$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa File: caf40528-fd91-3c64-8165-eed915d60d9c.roa (raw, json) Hash identifier: TPtN4TpV1VBGqa+UBoUUZ0cYilNgpCvkiCaqbWWcjq0= Subject key identifier: 9B:37:BA:20:C0:16:00:3C:9B:E6:02:A1:36:A6:CC:5A:77:3C:B0:34 Certificate issuer: /CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba Certificate serial: 010D0C9F4328584949FE911C81362FB3CA83BE00 Authority key identifier: 1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 8560 IP address blocks: 158.222.102.0/23 maxlen: 32 162.254.24.0/22 maxlen: 32 192.96.159.0/24 maxlen: 32 192.152.28.0/24 maxlen: 32 192.206.141.0/24 maxlen: 32 208.94.36.0/22 maxlen: 32 2607:b500::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:91:1c:81:36:2f:b3:ca:83:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=7c24e972-a822-4ab6-a93a-0ff1e736eacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:13:8b:d9:dc:2a:ca:91:ee:a9:94:dd:87: 3a:42:1e:92:7a:fd:90:01:67:08:6c:78:48:66:e7: aa:44:45:11:7c:17:ee:fb:14:f3:99:f4:32:2a:82: 09:e4:1e:c9:b0:92:07:01:c2:e5:6d:62:89:28:22: 31:b8:2e:0a:e9:ab:1c:56:eb:ef:ca:f1:53:f1:44: 04:5b:b2:06:be:6f:a0:6f:ef:07:3c:2e:f1:54:35: c3:f8:97:54:21:94:c8:0c:f0:15:42:76:f8:97:87: 80:9e:7a:2b:80:6b:91:0d:1b:06:68:d7:ee:c2:ab: bd:0e:f6:ed:50:57:cc:61:65:b8:6f:00:69:a3:9a: b1:b5:22:5c:5b:8d:d2:a3:0e:ae:9b:c7:4e:70:50: 73:33:5d:b0:ab:59:4e:83:c2:d0:cc:93:28:db:08: 1e:31:2a:95:ea:ce:2d:c4:2d:f2:af:20:b4:7a:ea: fd:d4:27:fd:92:9e:04:50:07:b6:3b:63:22:ea:f8: 49:2a:7c:a3:f2:4e:f3:30:be:b0:3f:e4:4e:a0:a1: bb:b0:cd:c5:e5:9b:71:37:d4:10:ba:b1:30:72:23: 8d:5d:74:8f:d8:c7:25:c0:4a:26:bd:4d:d9:80:f8: 0c:8d:ab:69:f5:10:d0:94:33:fa:58:93:39:f7:67: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:37:BA:20:C0:16:00:3C:9B:E6:02:A1:36:A6:CC:5A:77:3C:B0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/caf40528-fd91-3c64-8165-eed915d60d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.crl X509v3 Authority Key Identifier: keyid:1A:35:5B:4D:FB:45:AB:2E:F6:04:4F:09:EF:1D:C7:3E:F8:39:74:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0eacb3d0-4b6b-4f2c-9dd1-e2875bfd0cba.cer sbgp-ipAddrBlock: critical IPv4: 158.222.102.0/23 162.254.24.0/22 192.96.159.0/24 192.152.28.0/24 192.206.141.0/24 208.94.36.0/22 IPv6: 2607:b500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:7f:bc:84:fe:ef:73:e3:50:11:27:86:32:2a:dc:10:d2:46: b7:f2:3e:fd:77:a5:d1:ca:00:f8:f1:a7:90:2f:45:5e:25:97: 12:9d:51:52:cd:2d:8a:00:ea:17:d1:4c:64:75:44:ac:95:47: 