$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/199ef697-b9df-357f-ba99-3ff80870d8c4.roa File: 199ef697-b9df-357f-ba99-3ff80870d8c4.roa (raw, json) Hash identifier: lHWY6PcsmIoZuRpV82eMGUAMMpOUb6+pFfZQPXHA4ic= Subject key identifier: 62:AA:08:89:B8:F8:FE:8F:9F:C7:71:62:2F:8B:35:BC:FA:5B:55:02 Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e Certificate serial: 010D0C9F43285848D4DB910072EEF0982A474F80 Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/199ef697-b9df-357f-ba99-3ff80870d8c4.roa Signing time: Mon 10 Feb 2025 02:00:38 +0000 ROA not before: Mon 10 Feb 2025 02:00:38 +0000 ROA not after: Sun 11 May 2025 01:00:38 +0000 asID: 7029 IP address blocks: 67.214.178.0/24 maxlen: 24 74.80.157.0/24 maxlen: 24 74.80.165.0/24 maxlen: 24 74.80.174.0/24 maxlen: 24 74.80.177.0/24 maxlen: 24 74.80.178.0/24 maxlen: 24 206.212.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:db:91:00:72:ee:f0:98:2a:47:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e Validity Not Before: Feb 10 02:00:38 2025 GMT Not After : May 11 01:00:38 2025 GMT Subject: CN=9b35b7ef-db58-4ccc-9d10-b57097a4908e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:2b:d0:e1:29:f5:68:d8:d8:89:e2:4d:99: 10:46:a5:25:69:bd:d9:0e:a3:26:26:19:78:6a:dc: 02:be:da:4c:33:22:4e:01:a0:bf:ca:0b:d0:0a:e8: 51:20:04:e3:9e:a3:99:3b:39:0b:e1:9e:77:57:46: 24:1d:ea:c5:62:52:07:38:ce:52:43:ae:bc:d5:a2: 09:e6:09:55:1e:8b:a6:72:3b:83:59:1d:06:d4:a8: 02:5f:de:39:96:81:d3:f3:7a:b6:99:0a:49:6d:40: 47:1a:2e:bd:ee:c3:7b:bd:f7:86:a0:31:69:f2:0c: 88:4b:e6:20:b6:93:8c:b2:4d:0d:ae:93:59:92:49: 52:0e:be:7e:68:49:81:9a:ca:07:d8:10:7b:c1:d7: e6:dc:dc:46:f0:64:ec:e1:09:8b:14:40:06:5b:1b: 9b:99:50:bb:d7:f6:bf:a3:ee:a8:24:91:60:9f:63: 49:45:ef:5c:91:ef:3f:4b:59:72:ac:6c:01:87:8f: e8:26:3e:e1:93:3d:c6:3f:28:39:76:6c:18:6d:d5: dc:8e:4f:37:d7:28:7e:dc:2d:9f:e8:12:e5:c3:61: 0d:3e:3a:8d:c4:c0:9f:bb:e3:f0:8f:76:66:e0:74: 64:13:fe:46:b3:e0:86:57:c6:90:2e:ef:70:2c:57: 5e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AA:08:89:B8:F8:FE:8F:9F:C7:71:62:2F:8B:35:BC:FA:5B:55:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/199ef697-b9df-357f-ba99-3ff80870d8c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl X509v3 Authority Key Identifier: keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer sbgp-ipAddrBlock: critical IPv4: 67.214.178.0/24 74.80.157.0/24 74.80.165.0/24 74.80.174.0/24 74.80.177.0-74.80.178.255 206.212.