$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d5978de5-de11-363c-8105-0036b6008ff2.roa File: d5978de5-de11-363c-8105-0036b6008ff2.roa (raw, json) Hash identifier: t9jXXguCfXQLVYG343tsP8+TlMycYXiJ3kPXj0gnC6w= Subject key identifier: 3B:F6:C8:F8:02:65:EF:AD:43:B9:7E:1F:5C:16:2B:28:42:C4:FD:15 Certificate issuer: /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Certificate serial: 010D0C9F43285848BBE4268F61F1F61B6786F000 Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d5978de5-de11-363c-8105-0036b6008ff2.roa Signing time: Sat 01 Feb 2025 03:22:45 +0000 ROA not before: Sat 01 Feb 2025 03:22:45 +0000 ROA not after: Fri 02 May 2025 02:22:45 +0000 asID: 11878 IP address blocks: 68.235.32.0/24 maxlen: 32 68.235.33.0/24 maxlen: 32 68.235.34.0/24 maxlen: 32 68.235.35.0/24 maxlen: 32 68.235.36.0/24 maxlen: 32 68.235.37.0/24 maxlen: 32 68.235.38.0/24 maxlen: 32 68.235.39.0/24 maxlen: 32 68.235.40.0/24 maxlen: 32 68.235.41.0/24 maxlen: 32 68.235.42.0/24 maxlen: 32 68.235.43.0/24 maxlen: 32 68.235.44.0/24 maxlen: 32 68.235.45.0/24 maxlen: 32 68.235.46.0/24 maxlen: 32 68.235.47.0/24 maxlen: 32 68.235.48.0/24 maxlen: 32 68.235.49.0/24 maxlen: 32 68.235.50.0/24 maxlen: 32 68.235.51.0/24 maxlen: 32 68.235.52.0/24 maxlen: 32 68.235.53.0/24 maxlen: 32 68.235.54.0/24 maxlen: 32 68.235.55.0/24 maxlen: 32 68.235.56.0/24 maxlen: 32 68.235.57.0/24 maxlen: 32 68.235.58.0/24 maxlen: 32 68.235.59.0/24 maxlen: 32 68.235.60.0/24 maxlen: 32 68.235.61.0/24 maxlen: 32 68.235.62.0/24 maxlen: 32 68.235.63.0/24 maxlen: 32 208.77.16.0/24 maxlen: 32 208.77.17.0/24 maxlen: 32 208.77.18.0/24 maxlen: 32 208.77.19.0/24 maxlen: 32 208.77.20.0/24 maxlen: 32 208.77.21.0/24 maxlen: 32 208.77.22.0/24 maxlen: 32 208.77.23.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:e4:26:8f:61:f1:f6:1b:67:86:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Validity Not Before: Feb 1 03:22:45 2025 GMT Not After : May 2 02:22:45 2025 GMT Subject: CN=bf424bcf-a16a-40af-9935-45d80c392349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:be:8b:81:df:bf:c8:cb:0e:ae:0f:ce:67: e8:00:54:25:19:d8:9e:8b:0c:08:c6:c0:f7:ee:fa: 58:3a:be:bc:86:71:86:03:85:67:62:6c:ce:d4:e2: 0f:2e:1b:ef:6f:a0:ac:6f:81:8b:57:d7:53:7e:c8: b3:43:c9:5f:ee:e0:32:9f:c0:4d:4e:a8:5c:3e:2e: b7:d2:cf:93:24:e7:42:cc:3c:5e:ea:0a:75:cf:53: 9f:cc:07:a1:09:4a:8e:c5:47:ba:b2:80:d0:87:cb: 06:14:42:94:37:39:bd:7b:11:3d:6f:fa:09:e3:c6: ba:c1:5e:3e:ff:7b:fa:a5:6c:d1:d1:eb:9e:28:9d: c4:ba:24:2f:5f:11:1c:21:21:4c:ae:07:3b:88:17: fe:73:1f:2a:49:1a:84:d3:8f:7f:72:b8:0b:5d:9b: aa:ac:e9:ad:26:f1:03:bc:45:e3:c3:29:5e:96:c9: b6:33:c1:27:9a:43:a0:95:04:89:4d:49:c9:4b:86: b0:57:9a:25:ce:80:f4:6a:92:9b:bf:77:97:9a:53: 10:27:85:cd:37:d6:6b:53:63:de:58:2e:78:ba:bb: 