46:14:af:0d:37:04:1c:92:7d:ca:2e:3d:b8:7f:31:5b:40:fc: 40:15:3d:94:2b:3b:37:41:8d:61:a7:01:2d:81:68:69:8a:d5: e5:46:50:bd:2a:7a:2d:d2:2e:8d:ff:36:11:89:c5:d0:dc:fe: ca:71:f1:74:f7:8a:31:b5:3c:01:06:96:a9:89:7f:ea:3b:d7: 90:6b:c2:81:4e:9a:d8:ae:83:4a:c0:36:df:9f:f4:ac:68:f4: 24:9e:1d:e6:33:79:4e:fb:07:c7:ba:cd:82:50:97:f7:3d:e0: 47:1c:ce:2f:45:b4:e9:a5:d3:35:92:1a:3d:37:7e:58:84:36: 66:b9:74:43:b3:d1:41:d2:73:58:79:ae:a3:1e:e1:67:07:b8: fd:ab:66:c6:fe:4e:fc:7c:cb:cf:59:d7:63:a8:92:c8:87:7e: 79:8f:86:9a:af:40:e9:0b:52:a5:84:13:fb:65:99:7d:51:5c: 24:26:ca:da:e8:cd:95:bc:d8:32:c6:26:d2:64:89:1d:a6:da: cc:4d:74:1e -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWElJ/pEcgTYvs8qDvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVhY2IzZDAtNGI2Yi00ZjJjLTlkZDEtZTI4NzViZmQw Y2JhMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk N2MyNGU5NzItYTgyMi00YWI2LWE5M2EtMGZmMWU3MzZlYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf0Ti9ncKsqR7qmU3Yc6Qh6Sev2QAWcIbHhI ZueqREURfBfu+xTzmfQyKoIJ5B7JsJIHAcLlbWKJKCIxuC4K6ascVuvvyvFT8UQE W7IGvm+gb+8HPC7xVDXD+JdUIZTIDPAVQnb4l4eAnnorgGuRDRsGaNfuwqu9Dvbt UFfMYWW4bwBpo5qxtSJcW43Sow6um8dOcFBzM12wq1lOg8LQzJMo2wgeMSqV6s4t xC3yryC0eur91Cf9kp4EUAe2O2Mi6vhJKnyj8k7zML6wP+ROoKG7sM3F5ZtxN9QQ urEwciONXXSP2MclwEomvU3ZgPgMjatp9RDQlDP6WJM592f+bwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFJs3uiDAFgA8m+YCoTamzFp3PLA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFj YjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3NWJmZDBjYmEvY2FmNDA1MjgtZmQ5MS0z YzY0LTgxNjUtZWVkOTE1ZDYwZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGVhY2IzZDAtNGI2Yi00ZjJjLTlk ZDEtZTI4NzViZmQwY2JhLzBlYWNiM2QwLTRiNmItNGYyYy05ZGQxLWUyODc1YmZk MGNiYS5jcmwwHwYDVR0jBBgwFoAUGjVbTftFqy72BE8J7x3HPvg5dGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZWFjYjNkMC00YjZiLTRmMmMtOWRkMS1lMjg3 NWJmZDBjYmEuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBnt5mAwQC ov4YAwQAwGCfAwQAwJgcAwQAwM6NAwQC0F4kMA0EAgACMAcDBQAmB7UAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBALp/vIT+73PjUBEnhjIq3BDSRrfyPv13pdHKAPjxp5AvRV4llxKdUVLNLYoA 6hfRTGR1RKyVR0YUrw03BBySfcouPbh/MVtA/EAVPZQrOzdBjWGnAS2BaGmK1eVG UL0qei3SLo3/NhGJxdDc/spx8XT3ijG1PAEGlqmJf+o715BrwoFOmtiug0rANt+f 9Kxo9CSeHeYzeU77B8e6zYJQl/c94Ecczi9FtOml0zWSGj03fliENma5dEOz0UHS c1h5rqMe4WcHuP2rZsb+Tvx8y89Z12OoksiHfnmPhpqvQOkLUqWEE/tlmX1RXCQm ytrozZW82DLGJtJkiR2m2sxNdB4= -----END CERTIFICATE-----Generated at Wed Apr 9 16:43:38 2025 by rpki-client