$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c564225-5f3b-3938-aa93-4b0de923d8f8.roa File: 0c564225-5f3b-3938-aa93-4b0de923d8f8.roa (raw, json) Hash identifier: 4Qx7KEslY33dDkQZwPwxqNUelyDzwrF6snNKlLcWB0o= Subject key identifier: FF:48:9D:29:C7:78:CF:79:B5:EA:D4:6E:2E:4C:20:91:F0:3C:B0:92 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584960541BB69679DFA0D858A640 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c564225-5f3b-3938-aa93-4b0de923d8f8.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 30058 IP address blocks: 216.227.140.0/23 maxlen: 24 2001:49f0:d004::/48 maxlen: 48 2001:49f0:d010::/48 maxlen: 48 2001:49f0:d026::/48 maxlen: 48 2001:49f0:d047::/48 maxlen: 48 2001:49f0:d09a::/48 maxlen: 48 2001:49f0:d0d0::/48 maxlen: 48 2001:49f0:d0e5::/48 maxlen: 48 2001:49f0:d0f8::/48 maxlen: 48 2001:49f0:d126::/48 maxlen: 48 2001:49f0:d127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:1b:b6:96:79:df:a0:d8:58:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=66c91104-8d15-4e82-92ae-ae66f632a2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:da:3e:56:77:1c:a5:c5:ce:0e:9d:2a:6f: e5:02:3f:38:36:f1:22:24:7d:bf:32:52:79:6b:1b: 9a:e0:18:7c:7e:45:3e:1f:cf:cd:ec:b6:dd:3a:18: ea:96:e4:e7:a3:17:40:4d:f7:a1:50:24:35:c8:38: 0c:e8:63:9d:46:fe:bb:7c:62:fc:5a:03:2f:89:8a: 46:5f:c1:14:e3:93:c1:2c:a1:4d:26:41:fa:a9:5c: c6:ce:12:d6:fd:b7:7a:0a:dd:5a:93:5b:b8:d5:d4: 30:49:04:7e:51:2a:a3:62:03:1c:ae:f6:e5:e9:9b: 0d:46:db:6e:c6:31:80:91:97:d5:96:ee:83:fa:18: cd:d1:25:4c:3d:6f:a0:3c:e6:af:65:f6:cc:0b:4c: 32:6d:ac:1c:09:bf:c9:79:e9:5c:a1:c2:8f:ef:28: f2:e0:07:37:3c:f3:5f:1a:7d:a6:c1:c5:36:86:3a: 39:8e:6e:db:4b:54:38:70:f5:f1:f3:c5:a2:3e:e7: 6d:bd:45:f5:bf:c9:83:4e:54:80:f7:2d:51:62:f4: d2:b9:97:a4:27:25:af:50:36:00:d3:73:be:63:65: 71:72:5a:60:c8:25:ae:06:a0:b2:11:74:88:04:78: 1b:0b:a4:11:ee:4d:00:49:36:11:e6:13:b1:5d:30: 51:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:48:9D:29:C7:78:CF:79:B5:EA:D4:6E:2E:4C:20:91:F0:3C:B0:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0c564225-5f3b-3938-aa93-4b0de923d8f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 216.227.140.0/23 IPv6: 2001:49f0:d004::/48 2001:49f0:d010::/48 2001:49f0:d026::/48 2001:49f0:d047::/48 2001:49f0:d09a::/48 2001:49f0:d0d0::/48 2001:49f0:d0e5::/48 