$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa File: 3855a988-062b-3485-808c-4e1a37cecf3f.roa (raw, json) Hash identifier: /XB2vGK4kw/scE6FdvmfNwSeCSNHSn8PINdLyGzIy2Y= Subject key identifier: 50:50:96:56:23:A1:53:B8:6F:CE:A6:7C:E6:E4:38:BD:61:D4:2A:B1 Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Certificate serial: 010D0C9F432858486EF5BD9DFB47FE0155BE8B00 Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa Signing time: Sat 04 Jan 2025 14:00:51 +0000 ROA not before: Sat 04 Jan 2025 14:00:51 +0000 ROA not after: Fri 04 Apr 2025 13:00:51 +0000 asID: 11377 IP address blocks: 149.72.1.0/24 maxlen: 24 149.72.4.0/22 maxlen: 22 149.72.8.0/22 maxlen: 22 149.72.12.0/22 maxlen: 22 149.72.19.0/24 maxlen: 24 149.72.20.0/22 maxlen: 22 149.72.24.0/21 maxlen: 21 149.72.32.0/19 maxlen: 19 149.72.64.0/19 maxlen: 19 167.89.0.0/18 maxlen: 18 167.89.64.0/19 maxlen: 19 167.89.96.0/20 maxlen: 20 167.89.112.0/24 maxlen: 24 167.89.114.0/23 maxlen: 23 167.89.116.0/24 maxlen: 24 167.89.117.0/24 maxlen: 24 167.89.118.0/24 maxlen: 24 167.89.119.0/24 maxlen: 24 167.89.120.0/23 maxlen: 23 167.89.122.0/23 maxlen: 23 167.89.124.0/23 maxlen: 23 167.89.126.0/23 maxlen: 23 168.245.0.0/18 maxlen: 18 168.245.64.0/20 maxlen: 20 168.245.80.0/22 maxlen: 22 168.245.84.0/22 maxlen: 22 168.245.88.0/22 maxlen: 22 168.245.92.0/22 maxlen: 22 168.245.96.0/19 maxlen: 19 192.254.112.0/20 maxlen: 20 198.21.0.0/21 maxlen: 21 198.37.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6e:f5:bd:9d:fb:47:fe:01:55:be:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b Validity Not Before: Jan 4 14:00:51 2025 GMT Not After : Apr 4 13:00:51 2025 GMT Subject: CN=591403b9-8947-4a46-9994-9eeb3c11934b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f7:1d:86:0f:4e:15:34:47:63:1b:8a:71:84: f5:4e:9b:70:f6:87:fd:e0:32:90:ca:88:47:9b:42: ab:ab:54:ec:14:21:90:af:38:a8:66:5d:0c:9e:3e: b8:24:3a:f0:1a:e0:b8:c7:f3:84:cb:52:74:0f:1b: 26:47:c5:b0:af:ce:5e:a4:c8:80:9d:0a:58:f1:d6: aa:8a:a3:99:01:ba:a1:43:dd:24:97:9f:1f:ed:ca: ee:a4:b4:ff:e5:91:da:c1:6f:ef:1b:ea:51:74:ca: 8e:fd:bb:05:ef:a0:38:fd:74:eb:ae:f7:87:cf:e8: 6c:d1:f6:57:72:44:35:4b:d5:59:45:d4:07:03:d9: e2:92:2f:21:bd:a8:28:ec:91:b1:4f:6d:64:67:31: 8d:53:ca:26:0f:8b:fe:06:a3:d0:62:38:01:12:fb: b2:88:fa:8d:1e:ad:19:3a:e9:5a:3e:4c:2d:8b:58: 4c:bb:7d:b2:75:5e:e7:43:48:19:a7:ac:6a:e5:a4: 50:50:d3:18:ca:70:b6:49:cd:e3:40:7b:f5:55:6b: 8d:c7:56:85:8b:b9:54:d4:dd:fd:22:c4:81:7e:fe: 0d:52:02:6d:f0:2c:ab:85:3a:55:2e:29:66:6b:21: eb:59:68:17:b9:16:f8:08:01:62:c7:72:1c:5f:fa: 7f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:50:96:56:23:A1:53:B8:6F:CE:A6:7C:E6:E4:38:BD:61:D4:2A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl X509v3 Authority Key Identifier: keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer sbgp-ipAddrBlock: critical IPv4: 149.72.1.0/24 149.72.4.0-149.72.15.255 149.72.19.0-149.72.95.255 167.89.0.0-167.89.112.255 167.89.114.0-167.89.127.255 168.245.0.0/17 192.254.112.0/20 198.21.0.0/21 198.37.