$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa File: d1b03864-302d-3895-a9cf-9c42e250ce86.roa (raw, json) Hash identifier: NCjkRkkanGnEYk/teMbgspXav6yXNzLU5N+YJ05HySg= Subject key identifier: 78:0B:4E:6F:93:74:BE:4F:95:D1:85:45:81:E7:7A:A7:98:63:75:B9 Certificate issuer: /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Certificate serial: 010D0C9F43285848F65BE1681064B97CADAF8740 Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 14860 IP address blocks: 64.88.192.0/19 maxlen: 24 173.209.64.0/20 maxlen: 24 192.154.132.0/22 maxlen: 24 198.203.0.0/22 maxlen: 24 208.89.24.0/22 maxlen: 24 208.123.96.0/20 maxlen: 24 2604:5680::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e1:68:10:64:b9:7c:ad:af:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=869fb1bb-1c58-45a7-98f9-7251f5f1e255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:9f:4d:bd:67:0a:73:07:34:63:e7:43:2e: 56:1d:57:de:62:70:e7:45:de:f3:e9:71:17:11:1f: a0:b5:38:0d:63:43:12:8c:c2:ad:7b:e1:d6:7a:01: f9:88:aa:ea:64:57:80:67:5d:a9:6d:4b:07:fa:fa: 10:62:2e:98:8e:5c:af:15:1f:65:1b:92:a7:fc:62: e5:cf:bd:ac:40:12:86:6f:71:b6:23:c8:c8:39:82: 08:d2:72:01:9e:e4:2b:c9:d4:10:66:7c:4a:d3:20: e6:ad:ed:f4:65:5e:e2:09:bb:0e:f9:78:26:d1:4c: 0b:ce:54:f6:13:58:05:71:8f:64:d9:c9:0e:39:44: 53:db:46:a6:3e:f2:3e:17:d5:0b:88:e6:92:72:49: bf:2b:4a:49:49:bf:92:41:72:0b:76:45:c7:db:31: 68:67:06:c6:87:64:16:36:9c:2b:86:32:a8:78:8b: 09:ac:27:eb:5a:43:50:9e:00:82:d2:15:be:2d:17: 0d:cc:d5:fd:6a:62:68:a1:64:da:a8:9d:11:a2:ba: 34:e5:a4:c5:78:8e:af:c2:69:ce:31:8c:51:ac:16: 11:93:89:c0:a3:1a:16:84:e0:64:69:cb:9f:b6:c1: e6:0d:ef:dc:a9:90:f7:d1:bd:46:35:f7:6a:bb:34: 2f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0B:4E:6F:93:74:BE:4F:95:D1:85:45:81:E7:7A:A7:98:63:75:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/d1b03864-302d-3895-a9cf-9c42e250ce86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl X509v3 Authority Key Identifier: keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer sbgp-ipAddrBlock: critical IPv4: 64.88.192.0/19 173.209.64.0/20 192.154.132.0/22 198.203.0.0/22 208.89.24.0/22 208.123.96.0/20 IPv6: 2604:5680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:93:b9:f8:6f:e2:40:48:a4:4a:69:b2:19:43:b9:95:5d:86: d6:fa:d0:ce:ce:04:6c:eb:bc:46:ab:d2:7f:2d:62:be:95:2f: 4f:a8:fd:11:8a:2d:f9:e7:82:63:e4:66:2f:87:d1:89:a6:0d: 2b:5b:85:68:cb:e0:d8:e8:e8:ee:af:b2:ab:53:15:7c:79:b1: 04:6b:d0:3f:55:f5:fb:8b:2a:f0:42:8c:7f:e0:4f:dc:67:dc: 7e:f5:3b:74:2b:60:86:99:85:ab:ef:48:ba:a7:5c:df:9d:4a: 10:28:84:ae:f9:d4:97:73:97:36:c9:fa:42:1f:5d:3e:a6:4c: f5:d5:e9:b7:2a:44:20:52:b1:e8:8b:f8:ff:35:e6:57:ea:c2: f2:ab:fa:44:cd:e9:41:de:58:92:8f:33:89:29:74:95:ac:ee: 98:16:c5:46:ca:44:69:ec:5b:e1:33:00:50:45:7c:b5:5b:cb: 45:fa:a5:96:0d:70:b8:76:3e:40:95:82:3b:9e:3b:25:c3:19: 72:75:ba:55:0c:4b:14:cd:76:5d:0a:1a:ee:ca:6c:0d:e3:c0: de:1b:a3:6e:6d:68:e2:c8:e8:54:72:67:e5:dd:81:3b:e8:a1: eb:5d:cb:44:55:52:33:46:34:d5:0d:5a:10:30:38:bf:b2:b6: 58:8b:61:13 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEj2W+FoEGS5fK2vh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2ZjIxZDQtMzBiYi00MzIzLWJkMDctMjM4M2JhZTYw YWFjMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ODY5ZmIxYmItMWM1OC00NWE3LTk4ZjktNzI1MWY1ZjFlMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXmfTb1nCnMHNGPnQy5WHVfeYnDnRd7z6XEX ER+gtTgNY0MSjMKte+HWegH5iKrqZFeAZ12pbUsH+voQYi6YjlyvFR9lG5Kn/GLl z72sQBKGb3G2I8jIOYII0nIBnuQrydQQZnxK0yDmre30ZV7iCbsO+Xgm0UwLzlT2 E1gFcY9k2ckOOURT20amPvI+F9ULiOaSckm/K0pJSb+SQXILdkXH2zFoZwbGh2QW NpwrhjKoeIsJrCfrWkNQngCC0hW+LRcNzNX9amJooWTaqJ0Roro05aTFeI6vwmnO MYxRrBYRk4nAoxoWhOBkacuftsHmDe/cqZD30b1GNfdquzQvRwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFHgLTm+TdL5PldGFRYHneqeYY3W5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZm MjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgzYmFlNjBhYWMvZDFiMDM4NjQtMzAyZC0z ODk1LWE5Y2YtOWM0MmUyNTBjZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y2ZjIxZDQtMzBiYi00MzIzLWJk MDctMjM4M2JhZTYwYWFjLzdmNmYyMWQ0LTMwYmItNDMyMy1iZDA3LTIzODNiYWU2 MGFhYy5jcmwwHwYDVR0jBBgwFoAUy3aebUA0uX+p9Bcr03meEIq8wRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZmMjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgz YmFlNjBhYWMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFQFjAAwQE rdFAAwQCwJqEAwQCxssAAwQC0FkYAwQE0HtgMA0EAgACMAcDBQAmBFaAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAJOTufhv4kBIpEppshlDuZVdhtb60M7OBGzrvEar0n8tYr6VL0+o/RGKLfnn gmPkZi+H0YmmDStbhWjL4Njo6O6vsqtTFXx5sQRr0D9V9fuLKvBCjH/gT9xn3H71 O3QrYIaZhavvSLqnXN+dShAohK751JdzlzbJ+kIfXT6mTPXV6bcqRCBSseiL+P81 5lfqwvKr+kTN6UHeWJKPM4kpdJWs7pgWxUbKRGnsW+EzAFBFfLVby0X6pZYNcLh2 PkCVgjueOyXDGXJ1ulUMSxTNdl0KGu7KbA3jwN4bo25taOLI6FRyZ+XdgTvooetd y0RVUjNGNNUNWhAwOL+ytliLYRM= -----END CERTIFICATE-----Generated at Sun Apr 6 20:41:51 2025 by rpki-client