$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa File: 731e66c1-a71e-3d9f-a838-e78228e9ff90.roa (raw, json) Hash identifier: DHtRHrGDOJ8w67LZe4BK1Kx30exxX4CIfOuxcJZVJT0= Subject key identifier: 5C:7D:FE:EF:84:07:21:D3:65:7E:4B:CE:07:F5:F5:27:2C:89:AA:B0 Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Certificate serial: 010D0C9F43285849088163D96660A1B7C46A5B80 Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 11734 IP address blocks: 104.151.136.0/21 maxlen: 24 104.153.192.0/22 maxlen: 24 199.19.208.0/22 maxlen: 24 199.189.64.0/22 maxlen: 24 208.74.28.0/22 maxlen: 24 208.74.48.0/22 maxlen: 24 208.82.204.0/22 maxlen: 24 208.91.48.0/22 maxlen: 24 209.134.48.0/20 maxlen: 24 2607:f148::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:63:d9:66:60:a1:b7:c4:6a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=81a7db42-5c18-40c8-8e0d-7e88a5dfb245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:20:a3:19:59:e4:57:64:3e:99:2b:6f:e8: d8:1e:64:fb:00:d7:f7:f9:74:26:29:d9:80:e5:2c: d3:9f:a2:58:bf:5c:f0:5f:94:9c:89:ed:c5:5d:e1: a7:60:0c:d0:8e:51:9b:0e:67:fc:a7:79:14:bf:40: 49:e0:ff:d9:9e:97:7f:cd:59:24:8b:d5:aa:e5:b6: d5:16:c5:87:09:a6:1e:70:19:dc:88:5f:4c:86:f3: 40:40:29:06:fe:36:8f:4f:4a:38:24:f1:f2:99:e1: 24:7e:fc:38:b4:c4:1b:50:06:da:d9:60:5a:f0:f2: 96:6e:15:c3:ed:a5:af:72:19:a4:ba:42:ff:3c:bb: 83:cf:74:08:44:00:4c:c1:27:c9:c0:07:f6:8d:20: 5a:aa:ac:32:06:2c:97:20:15:2d:cf:b4:9b:62:69: 30:7e:ea:ed:e8:6f:67:f5:fa:c4:8a:c1:cd:a7:f4: af:0c:89:34:9d:11:d0:8c:95:e4:70:23:97:1d:3c: 56:76:58:d9:68:dc:01:30:6a:36:78:c9:70:68:45: aa:3d:39:e1:22:17:a6:55:4c:ca:8a:21:14:be:2b: 05:a7:33:e3:fd:d8:c2:0f:2f:8d:09:3b:ae:49:de: af:ed:d1:78:cd:64:95:d6:31:9b:d3:6f:85:bf:3e: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7D:FE:EF:84:07:21:D3:65:7E:4B:CE:07:F5:F5:27:2C:89:AA:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl X509v3 Authority Key Identifier: keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:13:b4:df:50:9d:32:f0:4b:c4:99:1c:f3:94:43:6d:31:78: c4:fa:45:f9:10:e2:ac:b5:cd:2f:ad:50:13:c6:4d:99:a2:ae: 97:36:40:ff:15:e1:96:97:a6:c1:6e:1a:c0:c4:98:57:19:9a: 62:4b:d7:d6:a2:fe:cc:e4:97:9a:a8:c8:4a:90:65:52:1d:9a: a6:1b:c7:c4:af:d4:70:8e:17:96:67:99:9e:23:70:84:37:0d: 29:53:eb:a2:b0:78:f0:7b:c4:56:6a:08:c1:ec:42:99:63:0b: d8:fa:41:23:0b:59:63:a3:5b:1c:ff:bb:b2:6a:ec:a3:a1:64: cf:2c:31:23:ff:11:eb:1a:93:b6:f9:1e:2b:35:ec:8e:3c:cd: 05:a7:84:74:4e:4d:1e:89:71:5d:23:6f:ed:5b:f7:e3:a2:39: b0:97:0c:4d:c7:96:2e:e4:0d:21:87:52:13:14:80:f9:d8:46: 24:90:c5:e2:13:ee:a5:81:f1:3a:b9:21:9a:19:cc:17:24:b0: 5b:1e:14:ec:40:de:ca:e4:b0:62:ed:fb:90:42:92:18:f2:6a: 0f:72:3f:2c:40:37:04:3b:a9:ef:90:b8:16:bf:17:ad:16:40: d6:d0:44:90:59:3c:bd:15:24:1e:d3:97:b6:5c:22:1f:37:cb: 3f:a2:ec:b0 -----BEGIN CERTIFICATE----- MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEkIgWPZZmCht8RqW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2Vm OTVjMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ODFhN2RiNDItNWMxOC00MGM4LThlMGQtN2U4OGE1ZGZiMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslwgoxlZ5FdkPpkrb+jYHmT7ANf3+XQmKdmA 5SzTn6JYv1zwX5Scie3FXeGnYAzQjlGbDmf8p3kUv0BJ4P/Znpd/zVkki9Wq5bbV FsWHCaYecBnciF9MhvNAQCkG/jaPT0o4JPHymeEkfvw4tMQbUAba2WBa8PKWbhXD 7aWvchmkukL/PLuDz3QIRABMwSfJwAf2jSBaqqwyBiyXIBUtz7SbYmkwfurt6G9n 9frEisHNp/SvDIk0nRHQjJXkcCOXHTxWdljZaNwBMGo2eMlwaEWqPTnhIhemVUzK iiEUvisFpzPj/djCDy+NCTuuSd6v7dF4zWSV1jGb02+Fvz6nGQIDAQABo4IDlDCC A5AwHQYDVR0OBBYEFFx9/u+EByHTZX5Lzgf19ScsiaqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Fj NWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvNzMxZTY2YzEtYTcxZS0z ZDlmLWE4MzgtZTc4MjI4ZTlmZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNhYzVlZGUtMWQyNy00MWE1LTkz MmMtMjE4MzJmM2VmOTVjLzQzYWM1ZWRlLTFkMjctNDFhNS05MzJjLTIxODMyZjNl Zjk1Yy5jcmwwHwYDVR0jBBgwFoAUCT5IKHeuyWZd5/E/OeO3foSfms0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgz MmYzZWY5NWMuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDaJeIAwQC aJnAAwQCxxPQAwQCx71AAwQC0EocAwQC0EowAwQC0FLMAwQC0FswAwQE0YYwMA0E AgACMAcDBQAmB/FIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJ0TtN9QnTLwS8SZHPOUQ20xeMT6RfkQ4qy1 zS+tUBPGTZmirpc2QP8V4ZaXpsFuGsDEmFcZmmJL19ai/szkl5qoyEqQZVIdmqYb x8Sv1HCOF5ZnmZ4jcIQ3DSlT66KwePB7xFZqCMHsQpljC9j6QSMLWWOjWxz/u7Jq 7KOhZM8sMSP/Eesak7b5His17I48zQWnhHROTR6JcV0jb+1b9+OiObCXDE3Hli7k DSGHUhMUgPnYRiSQxeIT7qWB8Tq5IZoZzBcksFseFOxA3srksGLt+5BCkhjyag9y PyxANwQ7qe+QuBa/F60WQNbQRJBZPL0VJB7Tl7ZcIh83yz+i7LA= -----END CERTIFICATE-----Generated at Sat Apr 12 09:28:23 2025 by rpki-client