$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/a1e8d2b7-d17d-3747-80bc-b3cd8d16829e.roa File: a1e8d2b7-d17d-3747-80bc-b3cd8d16829e.roa (raw, json) Hash identifier: kJbm0Av3hxt8qXxe5iF/xfQFOzxeCEmiOVGM1ffe9Hc= Subject key identifier: D5:E4:88:2E:DB:32:B6:D7:C0:10:C6:43:28:35:CA:D0:51:EF:75:A4 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584890D7E1E555056B65F256D380 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/a1e8d2b7-d17d-3747-80bc-b3cd8d16829e.roa Signing time: Thu 16 Jan 2025 17:18:16 +0000 ROA not before: Thu 16 Jan 2025 17:18:16 +0000 ROA not after: Wed 16 Apr 2025 16:18:16 +0000 asID: 7018 IP address blocks: 69.73.151.0/24 maxlen: 24 72.9.236.0/24 maxlen: 24 75.127.76.0/24 maxlen: 24 207.210.109.0/24 maxlen: 24 207.210.125.0/24 maxlen: 24 216.180.244.0/24 maxlen: 24 216.180.246.0/24 maxlen: 24 216.180.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:d7:e1:e5:55:05:6b:65:f2:56:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jan 16 17:18:16 2025 GMT Not After : Apr 16 16:18:16 2025 GMT Subject: CN=dc0b9618-a2de-4c90-a097-d86be30d3ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2b:04:54:73:a4:6b:d7:56:21:7c:96:12:73: 95:44:61:75:a7:45:9d:04:62:47:ee:53:44:37:07: b3:36:68:98:af:b8:57:19:0f:00:93:ac:d1:9d:ba: 38:2c:34:4e:4c:b7:3c:a9:2e:36:de:69:9b:5d:2e: 41:4d:2e:83:d7:65:84:20:93:4e:08:99:d5:d1:78: 6b:82:5b:37:2e:74:57:3b:e8:ac:7e:72:2f:db:16: 6c:a8:9d:3f:eb:e5:2a:52:3c:ff:39:02:c1:af:70: 79:46:a2:fe:a8:ba:25:35:e0:86:04:88:5a:c2:00: 93:04:80:72:4c:54:4e:7b:91:56:67:0f:08:9f:bf: 04:f3:17:db:71:ff:59:5d:1f:46:1a:bb:8b:7a:fc: e8:65:23:83:42:6f:27:0f:00:44:04:05:3b:26:e5: 58:1b:7e:0f:ab:a6:53:69:8e:ee:53:f4:85:c7:28: 7c:b0:ff:8f:eb:61:9e:47:3a:f7:7a:33:c9:3a:63: 38:92:c1:c4:e7:aa:dd:67:90:18:4c:c7:fb:e6:40: e4:11:8c:4b:4a:a0:58:58:3f:2e:dc:b4:a4:17:be: 65:fc:22:6b:c5:42:9f:63:00:8e:a7:02:83:2c:a0: df:80:d9:cc:a8:62:5c:81:cf:61:d3:e8:ca:6f:de: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E4:88:2E:DB:32:B6:D7:C0:10:C6:43:28:35:CA:D0:51:EF:75:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/a1e8d2b7-d17d-3747-80bc-b3cd8d16829e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 69.73.151.0/24 72.9.236.0/24 75.127.76.0/24 207.210.109.0/24 207.210.125.0/24 216.180.244.0/24 216.180.246.0/24 216.180.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:eb:7d:71:6e:f1:e1:1f:7e:b4:54:cc:0e:4b:fb:2f:68:8c: ef:9a:5a:38:bf:fc:00:7c:59:8d:b5:8f:87:78:ab:4d:53:0c: 87:ca:21:e5:af:d0:26:e0:76:92:45:7b:c7:e7:03:c6:34:17: 08:dd:05:14:2c:6a:bb:9e:53:6f:fa:96:b6:99:f2:79:e9:94: b6:b3:12:4f:71:12:cb:c9:d1:95:5f:85:43:7d:26:8f:1f:6e: 94:48:54:c9:03:42:78:56:bd:0f:3e:60:2a:54:f1:18:08:d4: 16:0b:e9:fd:db:61:88:95:10:7a:91:a9:1f:b0:68:35:b4:a7: c5:22:c9:09:6d:bc:9a:7d:c7:b4:4d:a7:28:cb:9e:21:39:4d: 56:8a:fd:a3:b0:ac:28:07:bf:f0:e3:8d:03:b6:97:98:94:53: 5c:85:8a:2e:ff:09:3a:18:54:a9:4d:72:6b:af:75:b9:a5:32: 9a:5a:2d:7c:18:75:bf:58:d3:d5:0c:56:c2:58:a5:81:3e:d2: fb:c8:b2:bd:20:46:cf:0e:f0:c7:9b:b8:d5:72:3f:ef:67:f5: ac:4e:9f:1d:c7:9e:6a:87:3a:e3:1f:6c:ce:eb:18:5a:48:20: 9d:19:cf:94:34:6f:05:45:19:46:b3:0f:10:04:42:77:62:8b: 6f:0f:92:b9 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEiQ1+HlVQVrZfJW04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDExNjE3MTgxNloXDTI1MDQxNjE2MTgxNlowLzEtMCsGA1UEAxMk ZGMwYjk2MTgtYTJkZS00YzkwLWEwOTctZDg2YmUzMGQzZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSsEVHOka9dWIXyWEnOVRGF1p0WdBGJH7lNE NwezNmiYr7hXGQ8Ak6zRnbo4LDROTLc8qS423mmbXS5BTS6D12WEIJNOCJnV0Xhr gls3LnRXO+isfnIv2xZsqJ0/6+UqUjz/OQLBr3B5RqL+qLolNeCGBIhawgCTBIBy TFROe5FWZw8In78E8xfbcf9ZXR9GGruLevzoZSODQm8nDwBEBAU7JuVYG34Pq6ZT aY7uU/SFxyh8sP+P62GeRzr3ejPJOmM4ksHE56rdZ5AYTMf75kDkEYxLSqBYWD8u 3LSkF75l/CJrxUKfYwCOpwKDLKDfgNnMqGJcgc9h0+jKb94T4wIDAQABo4IDfzCC A3swHQYDVR0OBBYEFNXkiC7bMrbXwBDGQyg1ytBR73WkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYTFlOGQyYjctZDE3ZC0z NzQ3LTgwYmMtYjNjZDhkMTY4MjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQARUmXAwQA SAnsAwQAS39MAwQAz9JtAwQAz9J9AwQA2LT0AwQA2LT2AwQA2LT8MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACrrfXFu8eEffrRUzA5L+y9ojO+aWji//AB8WY21j4d4q01TDIfKIeWv0CbgdpJF e8fnA8Y0FwjdBRQsarueU2/6lraZ8nnplLazEk9xEsvJ0ZVfhUN9Jo8fbpRIVMkD QnhWvQ8+YCpU8RgI1BYL6f3bYYiVEHqRqR+waDW0p8UiyQltvJp9x7RNpyjLniE5 TVaK/aOwrCgHv/DjjQO2l5iUU1yFii7/CToYVKlNcmuvdbmlMppaLXwYdb9Y09UM VsJYpYE+0vvIsr0gRs8O8MebuNVyP+9n9axOnx3HnmqHOuMfbM7rGFpIIJ0Zz5Q0 bwVFGUazDxAEQndii28Pkrk= -----END CERTIFICATE-----Generated at Fri Apr 4 20:57:34 2025 by rpki-client