$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa File: 2de13f6e-ba53-3029-9dbc-cc6728951529.roa (raw, json) Hash identifier: C7iZeHHp4jEdf4VKvc655qW6KdPSJsx0y2CtMXOsOws= Subject key identifier: C5:50:2F:E5:1D:AA:14:20:4B:B1:16:46:2F:D7:6F:CB:D7:1B:6A:9A Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Certificate serial: 010D0C9F4328584869605ACD303C23EA03AC92C0 Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 803 IP address blocks: 104.152.28.0/22 maxlen: 22 104.219.8.0/22 maxlen: 22 104.255.48.0/22 maxlen: 22 108.60.160.0/19 maxlen: 19 108.160.16.0/20 maxlen: 20 108.174.160.0/20 maxlen: 20 162.253.8.0/22 maxlen: 22 192.34.224.0/21 maxlen: 21 198.245.112.0/20 maxlen: 20 199.26.190.0/23 maxlen: 23 199.189.88.0/21 maxlen: 21 206.163.224.0/19 maxlen: 19 207.47.128.0/17 maxlen: 17 216.126.200.0/22 maxlen: 22 216.174.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:5a:cd:30:3c:23:ea:03:ac:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=243735c8-f9b8-47fd-b571-65af706d71c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:8a:36:67:20:3e:ec:5a:25:7f:78:ac:7d: 59:69:12:8e:63:94:01:d8:b7:ad:51:d5:0f:dd:96: e3:78:da:5d:83:5e:7a:f3:15:c2:b7:56:65:2d:55: 38:cf:15:27:c2:f1:27:e5:c9:37:21:3a:1c:df:d1: de:6c:cc:49:a4:9c:b3:4a:23:cd:fc:95:59:c6:fe: 37:37:93:54:ad:6f:aa:87:38:b7:be:f0:29:10:13: dc:3e:89:db:78:d6:76:c1:89:b7:b5:95:dd:64:fa: 0d:18:00:94:22:5c:58:55:36:0b:d2:aa:6c:5b:8d: b9:23:7a:e1:ea:ce:2a:b1:46:46:3f:b2:51:44:3c: c7:0a:1e:d7:eb:ad:df:e2:89:55:8b:f7:1d:aa:8c: 76:8f:04:58:a1:d8:36:d2:aa:08:2d:07:58:e7:95: e9:6f:ab:08:bb:7a:12:f5:c7:7c:23:9b:ad:3d:30: 39:ce:28:d6:b3:91:18:72:25:84:14:bb:65:de:72: e8:15:ac:cb:77:d4:6d:fc:86:fe:6b:8b:4d:a9:7d: 68:10:a7:29:7b:ef:6a:2f:9d:23:2b:a7:91:e9:70: 26:f0:48:1f:15:aa:10:c4:f1:eb:22:a9:d4:54:e4: 0b:8d:f2:8a:a5:d0:4f:13:a6:35:9b:c3:94:92:79: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:50:2F:E5:1D:AA:14:20:4B:B1:16:46:2F:D7:6F:CB:D7:1B:6A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/2de13f6e-ba53-3029-9dbc-cc6728951529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl X509v3 Authority Key Identifier: keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer sbgp-ipAddrBlock: critical IPv4: 104.152.28.0/22 104.219.8.0/22 104.255.48.0/22 108.60.160.0/19 108.160.16.0/20 108.174.160.0/20 162.253.8.0/22 192.34.224.0/21 198.245.112.0/20 199.26.190.0/23 199.189.88.0/21 206.163.224.0/19 207.47.128.0/17 216.126.200.0/22 216.174.