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f4:f3:df:28:8a:e0:65:29:e7:d6:c0:1c:89:e6:6c:83:9e: b9:f9:fd:c8:a1:59:42:55:1a:dc:ad:6a:97:1f:b7:a7:9a:8f: 8a:fa:cf:67:3e:72:c2:7f:22:b7:85:b8:80:6c:49:f8:55:27: 4d:69:b4:96:d0:7d:75:ca:71:75:ba:d5:ff:de:b7:94:3f:6d: 0c:20:f9:e9:24:f5:00:f1:58:c2:60:ce:12:bd:44:92:e6:91: 00:d4:10:62:cc:cd:25:0c:de:b9:27:57:12:96:f0:a6:f9:f1: 7c:eb:5e:a4:e1:a1:4a:a0:0c:63:37:8d:57:b0:72:0b:4d:7b: 34:63:26:5f:46:bb:e5:63:33:b3:21:a9:ea:81:68:f5:43:5a: 74:86:aa:14:c3:4a:9a:c2:18:0b:2e:32:07:04:38:ba:44:80: c6:13:06:17:c4:47:93:ac:75:93:ca:43:87:c5:0a:d9:e2:ab: 16:62:21:85:90:6f:cd:e1:40:43:05:4c:13:fe:7d:68:08:ce: f8:ab:bd:21:be:b5:92:32:4a:06:74:0f:ed:41:ce:6b:01:14: 53:0e:9c:a9:e0:b0:2a:3b:52:ef:bc:a4:86:35:fb:5d:1f:59: 52:b1:83:51:42:6e:a7:c1:9e:3b:79:e6:6d:d3:5e:f0:9f:21: 08:e2:7f:44 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEjU25EAcu7wmCpHT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1 MzJlMB4XDTI1MDIxMDAyMDAzOFoXDTI1MDUxMTAxMDAzOFowLzEtMCsGA1UEAxMk OWIzNWI3ZWYtZGI1OC00Y2NjLTlkMTAtYjU3MDk3YTQ5MDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AUr0OEp9WjY2IniTZkQRqUlab3ZDqMmJhl4 atwCvtpMMyJOAaC/ygvQCuhRIATjnqOZOzkL4Z53V0YkHerFYlIHOM5SQ6681aIJ 5glVHoumcjuDWR0G1KgCX945loHT83q2mQpJbUBHGi697sN7vfeGoDFp8gyIS+Yg tpOMsk0NrpNZkklSDr5+aEmBmsoH2BB7wdfm3NxG8GTs4QmLFEAGWxubmVC71/a/ o+6oJJFgn2NJRe9cke8/S1lyrGwBh4/oJj7hkz3GPyg5dmwYbdXcjk831yh+3C2f 6BLlw2ENPjqNxMCfu+Pwj3Zm4HRkE/5Gs+CGV8aQLu9wLFdeqwIDAQABo4IDezCC A3cwHQYDVR0OBBYEFGKqCIm4+P6Pn8dxYi+LNbz6W1UCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvMTk5ZWY2OTctYjlkZi0z NTdmLWJhOTktM2ZmODA4NzBkOGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3 NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj Y2UwNzUzMmUuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAQ9ayAwQA SlCdAwQASlClAwQASlCuMAwDBABKULEDBABKULIDBADO1PswVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfvTz 3yiK4GUp59bAHInmbIOeufn9yKFZQlUa3K1qlx+3p5qPivrPZz5ywn8it4W4gGxJ +FUnTWm0ltB9dcpxdbrV/963lD9tDCD56ST1APFYwmDOEr1EkuaRANQQYszNJQze uSdXEpbwpvnxfOtepOGhSqAMYzeNV7ByC017NGMmX0a75WMzsyGp6oFo9UNadIaq FMNKmsIYCy4yBwQ4ukSAxhMGF8RHk6x1k8pDh8UK2eKrFmIhhZBvzeFAQwVME/59 aAjO+Ku9Ib61kjJKBnQP7UHOawEUUw6cqeCwKjtS77ykhjX7XR9ZUrGDUUJup8Ge O3nmbdNe8J8hCOJ/RA== -----END CERTIFICATE-----Generated at Wed Apr 9 18:13:55 2025 by rpki-client