$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e8a0a74-4d95-3255-b6a6-bda9a1b2b99b.roa File: 8e8a0a74-4d95-3255-b6a6-bda9a1b2b99b.roa (raw, json) Hash identifier: gDud0HJCXnLoY+SovJzT1oM0XH3Qze0TPOzvheJxjDY= Subject key identifier: 19:AD:1E:FC:56:46:C0:13:0B:CF:93:24:5F:EF:53:4F:D8:C5:F7:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285848EC968E7865FDF68522C3A5E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e8a0a74-4d95-3255-b6a6-bda9a1b2b99b.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 32787 IP address blocks: 72.52.4.0/24 maxlen: 24 72.52.5.0/24 maxlen: 24 72.52.6.0/24 maxlen: 24 72.52.7.0/24 maxlen: 24 72.52.8.0/24 maxlen: 24 72.52.9.0/24 maxlen: 24 72.52.10.0/24 maxlen: 24 72.52.11.0/24 maxlen: 24 72.52.12.0/24 maxlen: 24 72.52.13.0/24 maxlen: 24 72.52.14.0/24 maxlen: 24 72.52.15.0/24 maxlen: 24 209.200.152.0/24 maxlen: 24 209.200.153.0/24 maxlen: 24 209.200.154.0/24 maxlen: 24 209.200.155.0/24 maxlen: 24 209.200.164.0/24 maxlen: 24 209.200.165.0/24 maxlen: 24 209.200.166.0/24 maxlen: 24 209.200.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8e:78:65:fd:f6:85:22:c3:a5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=165826e1-371d-449a-8e40-4d4a97458aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:c4:20:15:9c:35:46:2a:db:9a:2b:73:1d: d2:b8:9f:63:18:5a:51:92:d7:c7:c3:f0:49:34:95: 5e:e4:b3:59:6c:08:19:6a:89:c6:c2:22:ed:eb:1e: c8:63:d3:f8:4d:01:e4:27:05:a1:3f:db:65:3d:19: 2c:98:68:ac:31:73:6e:f3:22:05:ae:29:86:30:a7: 87:c9:a9:04:d7:f2:83:07:f7:76:af:4d:bc:7e:96: 0d:87:ed:ec:4f:e6:2f:90:c9:cc:a0:d1:cf:00:6e: 05:ac:59:be:93:8e:23:70:61:c4:13:47:34:25:28: ca:07:a4:7a:02:7f:20:81:93:ea:64:0b:49:c7:2c: ed:6f:b4:e4:db:69:21:58:53:9f:11:1f:67:b6:e3: 6a:34:a9:ae:26:75:ff:e3:0c:48:29:ca:6a:bd:78: e2:9b:06:04:0b:33:0b:4a:2a:bf:5f:36:24:4c:77: eb:c5:b6:12:54:6c:52:46:9d:87:00:15:4e:07:d3: ef:e9:55:cf:74:45:56:bd:49:01:e4:49:33:ac:8c: 90:28:09:7f:4b:38:78:f5:2e:bd:8b:e9:cb:59:54: 4d:32:e7:31:4a:de:d4:4c:97:f4:8e:01:08:04:12: 1c:04:71:74:6e:cd:95:45:5f:ca:cd:f8:1d:ef:47: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AD:1E:FC:56:46:C0:13:0B:CF:93:24:5F:EF:53:4F:D8:C5:F7:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e8a0a74-4d95-3255-b6a6-bda9a1b2b99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.4.0-72.52.15.255 209.200.152.0/22 209.200.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b8:b7:f3:9a:4e:24:b9:1b:3c:3d:c0:7f:cb:29:fe:71:f2: db:90:6f:b6:0d:5c:b9:3f:04:b1:f4:93:37:68:29:a4:bb:97: 37:62:a7:f4:81:d4:c2:1e:9f:ac:01:9e:fc:60:36:4c:88:04: 56:8e:6d:e0:9c:96:58:14:01:72:94:d6:d2:3b:2c:e7:18:f9: 8f:1f:7b:86:78:a0:4f:91:b5:5b:7b:ed:8e:9d:5f:26:c0:c0: d6:79:cb:fd:17:7f:a4:9b:c5:1d:85:79:f2:5d:c4:0e:01:ba: 50:f2:74:6c:80:63:04:03:10:9b:f5:05:42:46:fb:4e:ee:2d: 25:87:00:48:96:83:18:b5:a6:6c:af:af:38:96:b0:ee:9c:fb: 72:6b:69:0b:15:e3:0d:14:7c:0a:d6:70:da:7c:23:dc:10:25: 2a:0f:d5:c9:f6:fc:4f:ba:bc:0f:31:48:52:56:3a:b5:93:b9: c0:f6:5b:c9:9f:39:6b:e0:a7:37:44:fd:20:97:e1:ae:c7:b1: ec:2d:7a:37:c4:80:48:2c:d4:d7:42:c8:f5:5d:00:11:68:3e: 5e:31:92:b6:64:f2:4e:48:fd:d8:e4:c4:24:e1:52:06:14:46: f5:53:5b:64:c9:97:79:4f:04:00:1e:9c:9a:52:3a:b8:24:8b: a1:cd:51:43 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEjslo54Zf32hSLDpeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MTY1ODI2ZTEtMzcxZC00NDlhLThlNDAtNGQ0YTk3NDU4YWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKrEIBWcNUYq25orcx3SuJ9jGFpRktfHw/BJ NJVe5LNZbAgZaonGwiLt6x7IY9P4TQHkJwWhP9tlPRksmGisMXNu8yIFrimGMKeH yakE1/KDB/d2r028fpYNh+3sT+YvkMnMoNHPAG4FrFm+k44jcGHEE0c0JSjKB6R6 An8ggZPqZAtJxyztb7Tk22khWFOfER9ntuNqNKmuJnX/4wxIKcpqvXjimwYECzML Siq/XzYkTHfrxbYSVGxSRp2HABVOB9Pv6VXPdEVWvUkB5EkzrIyQKAl/Szh49S69 i+nLWVRNMucxSt7UTJf0jgEIBBIcBHF0bs2VRV/Kzfgd70ck6wIDAQABo4IDaTCC A2UwHQYDVR0OBBYEFBmtHvxWRsATC8+TJF/vU0/Yxff8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU4YTBhNzQtNGQ5NS0z MjU1LWI2YTYtYmRhOWExYjJiOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAJINAQD BARINAADBALRyJgDBALRyKQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJri385pOJLkbPD3Af8sp/nHy25Bv tg1cuT8EsfSTN2gppLuXN2Kn9IHUwh6frAGe/GA2TIgEVo5t4JyWWBQBcpTW0jss 5xj5jx97hnigT5G1W3vtjp1fJsDA1nnL/Rd/pJvFHYV58l3EDgG6UPJ0bIBjBAMQ m/UFQkb7Tu4tJYcASJaDGLWmbK+vOJaw7pz7cmtpCxXjDRR8CtZw2nwj3BAlKg/V yfb8T7q8DzFIUlY6tZO5wPZbyZ85a+CnN0T9IJfhrsex7C16N8SASCzU10LI9V0A EWg+XjGStmTyTkj92OTEJOFSBhRG9VNbZMmXeU8EAB6cmlI6uCSLoc1RQw== -----END CERTIFICATE-----Generated at Fri Mar 14 08:42:47 2025 by rpki-client