9c:fd:66:00:c4:ca:0d:ca:f7:67:ad:92:38:bf:e5: 60:b0:2b:77:bb:55:2c:84:9a:cb:04:37:da:4b:d4: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F6:C8:F8:02:65:EF:AD:43:B9:7E:1F:5C:16:2B:28:42:C4:FD:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d5978de5-de11-363c-8105-0036b6008ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl X509v3 Authority Key Identifier: keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer sbgp-ipAddrBlock: critical IPv4: 68.235.32.0/19 208.77.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b1:f5:fa:60:85:66:45:ed:2e:4d:52:60:b1:03:bf:f7:c1: e5:b0:3a:ba:71:12:eb:f7:1e:dc:0a:c2:f3:89:7c:00:5b:70: 69:58:32:a9:a2:6b:df:ce:69:3d:64:7d:3c:c1:73:a2:90:5e: e2:7c:e0:95:b5:f8:83:de:ac:fa:4d:40:46:4d:d0:cd:f6:70: 97:9f:69:ae:92:51:5a:b4:f4:11:b3:3a:e9:a5:52:4b:f7:af: 3a:1a:1c:c9:e2:26:ed:76:65:71:ba:14:15:a1:fe:d6:fb:1f: 02:ff:9a:76:34:9b:ca:ce:1a:a0:e5:0c:25:57:51:1e:f5:cc: 0e:92:85:a5:95:be:d2:3d:c8:5f:c3:e4:46:d5:7a:35:7e:92: 6e:1e:f3:83:ea:ef:bc:44:51:0a:84:77:6e:fb:ba:ad:79:1f: ef:fc:08:84:d7:55:fd:29:32:c2:ac:b1:62:f0:10:75:4e:a2: 1a:ef:db:cd:ef:4d:74:35:fc:16:a8:b9:ad:6d:f6:d8:b7:f2: 50:34:a4:20:d9:8e:11:2d:7f:25:d7:d1:b5:5c:94:b8:64:c4: 0d:d3:3e:dc:bb:f5:a8:70:7b:47:80:37:3a:c0:bd:18:64:f4: 64:d7:61:99:5e:03:e9:93:be:9d:9b:54:a9:35:96:6a:02:c1: 1d:8f:6d:77 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEi75CaPYfH2G2eG8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl MDczMB4XDTI1MDIwMTAzMjI0NVoXDTI1MDUwMjAyMjI0NVowLzEtMCsGA1UEAxMk YmY0MjRiY2YtYTE2YS00MGFmLTk5MzUtNDVkODBjMzkyMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUe+i4Hfv8jLDq4PzmfoAFQlGdieiwwIxsD3 7vpYOr68hnGGA4VnYmzO1OIPLhvvb6Csb4GLV9dTfsizQ8lf7uAyn8BNTqhcPi63 0s+TJOdCzDxe6gp1z1OfzAehCUqOxUe6soDQh8sGFEKUNzm9exE9b/oJ48a6wV4+ /3v6pWzR0eueKJ3EuiQvXxEcISFMrgc7iBf+cx8qSRqE049/crgLXZuqrOmtJvED vEXjwylelsm2M8EnmkOglQSJTUnJS4awV5olzoD0apKbv3eXmlMQJ4XNN9ZrU2Pe WC54uruc/WYAxMoNyvdnrZI4v+VgsCt3u1UshJrLBDfaS9SS6wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDv2yPgCZe+tQ7l+H1wWKyhCxP0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvZDU5NzhkZTUtZGUxMS0z NjNjLTgxMDUtMDAzNmI2MDA4ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj YzMzY2UwNzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFROsgAwQD 0E0QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGSx9fpghWZF7S5NUmCxA7/3weWwOrpxEuv3HtwKwvOJfABb cGlYMqmia9/OaT1kfTzBc6KQXuJ84JW1+IPerPpNQEZN0M32cJefaa6SUVq09BGz OumlUkv3rzoaHMniJu12ZXG6FBWh/tb7HwL/mnY0m8rOGqDlDCVXUR71zA6ShaWV vtI9yF/D5EbVejV+km4e84Pq77xEUQqEd277uq15H+/8CITXVf0pMsKssWLwEHVO ohrv283vTXQ1/Baoua1t9ti38lA0pCDZjhEtfyXX0bVclLhkxA3TPty79ahwe0eA NzrAvRhk9GTXYZleA+mTvp2bVKk1lmoCwR2PbXc= -----END CERTIFICATE-----Generated at Mon Apr 7 13:09:33 2025 by rpki-client