$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/64c3a2b4-70ea-3fa8-b524-4d64152630ea.roa File: 64c3a2b4-70ea-3fa8-b524-4d64152630ea.roa (raw, json) Hash identifier: 8NgYvTmr4DFkXDC9qUzTrJ4NlZ+QY9sOh7CkgZYJIlM= Subject key identifier: 5F:59:E5:C9:03:44:45:E5:29:A8:3F:46:4C:59:0A:CA:29:FB:36:F4 Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e Certificate serial: 010D0C9F43285848F926A814440EE67EFDAE9180 Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/64c3a2b4-70ea-3fa8-b524-4d64152630ea.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 3320 IP address blocks: 74.80.146.0/24 maxlen: 24 74.80.147.0/24 maxlen: 24 74.80.152.0/24 maxlen: 24 74.80.153.0/24 maxlen: 24 74.80.158.0/24 maxlen: 24 74.80.159.0/24 maxlen: 24 74.80.166.0/24 maxlen: 24 74.80.167.0/24 maxlen: 24 74.80.172.0/24 maxlen: 24 74.80.173.0/24 maxlen: 24 74.80.176.0/24 maxlen: 24 74.80.188.0/24 maxlen: 24 74.80.189.0/24 maxlen: 24 74.80.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a8:14:44:0e:e6:7e:fd:ae:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=5d99d193-31c8-46be-b493-47ad473f117a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f0:a7:7b:1e:be:40:ce:0b:0f:e0:20:2a:b2: d6:9f:8e:0c:34:49:2d:73:d7:96:d6:3e:f3:96:41: 88:e0:f0:8a:79:c5:60:b8:34:1c:04:34:e9:21:8b: ac:f9:00:a9:18:b7:b4:78:37:f3:92:85:be:24:e2: 86:a2:8a:32:bf:1c:ef:91:0e:78:6f:29:51:15:74: 36:b1:9e:f1:83:87:60:a4:d5:b1:68:95:48:6f:ff: 15:f4:5a:e9:4d:3f:ee:36:29:1b:4e:0a:bc:40:9b: f9:f5:be:c8:8c:d3:ac:9e:95:13:7e:5d:bb:b2:8c: 59:d1:71:f1:10:6f:ab:fe:e5:5b:1a:d6:01:82:fa: 1e:d0:34:47:91:55:6d:21:cf:9b:b7:8f:a6:3e:c9: dd:ce:b6:af:ba:6f:2d:aa:c9:9c:a6:3e:37:96:43: d7:97:3b:36:56:09:7b:92:c0:d3:a3:90:37:a8:cf: d7:42:f3:e4:76:30:12:89:4f:03:05:13:05:de:4a: 95:60:38:ce:ed:a5:96:5c:55:0b:75:d0:c5:2a:57: 88:15:f6:18:47:1e:c5:d1:7c:3a:fd:53:bf:ff:91: 79:eb:6a:62:33:0d:7d:89:2d:2a:06:1a:7e:4e:e2: 11:fe:d3:2b:3d:f4:6c:0f:63:db:9c:5d:23:9e:a1: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:59:E5:C9:03:44:45:E5:29:A8:3F:46:4C:59:0A:CA:29:FB:36:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/64c3a2b4-70ea-3fa8-b524-4d64152630ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl X509v3 Authority Key Identifier: keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer sbgp-ipAddrBlock: critical IPv4: 74.80.146.0/23 74.80.152.0/23 74.80.158.0/23 74.80.166.0/23 74.80.172.0/23 74.80.176.0/24 74.80.188.0/23 74.80.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7e:a7:17:4e:b3:34:35:37:38:e1:88:b9:bd:d5:b9:51:0e: 8f:f3:d4:f1:9d:93:9c:9e:14:74:a4:00:46:ae:d2:45:ef:1f: a4:48:79:ef:26:61:1e:33:de:b5:62:67:8f:2a:8b:2e:a9:28: b2:46:40:4b:1e:ce:5f:73:5e:00:a9:8d:2d:f2:c9:3c:da:10: 17:af:f0:ec:3b:51:8f:6f:86:11:fa:1a:5d:2e:e6:67:69:b4: 76:1d:0b:b6:e0:19:32:04:27:2b:8f:bb:6b:52:81:05:e1:d9: 5f:47:63:ef:44:5d:22:3a:42:ea:08:d6:31:7d:0f:52:38:8a: 21:ce:f4:db:ae:99:cc:4e:97:0c:c7:f1:de:23:bc:87:bc:06: a8:18:1a:e5:0e:c2:20:44:72:15:f7:f1:6f:cf:6e:7d:88:94: 66:ee:af:0f:ff:5c:b9:a5:03:29:20:93:09:cb:77:97:f5:ac: df:6e:69:82:2f:25:fc:b2:57:a7:ad:1b:f0:67:4a:51:63:44: df:c3:cc:f0:09:07:8b:a2:41:e2:39:1d:df:f5:36:53:a4:df: ea:cc:9f:d4:d4:00:7b:5e:94:36:08:fe:bb:19:9a:f8:d7:80: 9e:5a:73:1d:16:f6:53:95:62:38:33:68:46:2f:6a:da:df:e8: 79:fa:24:7d -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEj5JqgURA7mfv2ukYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1 MzJlMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NWQ5OWQxOTMtMzFjOC00NmJlLWI0OTMtNDdhZDQ3M2YxMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfCnex6+QM4LD+AgKrLWn44MNEktc9eW1j7z lkGI4PCKecVguDQcBDTpIYus+QCpGLe0eDfzkoW+JOKGoooyvxzvkQ54bylRFXQ2 sZ7xg4dgpNWxaJVIb/8V9FrpTT/uNikbTgq8QJv59b7IjNOsnpUTfl27soxZ0XHx EG+r/uVbGtYBgvoe0DRHkVVtIc+bt4+mPsndzravum8tqsmcpj43lkPXlzs2Vgl7 ksDTo5A3qM/XQvPkdjASiU8DBRMF3kqVYDjO7aWWXFULddDFKleIFfYYRx7F0Xw6 /VO//5F562piMw19iS0qBhp+TuIR/tMrPfRsD2PbnF0jnqHElQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFF9Z5ckDREXlKag/RkxZCsop+zb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvNjRjM2EyYjQtNzBlYS0z ZmE4LWI1MjQtNGQ2NDE1MjYzMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3 NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj Y2UwNzUzMmUuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBSlCSAwQB SlCYAwQBSlCeAwQBSlCmAwQBSlCsAwQASlCwAwQBSlC8AwQASlC/MFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEV+pxdOszQ1NzjhiLm91blRDo/z1PGdk5yeFHSkAEau0kXvH6RIee8mYR4z3rVi Z48qiy6pKLJGQEsezl9zXgCpjS3yyTzaEBev8Ow7UY9vhhH6Gl0u5mdptHYdC7bg GTIEJyuPu2tSgQXh2V9HY+9EXSI6QuoI1jF9D1I4iiHO9NuumcxOlwzH8d4jvIe8 BqgYGuUOwiBEchX38W/Pbn2IlGburw//XLmlAykgkwnLd5f1rN9uaYIvJfyyV6et G/BnSlFjRN/DzPAJB4uiQeI5Hd/1NlOk3+rMn9TUAHtelDYI/rsZmvjXgJ5acx0W 9lOVYjgzaEYvatrf6Hn6JH0= -----END CERTIFICATE-----Generated at Sat Apr 5 07:31:28 2025 by rpki-client