$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ec903bba-158c-3a3d-b9c7-5969c960d37e.roa File: ec903bba-158c-3a3d-b9c7-5969c960d37e.roa (raw, json) Hash identifier: SODLLfqtUVd3LRZzhGuCBYgyjhs5P8ZBfm97lX6pfMo= Subject key identifier: D6:53:DC:84:69:44:28:15:51:9B:27:97:F5:36:EC:E3:45:8C:88:CA Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F432858492184040839869195A5EDB180 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ec903bba-158c-3a3d-b9c7-5969c960d37e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 11300 IP address blocks: 64.49.131.0/24 maxlen: 25 207.241.163.0/24 maxlen: 25 207.241.164.0/24 maxlen: 25 207.241.165.0/24 maxlen: 25 207.241.169.0/24 maxlen: 25 207.241.171.0/24 maxlen: 25 207.241.172.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:04:08:39:86:91:95:a5:ed:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=4579830e-3a5d-4dc4-81f8-45b75c1b56c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:fa:60:b1:51:19:8f:1b:f1:63:a6:8f:83: cc:7b:c4:82:e7:ba:67:aa:d8:69:3c:bf:eb:4a:a7: 45:9d:9e:c7:ec:b3:9e:eb:00:c6:05:d8:da:82:04: 0f:0f:8e:59:fb:8e:c8:fa:f6:5b:08:b4:89:16:2a: 33:24:bc:c0:08:e9:96:5b:33:32:34:38:dc:b1:f2: 7f:ab:83:87:15:f8:1d:60:54:cd:b9:89:f8:e9:ef: cb:9b:e3:c1:ee:dc:bb:4b:55:ca:71:c8:b4:73:2c: df:31:65:90:95:d4:e2:1b:ca:89:75:7a:ea:76:aa: b8:75:81:24:9d:fc:44:66:f5:65:e1:4c:94:4f:d3: 26:dc:ee:28:9a:34:cb:a2:be:ba:5e:77:ae:b3:1c: f3:bb:3f:36:22:4d:e5:20:15:8b:ea:c5:f9:f4:5f: df:52:37:e6:e8:8a:44:bd:0b:bb:9c:88:61:8e:c1: 0d:ff:90:8d:7a:16:bf:c5:20:c3:d0:fa:10:2f:6e: f9:72:56:4e:1a:cf:96:07:96:f0:6a:00:95:69:52: 79:d3:c1:8d:3a:e3:9f:a0:65:6d:45:05:fd:cf:89: 77:5b:5c:99:a8:65:0d:fe:81:40:b0:10:99:9c:5d: 03:64:10:49:5f:73:6d:e3:16:7e:d2:33:08:89:ec: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:53:DC:84:69:44:28:15:51:9B:27:97:F5:36:EC:E3:45:8C:88:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ec903bba-158c-3a3d-b9c7-5969c960d37e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.131.0/24 207.241.163.0-207.241.165.255 207.241.169.0/24 207.241.171.0-207.241.172.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:46:c8:9c:ae:4b:26:9d:18:af:55:60:b9:8e:e9:46:7c:aa: 42:3e:09:27:07:f1:0d:6c:e3:5d:9c:a0:aa:12:aa:53:8b:ca: b9:d5:f7:d6:af:43:25:ef:70:c9:1c:18:84:6b:0f:ad:86:9f: 60:7b:3c:fb:49:ce:7f:fa:d7:77:a1:47:64:a4:d5:52:11:ca: e6:1c:ad:a8:d9:44:d7:87:4b:42:e0:9d:c0:41:ae:f9:8e:c2: cb:c7:f6:84:91:10:ac:38:73:27:bd:12:a0:6b:70:73:cf:70: 88:d7:c1:92:95:a4:b9:b1:51:3d:e6:3c:91:a6:87:c4:fa:36: 08:1c:bd:3e:b7:2d:fa:7f:b5:f7:33:13:3d:ca:13:e9:58:52: 3c:f1:f1:cc:00:85:b6:bf:ff:c3:44:a1:47:2f:ea:72:c6:81: 51:f9:77:83:30:9e:29:83:a4:d9:e8:20:47:a0:f5:ae:0f:03: 91:f7:9d:6c:15:dc:b1:4b:16:ee:02:f0:68:cd:d1:75:62:50: 80:56:19:39:1d:59:55:b9:15:f4:b0:1a:21:52:91:f6:59:bb: 51:c8:21:eb:38:87:15:35:cc:25:53:a7:ef:ea:85:c2:b5:9b: ce:7e:e7:87:3a:6b:f7:70:70:8b:fc:82:ef:80:a6:18:78:03: 18:61:e7:7b -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEkhhAQIOYaRlaXtsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NDU3OTgzMGUtM2E1ZC00ZGM0LTgxZjgtNDViNzVjMWI1NmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfL6YLFRGY8b8WOmj4PMe8SC57pnqthpPL/r SqdFnZ7H7LOe6wDGBdjaggQPD45Z+47I+vZbCLSJFiozJLzACOmWWzMyNDjcsfJ/ q4OHFfgdYFTNuYn46e/Lm+PB7ty7S1XKcci0cyzfMWWQldTiG8qJdXrqdqq4dYEk nfxEZvVl4UyUT9Mm3O4omjTLor66Xneusxzzuz82Ik3lIBWL6sX59F/fUjfm6IpE vQu7nIhhjsEN/5CNeha/xSDD0PoQL275clZOGs+WB5bwagCVaVJ508GNOuOfoGVt RQX9z4l3W1yZqGUN/oFAsBCZnF0DZBBJX3Nt4xZ+0jMIiexAgwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFNZT3IRpRCgVUZsnl/U27ONFjIjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvZWM5MDNiYmEtMTU4Yy0z YTNkLWI5YzctNTk2OWM5NjBkMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAQDGDMAwD BADP8aMDBAHP8aQDBADP8akwDAMEAM/xqwMEAM/xrDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDRsicrksm nRivVWC5julGfKpCPgknB/ENbONdnKCqEqpTi8q51ffWr0Ml73DJHBiEaw+thp9g ezz7Sc5/+td3oUdkpNVSEcrmHK2o2UTXh0tC4J3AQa75jsLLx/aEkRCsOHMnvRKg a3Bzz3CI18GSlaS5sVE95jyRpofE+jYIHL0+ty36f7X3MxM9yhPpWFI88fHMAIW2 v//DRKFHL+pyxoFR+XeDMJ4pg6TZ6CBHoPWuDwOR951sFdyxSxbuAvBozdF1YlCA Vhk5HVlVuRX0sBohUpH2WbtRyCHrOIcVNcwlU6fv6oXCtZvOfueHOmv3cHCL/ILv gKYYeAMYYed7 -----END CERTIFICATE-----Generated at Sun Apr 13 02:48:22 2025 by rpki-client