209.51.149.0/24 maxlen: 24 209.51.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e2:51:cf:92:f7:1a:7c:e1:6d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=bdc189f5-bb3e-4007-992c-b3d4dfe12baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:d6:5c:b1:cb:4f:7b:66:be:fa:d7:9f:f5: 91:a9:ef:4d:14:94:e3:f4:b1:c2:44:98:13:b5:f7: 60:6f:16:d5:8b:5b:88:8d:57:01:c4:00:6a:60:a1: 49:aa:2f:2a:fb:f4:8a:0e:2d:47:96:a6:bb:6e:a4: ef:6e:93:37:ae:f9:3e:1b:83:25:4f:8d:3e:12:49: 06:c6:d8:4a:89:b8:a4:b1:7d:65:e7:21:83:85:4d: c5:68:c4:9b:e7:05:80:21:e4:60:5f:54:b9:96:1e: 35:ca:14:f6:d0:3b:0f:ef:33:f7:6f:93:cc:04:a0: 26:80:ca:a8:20:1b:88:a3:34:8d:d0:71:44:ed:96: b1:ea:f5:59:6d:32:b5:11:fe:e2:8a:ab:12:58:c2: ef:40:3c:a9:87:09:c1:34:82:da:48:1b:47:ff:88: 25:a0:79:28:e8:eb:e0:2f:fb:7f:91:5a:80:54:20: a2:7a:83:f3:65:1a:07:c2:98:9c:3e:bd:97:ea:ba: 5e:5c:56:68:08:14:4e:cb:84:5c:ae:f1:70:d8:69: 1c:22:b6:fb:ff:5e:49:c8:75:a3:d7:42:59:85:c7: 17:39:6c:9b:31:7e:24:70:e5:91:42:d3:4b:c3:d3: 81:a3:7d:e9:c3:e8:b6:58:8c:71:88:da:35:bf:f2: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:FC:93:CB:3C:0E:77:8D:C2:EF:47:99:B4:24:95:50:3C:56:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/3e519e15-ed2f-37f7-b867-1bc35f84f338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 65.254.57.0/24 65.254.60.0/24 72.9.230.0/24 72.9.245.0/24 72.9.247.0/24 75.127.119.0/24 205.251.132.0-205.251.134.255 207.210.76.0-207.210.78.255 207.210.81.0/24 209.51.148.0-209.51.150.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e0:ca:44:45:96:ed:b5:3c:3e:06:4f:d4:30:aa:1a:0e:28: e0:1b:04:02:a5:46:cf:1e:78:d5:62:d4:30:79:9e:54:72:d7: be:05:99:3b:07:34:6a:4e:6f:64:0a:cf:10:0b:f8:af:c0:e6: 7f:e0:9d:54:11:f0:2f:a6:46:e4:60:85:19:7b:47:66:8b:b4: 38:4f:98:57:ff:99:6e:d8:b7:19:68:60:e0:61:ff:c3:c1:1d: 3e:76:9a:d1:d2:79:62:5b:cd:aa:9b:f5:ad:aa:eb:8c:2c:b3: 79:77:db:29:6c:f7:7e:ae:8b:1a:55:59:01:b9:d3:ca:68:8e: f3:f9:ca:96:03:a4:3e:49:5b:5d:2b:e6:79:6e:f6:f2:3e:54: 82:84:78:b8:f8:1a:91:48:2d:07:c3:a9:95:6a:b5:b8:fe:85: ad:e2:ff:23:cb:47:e2:d7:02:fa:be:1e:41:2e:5a:98:72:34: fd:1c:02:fc:53:14:a0:9e:a8:83:21:a2:2b:e4:2b:f8:39:1e: 7c:91:a4:c9:81:82:24:7e:19:ef:50:77:96:72:ca:e3:cf:f5: ec:79:45:19:67:0f:46:e1:90:42:36:fd:ba:19:f2:bc:e1:64: 90:9a:52:fa:91:8f:a9:e4:82:c2:90:ef:57:75:e7:e1:40:33: 2c:c6:b2:49 -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWEiUpeJRz5L3GnzhbeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk YmRjMTg5ZjUtYmIzZS00MDA3LTk5MmMtYjNkNGRmZTEyYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4jWXLHLT3tmvvrXn/WRqe9NFJTj9LHCRJgT tfdgbxbVi1uIjVcBxABqYKFJqi8q+/SKDi1Hlqa7bqTvbpM3rvk+G4MlT40+EkkG xthKibiksX1l5yGDhU3FaMSb5wWAIeRgX1S5lh41yhT20DsP7zP3b5PMBKAmgMqo IBuIozSN0HFE7Zax6vVZbTK1Ef7iiqsSWMLvQDyphwnBNILaSBtH/4gloHko6Ovg L/t/kVqAVCCieoPzZRoHwpicPr2X6rpeXFZoCBROy4RcrvFw2GkcIrb7/15JyHWj 10JZhccXOWybMX4kcOWRQtNLw9OBo33pw+i2WIxxiNo1v/Jj0QIDAQABo4IDozCC A58wHQYDVR0OBBYEFCi5/JPLPA53jcLvR5m0JJVQPFa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvM2U1MTllMTUtZWQyZi0z N2Y3LWI4NjctMWJjMzVmODRmMzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAQf45AwQA Qf48AwQASAnmAwQASAn1AwQASAn3AwQAS393MAwDBALN+4QDBADN+4YwDAMEAs/S TAMEAM/STgMEAM/SUTAMAwQC0TOUAwQA0TOWMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF3gykRFlu21PD4G T9QwqhoOKOAbBAKlRs8eeNVi1DB5nlRy174FmTsHNGpOb2QKzxAL+K/A5n/gnVQR 8C+mRuRghRl7R2aLtDhPmFf/mW7YtxloYOBh/8PBHT52mtHSeWJbzaqb9a2q64ws s3l32yls936uixpVWQG508pojvP5ypYDpD5JW10r5nlu9vI+VIKEeLj4GpFILQfD qZVqtbj+ha3i/yPLR+LXAvq+HkEuWphyNP0cAvxTFKCeqIMhoivkK/g5HnyRpMmB giR+Ge9Qd5ZyyuPP9ex5RRlnD0bhkEI2/boZ8rzhZJCaUvqRj6nkgsKQ71d15+FA MyzGskk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:29:06 2025 by rpki-client