2001:49f0:d0f8::/48 2001:49f0:d126::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:82:f6:2c:fd:5e:74:b9:33:8f:75:2b:8f:6f:94:0b:ab:07: 0b:f3:a3:15:e9:9b:64:56:e1:1e:8e:e3:cc:49:0f:d4:20:e9: de:3b:b9:59:d0:80:5a:14:cb:ad:02:d8:27:d7:e7:9a:12:c4: 4a:6a:a9:41:9b:12:47:a6:6b:76:8e:b2:77:a0:32:5f:7f:82: a5:7b:bd:26:9f:cb:ed:b8:f5:04:ef:b5:6b:74:47:9f:9f:bb: a0:4b:dc:72:88:64:d9:7a:b7:b9:81:18:cc:0d:f5:85:f0:22: 8b:08:0d:aa:cf:17:cf:0b:5f:29:7a:38:09:54:24:a8:ef:27: 29:3c:83:57:eb:bc:2d:b0:09:1b:f7:69:3a:db:35:32:c2:f4: 37:7c:9b:29:06:b9:43:b8:2d:28:7f:fe:7e:0c:db:d4:60:b0: a3:6c:5f:7d:1a:36:2f:1a:23:29:9f:fa:17:04:d2:fe:83:dd: 14:f4:e4:9c:1e:c2:e5:16:d0:4b:7a:45:e2:1e:cc:2d:3a:aa: dc:98:25:a1:d0:8c:dc:2f:47:31:e0:49:e2:e0:5f:32:e3:50: 83:4a:c4:ac:0e:7e:a8:5c:7f:af:6f:b6:ba:f5:1d:d6:f6:81: 05:63:68:69:b7:96:b4:e7:8d:cc:6b:69:68:46:cf:a2:42:7e: 41:36:78:1b -----BEGIN CERTIFICATE----- MIIGnDCCBYSgAwIBAgIUAQ0Mn0MoWElgVBu2lnnfoNhYpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk NjZjOTExMDQtOGQxNS00ZTgyLTkyYWUtYWU2NmY2MzJhMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYnaPlZ3HKXFzg6dKm/lAj84NvEiJH2/MlJ5 axua4Bh8fkU+H8/N7LbdOhjqluTnoxdATfehUCQ1yDgM6GOdRv67fGL8WgMviYpG X8EU45PBLKFNJkH6qVzGzhLW/bd6Ct1ak1u41dQwSQR+USqjYgMcrvbl6ZsNRttu xjGAkZfVlu6D+hjN0SVMPW+gPOavZfbMC0wybawcCb/JeelcocKP7yjy4Ac3PPNf Gn2mwcU2hjo5jm7bS1Q4cPXx88WiPudtvUX1v8mDTlSA9y1RYvTSuZekJyWvUDYA 03O+Y2VxclpgyCWuBqCyEXSIBHgbC6QR7k0ASTYR5hOxXTBRJwIDAQABo4IDrjCC A6owHQYDVR0OBBYEFP9InSnHeM95terUbi5MIJHwPLCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGM1NjQyMjUtNWYzYi0z OTM4LWFhOTMtNGIwZGU5MjNkOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMHgGCCsGAQUFBwEHAQH/BGkwZzAMBAIAATAGAwQB2OOMMFcE AgACMFEDBwAgAUnw0AQDBwAgAUnw0BADBwAgAUnw0CYDBwAgAUnw0EcDBwAgAUnw 0JoDBwAgAUnw0NADBwAgAUnw0OUDBwAgAUnw0PgDBwEgAUnw0SYwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA LYL2LP1edLkzj3Urj2+UC6sHC/OjFembZFbhHo7jzEkP1CDp3ju5WdCAWhTLrQLY J9fnmhLESmqpQZsSR6Zrdo6yd6AyX3+CpXu9Jp/L7bj1BO+1a3RHn5+7oEvccohk 2Xq3uYEYzA31hfAiiwgNqs8XzwtfKXo4CVQkqO8nKTyDV+u8LbAJG/dpOts1MsL0 N3ybKQa5Q7gtKH/+fgzb1GCwo2xffRo2LxojKZ/6FwTS/oPdFPTknB7C5RbQS3pF 4h7MLTqq3JglodCM3C9HMeBJ4uBfMuNQg0rErA5+qFx/r2+2uvUd1vaBBWNoabeW tOeNzGtpaEbPokJ+QTZ4Gw== -----END CERTIFICATE-----Generated at Sat Apr 5 21:21:14 2025 by rpki-client