$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/96cde41d-12c1-30ee-91b7-f29b118999ba.roa File: 96cde41d-12c1-30ee-91b7-f29b118999ba.roa (raw, json) Hash identifier: I92bHGx4iqo9+ExCHztYyWJ0AVKn5C5OARZMhG9WftE= Subject key identifier: FF:55:30:FD:B8:EB:1C:A5:E8:96:52:24:62:EC:15:C2:32:56:CF:86 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F43285848854B402B9A07F172833E3200 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/96cde41d-12c1-30ee-91b7-f29b118999ba.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 36374 IP address blocks: 66.234.112.0/20 maxlen: 24 67.230.224.0/19 maxlen: 24 69.42.224.0/19 maxlen: 24 152.65.128.0/19 maxlen: 24 162.211.40.0/22 maxlen: 24 162.245.24.0/22 maxlen: 24 172.110.224.0/20 maxlen: 24 173.224.32.0/20 maxlen: 24 192.136.158.0/23 maxlen: 24 192.210.42.0/23 maxlen: 24 198.13.76.0/22 maxlen: 24 199.30.96.0/21 maxlen: 24 206.183.176.0/20 maxlen: 24 216.168.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:40:2b:9a:07:f1:72:83:3e:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=b5e9ed32-62dc-4ebb-8ed3-40be9afaab9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:de:64:e6:32:27:57:8d:c7:2e:7a:e0:42:8a: 4c:33:98:ad:cd:a6:83:49:28:cb:1e:30:73:e8:c1: f0:83:8d:aa:1f:1f:45:51:1c:cd:57:3a:9a:63:a3: 13:5f:5f:7a:9d:22:5d:ef:64:c1:ce:8a:a9:75:ae: ac:8d:fd:46:20:87:3d:13:f1:77:b6:44:4f:4d:94: 7b:df:d8:8a:6a:74:5b:f8:db:1c:3b:a6:f5:68:f7: 46:db:91:4f:18:e3:3e:f0:06:02:5d:5d:39:b5:bf: 17:5d:14:7f:53:22:b8:c4:95:63:45:32:fb:be:b0: 03:18:0b:b8:e5:df:00:d0:38:c3:9b:9a:f1:4e:d0: 2f:5e:24:d6:64:05:6b:a7:e2:40:48:97:49:a0:e1: ea:e5:68:8b:80:99:fd:b8:df:33:e2:0a:28:27:07: 88:d5:d2:6b:a5:23:17:23:3f:8e:80:4a:0e:79:5a: 74:6d:3a:09:68:cc:f4:46:7f:14:3e:ec:04:91:be: 20:43:18:89:35:36:c4:0d:c2:17:97:18:2f:c2:e8: 20:48:ef:e0:cf:9c:8d:2e:75:8f:86:d4:89:3b:68: 95:d4:fc:5f:19:ff:48:aa:07:bf:79:06:17:d7:ea: 18:93:26:ef:80:3e:77:b3:75:88:f5:d6:5b:1c:e7: 45:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:30:FD:B8:EB:1C:A5:E8:96:52:24:62:EC:15:C2:32:56:CF:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/96cde41d-12c1-30ee-91b7-f29b118999ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv4: 66.234.112.0/20 67.230.224.0/19 69.42.224.0/19 152.65.128.0/19 162.211.40.0/22 162.245.24.0/22 172.110.224.0/20 173.224.32.0/20 192.136.158.0/23 192.210.42.0/23 198.13.76.0/22 199.30.96.0/21 206.183.176.0/20 216.168.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:17:40:7a:8d:ac:25:a4:e1:b1:0e:eb:b4:e6:a3:cb:1d:34: aa:b2:c5:8d:8a:e4:51:d6:c1:a9:ea:fc:88:12:0b:ce:95:bb: f3:fb:1c:78:69:32:3a:d7:65:ce:56:a5:2b:0d:bf:d3:98:9e: 56:e0:4d:98:40:94:56:54:1a:de:39:7b:54:00:19:9f:1c:cc: 3f:19:65:cd:65:90:eb:45:e8:42:65:6f:53:7a:e0:39:51:90: 76:29:fe:56:6d:6e:73:c4:cd:d1:85:09:5f:ea:24:37:e1:f5: 97:8c:95:49:ac:b9:0b:c8:a8:9f:d3:de:d7:f0:49:02:84:30: fd:a4:b3:05:1a:e7:5b:a9:2a:cd:9d:cc:2e:53:f6:87:a8:4d: 7d:06:0c:8d:5e:84:2d:6a:eb:79:95:fe:c5:f7:6f:ac:ff:a1: 33:1a:d2:1e:69:52:37:f9:4f:0c:44:fe:aa:71:a6:01:a3:99: a2:9d:18:74:89:ee:cb:00:d0:35:3c:87:ce:a5:76:36:12:d8: d6:b6:8e:40:84:a6:0e:11:8a:c9:a2:da:de:76:95:85:8a:ea: d1:c8:84:79:fc:9f:50:9b:78:0e:95:b0:48:be:c6:82:46:a9: d9:38:33:7a:61:82:5c:a6:bb:33:fe:e3:e2:25:14:6b:3f:68: bd:a7:c7:bb -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWEiFS0ArmgfxcoM+MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk YjVlOWVkMzItNjJkYy00ZWJiLThlZDMtNDBiZTlhZmFhYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d5k5jInV43HLnrgQopMM5itzaaDSSjLHjBz 6MHwg42qHx9FURzNVzqaY6MTX196nSJd72TBzoqpda6sjf1GIIc9E/F3tkRPTZR7 39iKanRb+NscO6b1aPdG25FPGOM+8AYCXV05tb8XXRR/UyK4xJVjRTL7vrADGAu4 5d8A0DjDm5rxTtAvXiTWZAVrp+JASJdJoOHq5WiLgJn9uN8z4gooJweI1dJrpSMX Iz+OgEoOeVp0bToJaMz0Rn8UPuwEkb4gQxiJNTbEDcIXlxgvwuggSO/gz5yNLnWP htSJO2iV1PxfGf9Iqge/eQYX1+oYkybvgD53s3WI9dZbHOdF5QIDAQABo4IDozCC A58wHQYDVR0OBBYEFP9VMP246xyl6JZSJGLsFcIyVs+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvOTZjZGU0MWQtMTJjMS0z MGVlLTkxYjctZjI5YjExODk5OWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQEQupwAwQF Q+bgAwQFRSrgAwQFmEGAAwQCotMoAwQCovUYAwQErG7gAwQEreAgAwQBwIieAwQB wNIqAwQCxg1MAwQDxx5gAwQEzrewAwQE2KhQMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADgXQHqNrCWk4bEO 67Tmo8sdNKqyxY2K5FHWwanq/IgSC86Vu/P7HHhpMjrXZc5WpSsNv9OYnlbgTZhA lFZUGt45e1QAGZ8czD8ZZc1lkOtF6EJlb1N64DlRkHYp/lZtbnPEzdGFCV/qJDfh 9ZeMlUmsuQvIqJ/T3tfwSQKEMP2kswUa51upKs2dzC5T9oeoTX0GDI1ehC1q63mV /sX3b6z/oTMa0h5pUjf5TwxE/qpxpgGjmaKdGHSJ7ssA0DU8h86ldjYS2Na2jkCE pg4Rismi2t52lYWK6tHIhHn8n1CbeA6VsEi+xoJGqdk4M3phglymuzP+4+IlFGs/ aL2nx7s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:08 2025 by rpki-client