$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d8019c66-2f22-3300-91b3-dde9e6480d9e.roa File: d8019c66-2f22-3300-91b3-dde9e6480d9e.roa (raw, json) Hash identifier: TMq2/vPecTGAbirpIfkVzRoC9KmFCUjc3hRa9V4T0cQ= Subject key identifier: C1:78:93:42:B6:D9:FB:5A:DB:D3:01:1B:A9:32:6F:52:D6:E2:9B:09 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F65BDF1EA2215B6954CE4080 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d8019c66-2f22-3300-91b3-dde9e6480d9e.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 60144 IP address blocks: 207.226.64.0/22 maxlen: 24 207.226.68.0/24 maxlen: 24 207.226.69.0/24 maxlen: 24 207.226.70.0/24 maxlen: 24 207.226.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:df:1e:a2:21:5b:69:54:ce:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=e0a075b6-db91-4192-8387-02137caf35cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c1:2b:cc:e0:d3:7c:8d:39:92:96:4e:f1:42: 38:0f:0e:09:0f:16:4f:2b:3f:93:4b:5e:7a:52:fd: 4d:f9:95:c5:15:8d:56:ec:b6:e2:0f:07:6e:ca:63: f9:5b:23:f3:30:c2:0c:33:b4:7b:28:aa:21:b5:93: 20:c2:2a:50:f3:6d:ef:10:5c:ad:6f:ee:9b:ee:d3: a0:36:c3:9d:f7:0a:e0:69:d0:80:f7:06:87:0a:cc: 99:13:76:06:e0:44:b0:96:48:fb:c5:54:cf:a3:65: 1d:c0:3c:0e:8a:f9:78:c4:55:18:09:de:ab:94:2a: a1:e3:c3:bb:8d:09:98:80:87:ce:9d:73:4b:38:60: 15:3d:5b:ee:21:fa:db:fe:df:52:89:80:23:ad:9e: eb:94:ad:c3:75:d7:cf:1b:b9:a6:d8:9d:7c:f3:55: a2:f5:c6:df:6e:aa:ee:af:97:e5:0f:25:60:cf:4f: 0b:2b:eb:b6:66:74:00:b0:42:c3:7a:f0:b5:c6:de: d4:34:ea:e9:5b:34:6f:a2:58:4f:d4:b0:b5:e3:bc: 49:36:8b:66:d9:f4:16:22:ec:ee:3f:b3:f3:02:60: e1:e7:46:a6:02:b7:11:be:db:6d:ff:ee:d1:b7:49: 58:c7:fb:cb:08:00:cf:f6:50:bf:ee:cb:bb:cb:3c: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:78:93:42:B6:D9:FB:5A:DB:D3:01:1B:A9:32:6F:52:D6:E2:9B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d8019c66-2f22-3300-91b3-dde9e6480d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 207.226.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ee:fe:e1:84:70:79:4c:c8:a3:3a:2e:b8:7c:76:6c:b6:3c: 4a:11:81:b8:d8:8a:39:30:98:aa:4f:32:d7:d4:9f:65:ec:4d: c3:e4:ea:ca:40:fb:d7:b1:7d:0d:cb:8c:f3:d1:f3:bf:12:b8: 33:46:56:04:0a:f8:56:14:01:b6:75:7e:ce:25:3a:be:f9:e7: dd:8f:39:d4:c5:6c:d1:28:28:e0:0d:de:8e:90:43:67:84:94: 10:08:d0:a9:fd:5f:f4:c9:de:9f:61:e0:f1:ff:8e:9a:a0:bd: 13:63:f0:00:6e:7f:09:79:a4:d7:16:69:34:a9:06:b7:dc:bb: ff:59:92:29:76:46:e7:4c:25:72:54:4a:48:17:31:8b:d6:a4: 67:4b:07:b4:7c:d2:98:35:27:dc:ab:c8:1c:02:e6:e0:18:c1: 9b:31:48:27:46:e3:9c:72:79:85:b4:3c:e2:bb:94:be:8b:23: b9:8b:67:1b:86:aa:cd:54:5f:b2:62:a3:99:8d:f8:4b:2e:dd: 89:76:f4:ea:16:09:c5:7c:d8:34:bb:aa:29:62:f9:97:d1:29: 78:f3:4c:ec:f0:1b:3a:f7:bc:05:72:0a:87:37:93:28:b9:ec: e9:68:89:79:b2:1b:f5:d6:b0:c4:f1:f5:91:d0:ec:3e:f7:61: 17:cc:3c:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W98eoiFbaVTOQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZTBhMDc1YjYtZGI5MS00MTkyLTgzODctMDIxMzdjYWYzNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucErzODTfI05kpZO8UI4Dw4JDxZPKz+TS156 Uv1N+ZXFFY1W7LbiDwduymP5WyPzMMIMM7R7KKohtZMgwipQ823vEFytb+6b7tOg NsOd9wrgadCA9waHCsyZE3YG4ESwlkj7xVTPo2UdwDwOivl4xFUYCd6rlCqh48O7 jQmYgIfOnXNLOGAVPVvuIfrb/t9SiYAjrZ7rlK3DddfPG7mm2J1881Wi9cbfbqru r5flDyVgz08LK+u2ZnQAsELDevC1xt7UNOrpWzRvolhP1LC147xJNotm2fQWIuzu P7PzAmDh50amArcRvttt/+7Rt0lYx/vLCADP9lC/7su7yzzw1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF4k0K22fta29MBG6kyb1LW4psJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZDgwMTljNjYtMmYyMi0z MzAwLTkxYjMtZGRlOWU2NDgwZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz+JAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHu/uGEcHlMyKM6Lrh8dmy2PEoRgbjYijkwmKpPMtfUn2XsTcPk6spA +9exfQ3LjPPR878SuDNGVgQK+FYUAbZ1fs4lOr75592POdTFbNEoKOAN3o6QQ2eE lBAI0Kn9X/TJ3p9h4PH/jpqgvRNj8ABufwl5pNcWaTSpBrfcu/9Zkil2RudMJXJU SkgXMYvWpGdLB7R80pg1J9yryBwC5uAYwZsxSCdG45xyeYW0POK7lL6LI7mLZxuG qs1UX7Jio5mN+Esu3Yl29OoWCcV82DS7qili+ZfRKXjzTOzwGzr3vAVyCoc3kyi5 7OloiXmyG/XWsMTx9ZHQ7D73YRfMPDo= -----END CERTIFICATE-----Generated at Sun Apr 6 10:34:08 2025 by rpki-client