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0b:b0:37:eb:d4:0b:c3:f9:db:99:c1:8b:3b:4c:6e:9b:3d: 3a:0a:b8:12:3f:80:1f:a0:c8:ed:4a:f5:0d:cf:2d:46:ac:15: 94:d4:62:6a:18:35:7d:52:97:81:d1:3c:83:69:39:93:28:e7: 68:b3:09:d0:46:6c:52:82:69:82:15:f2:43:a3:1e:84:6d:28: 56:86:6b:1a:3a:dd:a1:1f:1c:c8:4c:27:45:cc:be:d1:db:81: 1d:b1:27:c1:9f:67:1f:59:25:7b:bf:32:84:f2:fa:c4:25:75: 19:e1:a0:13:bf:63:d6:29:d5:75:06:59:f2:e1:be:fc:ed:93: ea:3e:41:c6:4a:f8:2c:7e:e5:10:2f:15:40:c7:eb:ca:b4:b5: 31:c0:12:9f:7e:5f:43:30:9d:17:d5:14:58:c1:12:f6:4c:fc: 53:4d:62:f4:bc:c8:8d:aa:20:84:04:5d:d1:32:81:9f:9f:79: 26:d8:e9:29:cb:e8:a9:9c:9e:01:06:ee:9f:b1:c4:69:e5:15: f7:ed:c8:ee:26:5f:d3:72:a5:43:e4:59:bb:99:ea:7d:60:ff: d2:80:c8:a4:12:c2:dc:e6:5a:bf:4f:ec:33:ab:1d:09:de:ca: d6:52:2c:1e:61:e1:05:8b:64:8d:53:1a:92:17:87:32:83:00: 17:d8:7a:ed -----BEGIN CERTIFICATE----- MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWEhu9b2d+0f+AVW+iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZjZTIzMGUtMGZlNi00ZGRmLTk3OWMtMGJlMjM0OWI3 YzBiMB4XDTI1MDEwNDE0MDA1MVoXDTI1MDQwNDEzMDA1MVowLzEtMCsGA1UEAxMk NTkxNDAzYjktODk0Ny00YTQ2LTk5OTQtOWVlYjNjMTE5MzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/cdhg9OFTRHYxuKcYT1Tptw9of94DKQyohH m0Krq1TsFCGQrzioZl0Mnj64JDrwGuC4x/OEy1J0DxsmR8Wwr85epMiAnQpY8daq iqOZAbqhQ90kl58f7crupLT/5ZHawW/vG+pRdMqO/bsF76A4/XTrrveHz+hs0fZX ckQ1S9VZRdQHA9niki8hvago7JGxT21kZzGNU8omD4v+BqPQYjgBEvuyiPqNHq0Z OulaPkwti1hMu32ydV7nQ0gZp6xq5aRQUNMYynC2Sc3jQHv1VWuNx1aFi7lU1N39 IsSBfv4NUgJt8CyrhTpVLilmayHrWWgXuRb4CAFix3IcX/p/5QIDAQABo4IDpDCC A6AwHQYDVR0OBBYEFFBQllYjoVO4b86mfObkOL1h1CqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNl MjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUyMzQ5YjdjMGIvMzg1NWE5ODgtMDYyYi0z NDg1LTgwOGMtNGUxYTM3Y2VjZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGZjZTIzMGUtMGZlNi00ZGRmLTk3 OWMtMGJlMjM0OWI3YzBiLzRmY2UyMzBlLTBmZTYtNGRkZi05NzljLTBiZTIzNDli N2MwYi5jcmwwHwYDVR0jBBgwFoAUszQyoV9gupUxuCXzkr1K9dJT5ygwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZmNlMjMwZS0wZmU2LTRkZGYtOTc5Yy0wYmUy MzQ5YjdjMGIuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVAwQAlUgBMAwD BAKVSAQDBASVSAAwDAMEAJVIEwMEBZVIQDALAwMAp1kDBACnWXAwDAMEAadZcgME B6dZAAMEB6j1AAMEBMD+cAMEA8YVAAMEBMYlkDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAC7A369QLw/nb mcGLO0xumz06CrgSP4AfoMjtSvUNzy1GrBWU1GJqGDV9UpeB0TyDaTmTKOdoswnQ RmxSgmmCFfJDox6EbShWhmsaOt2hHxzITCdFzL7R24EdsSfBn2cfWSV7vzKE8vrE JXUZ4aATv2PWKdV1Blny4b787ZPqPkHGSvgsfuUQLxVAx+vKtLUxwBKffl9DMJ0X 1RRYwRL2TPxTTWL0vMiNqiCEBF3RMoGfn3km2Okpy+ipnJ4BBu6fscRp5RX37cju Jl/TcqVD5Fm7mep9YP/SgMikEsLc5lq/T+wzqx0J3srWUiweYeEFi2SNUxqSF4cy gwAX2Hrt -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:32 2025 by rpki-client