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:dd:78:5c:a5:0b:49:85:48:2e:d6:7e:0a:dc:a1:00:0e:13: e9:c5:81:92:58:54:4a:d9:22:3a:6a:d8:5f:a6:05:2d:fb:7b: 31:92:9c:2a:6e:ba:6b:f3:73:de:5f:f3:28:16:81:0e:e6:5a: b9:e4:01:40:fd:2e:a6:a4:45:27:fa:68:44:e0:3d:f6:9e:57: 87:dd:b3:ee:03:59:b7:e0:46:9f:03:37:ad:b8:1b:5b:85:0e: fd:b0:1b:89:ac:f9:28:50:aa:f3:1e:f8:7f:ac:5d:42:1c:f8: a7:61:4c:e9:36:87:15:b7:3a:a3:06:a3:9b:39:2a:45:46:ea: 13:aa:02:31:ac:e1:6a:d9:34:e4:c8:fe:6b:23:72:ed:52:76: 4f:fe:16:bd:c9:ae:97:0a:fa:ae:7a:80:8b:b1:01:64:18:ce: fc:2f:a7:24:e3:46:89:ec:84:02:9a:92:ab:bf:d3:db:b2:f7: 01:ef:3f:f7:d8:1c:dc:38:e1:09:a0:aa:4a:6c:1d:29:03:9a: 06:c1:bb:9d:f5:7c:09:8e:b5:d0:ec:08:7c:8b:7c:f0:1e:0a: fd:e4:08:de:9b:1f:70:4f:b5:67:8b:30:f6:62:b1:6c:a6:72: 31:a9:1c:4d:a6:5c:22:c9:47:31:7a:6b:15:aa:07:d6:be:fc: a0:b9:ce:f8 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWEhpYFrNMDwj6gOsksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5 NGExMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk MjQzNzM1YzgtZjliOC00N2ZkLWI1NzEtNjVhZjcwNmQ3MWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/SKNmcgPuxaJX94rH1ZaRKOY5QB2LetUdUP 3ZbjeNpdg1568xXCt1ZlLVU4zxUnwvEn5ck3IToc39HebMxJpJyzSiPN/JVZxv43 N5NUrW+qhzi3vvApEBPcPonbeNZ2wYm3tZXdZPoNGACUIlxYVTYL0qpsW425I3rh 6s4qsUZGP7JRRDzHCh7X663f4olVi/cdqox2jwRYodg20qoILQdY55Xpb6sIu3oS 9cd8I5utPTA5zijWs5EYciWEFLtl3nLoFazLd9Rt/Ib+a4tNqX1oEKcpe+9qL50j K6eR6XAm8EgfFaoQxPHrIqnUVOQLjfKKpdBPE6Y1m8OUknlaVQIDAQABo4IDqTCC A6UwHQYDVR0OBBYEFMVQL+UdqhQgS7EWRi/Xb8vXG2qaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYy YTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMmRlMTNmNmUtYmE1My0z MDI5LTlkYmMtY2M2NzI4OTUxNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTA2MmEyMTktOWVlOC00OGEzLTg5 N2EtODQxMGI2ZGE5NGExL2EwNjJhMjE5LTllZTgtNDhhMy04OTdhLTg0MTBiNmRh OTRhMS5jcmwwHwYDVR0jBBgwFoAUFCgnZgWdJKC08ogP76ns4OluhhgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEw YjZkYTk0YTEuY2VyMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCaJgcAwQC aNsIAwQCaP8wAwQFbDygAwQEbKAQAwQEbK6gAwQCov0IAwQDwCLgAwQExvVwAwQB xxq+AwQDx71YAwQFzqPgAwQHzy+AAwQC2H7IAwQF2K6AMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALHdeFyl C0mFSC7WfgrcoQAOE+nFgZJYVErZIjpq2F+mBS37ezGSnCpuumvzc95f8ygWgQ7m WrnkAUD9LqakRSf6aETgPfaeV4fds+4DWbfgRp8DN624G1uFDv2wG4ms+ShQqvMe +H+sXUIc+KdhTOk2hxW3OqMGo5s5KkVG6hOqAjGs4WrZNOTI/msjcu1Sdk/+Fr3J rpcK+q56gIuxAWQYzvwvpyTjRonshAKakqu/09uy9wHvP/fYHNw44QmgqkpsHSkD mgbBu531fAmOtdDsCHyLfPAeCv3kCN6bH3BPtWeLMPZisWymcjGpHE2mXCLJRzF6 axWqB9a+/KC5zvg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:37 2025 by rpki-client