$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa File: f7e7861a-7949-3299-a067-2db09c6ed01c.roa (raw, json) Hash identifier: BxDl4jbV83yLGJmS+XFmrvdy7b4/DncQCwr4tIMA9v8= Subject key identifier: 90:F7:27:EA:57:34:7E:59:2E:4E:79:32:EF:DF:EE:E3:BF:E4:3F:E2 Certificate issuer: /CN=ac42ca24-d785-4ab8-81d3-baec3a30b660 Certificate serial: 010D0C9F43285848E59BC8A133125E15C4231500 Authority key identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 18786 IP address blocks: 162.254.112.0/22 maxlen: 24 192.157.20.0/22 maxlen: 24 199.193.180.0/22 maxlen: 24 204.62.56.0/21 maxlen: 24 208.77.8.0/23 maxlen: 24 216.146.224.0/20 maxlen: 24 2607:ffe8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c8:a1:33:12:5e:15:c4:23:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac42ca24-d785-4ab8-81d3-baec3a30b660 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=c18f4d86-78a7-4eef-89a0-b3aecaf59919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:6c:36:64:d9:db:a2:4c:96:70:e3:be:87: 87:e2:f4:3c:3a:8b:11:b7:f8:c7:f2:e0:6b:a3:60: 54:a6:e9:b6:19:fc:5a:9c:a1:b7:88:df:96:56:27: 01:bb:62:a9:70:f2:0b:91:93:a8:2f:6f:44:95:1e: 70:da:df:a2:ef:d0:6a:26:1f:66:95:70:7a:ba:61: 64:be:05:a6:71:81:94:80:09:95:8e:a0:08:d9:82: d2:39:50:b0:6e:98:30:47:82:c8:b6:59:cf:07:d1: 04:f4:37:8a:7d:6e:f1:27:57:ca:51:c0:47:2c:bc: d1:e5:5b:e4:00:15:2e:43:9b:71:bd:b1:7a:be:10: 83:59:e9:d2:d3:ea:b2:ce:70:0d:62:18:dd:34:a8: 4e:9f:e5:fe:3c:38:98:cc:78:4b:29:4d:07:8d:6d: 48:64:cb:45:47:dc:9f:68:bc:61:3f:a9:8f:d0:2f: f2:54:87:f2:14:fb:65:01:a5:d2:1d:4b:dd:fd:bc: 2d:be:ed:75:04:fe:90:49:32:e9:76:1f:31:f8:51: 81:b1:63:14:d3:4d:0e:b1:64:3f:ca:c1:3a:f3:ad: 69:8a:c9:4e:71:d0:e2:32:35:31:ad:cd:17:7c:f6: f7:dc:ce:c1:f5:2a:2d:db:4f:a2:83:7c:95:82:f6: c6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F7:27:EA:57:34:7E:59:2E:4E:79:32:EF:DF:EE:E3:BF:E4:3F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/f7e7861a-7949-3299-a067-2db09c6ed01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.crl X509v3 Authority Key Identifier: keyid:F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer sbgp-ipAddrBlock: critical IPv4: 162.254.112.0/22 192.157.20.0/22 199.193.180.0/22 204.62.56.0/21 208.77.8.0/23 216.146.224.0/20 IPv6: 2607:ffe8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:73:00:04:01:70:4f:33:d8:a3:9e:0e:b9:0e:aa:7b:2f:05: cc:d3:d9:9a:47:e4:24:84:25:1a:fb:04:2c:38:64:9e:a9:5a: 1d:22:8e:59:72:3b:42:37:36:d4:36:83:b7:9a:ef:1c:a4:b1: b2:19:f2:4e:56:63:3b:c2:a2:02:04:c0:4c:68:05:a4:f6:d6: cb:dd:e8:03:ab:5d:f1:f4:44:9b:ee:2b:37:a2:e7:ba:e4:81: 79:9a:df:5f:b3:d7:a3:98:bb:be:95:aa:17:c6:cb:0c:39:bb: c7:ac:b2:63:a9:e2:f7:4f:7d:ba:70:b4:89:a3:27:45:75:e2: 56:1a:63:0f:79:84:08:05:e5:60:fe:01:d3:c4:da:e6:dc:94: 3b:8e:30:97:d3:be:59:2f:0e:7f:ff:a1:06:fc:ef:12:e9:7a: 9a:05:bb:3c:94:58:33:8a:25:00:0f:80:f3:59:ec:b5:c2:5c: 9a:18:b9:55:b5:4d:7e:4c:c7:f3:7a:ad:8b:b1:1d:b0:7d:8e: 02:86:90:51:b2:19:58:12:82:3e:43:06:32:a6:3a:44:ce:0e: 38:3d:f7:3e:16:84:32:b5:23:28:4a:b1:4a:d9:6b:2b:5a:dc: e6:ff:d6:46:c8:36:e3:65:07:f7:20:ab:69:ce:66:7b:2f:f1: a1:9a:77:cc -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEjlm8ihMxJeFcQjFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM0MmNhMjQtZDc4NS00YWI4LTgxZDMtYmFlYzNhMzBi NjYwMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YzE4ZjRkODYtNzhhNy00ZWVmLTg5YTAtYjNhZWNhZjU5OTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvRsNmTZ26JMlnDjvoeH4vQ8OosRt/jH8uBr o2BUpum2GfxanKG3iN+WVicBu2KpcPILkZOoL29ElR5w2t+i79BqJh9mlXB6umFk vgWmcYGUgAmVjqAI2YLSOVCwbpgwR4LItlnPB9EE9DeKfW7xJ1fKUcBHLLzR5Vvk ABUuQ5txvbF6vhCDWenS0+qyznANYhjdNKhOn+X+PDiYzHhLKU0HjW1IZMtFR9yf aLxhP6mP0C/yVIfyFPtlAaXSHUvd/bwtvu11BP6QSTLpdh8x+FGBsWMU000OsWQ/ ysE6861pislOcdDiMjUxrc0XfPb33M7B9Sot20+ig3yVgvbGCQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFJD3J+pXNH5ZLk55Mu/f7uO/5D/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYzQy Y2EyNC1kNzg1LTRhYjgtODFkMy1iYWVjM2EzMGI2NjAvZjdlNzg2MWEtNzk0OS0z Mjk5LWEwNjctMmRiMDljNmVkMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWM0MmNhMjQtZDc4NS00YWI4LTgx ZDMtYmFlYzNhMzBiNjYwL2FjNDJjYTI0LWQ3ODUtNGFiOC04MWQzLWJhZWMzYTMw YjY2MC5jcmwwHwYDVR0jBBgwFoAU9Lb17wuDSXlrUGJZ8DZGjecIH68wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYzQyY2EyNC1kNzg1LTRhYjgtODFkMy1iYWVj M2EzMGI2NjAuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCov5wAwQC wJ0UAwQCx8G0AwQDzD44AwQB0E0IAwQE2JLgMA0EAgACMAcDBQAmB//oMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAFpzAAQBcE8z2KOeDrkOqnsvBczT2ZpH5CSEJRr7BCw4ZJ6pWh0ijllyO0I3 NtQ2g7ea7xyksbIZ8k5WYzvCogIEwExoBaT21svd6AOrXfH0RJvuKzei57rkgXma 31+z16OYu76VqhfGyww5u8essmOp4vdPfbpwtImjJ0V14lYaYw95hAgF5WD+AdPE 2ubclDuOMJfTvlkvDn//oQb87xLpepoFuzyUWDOKJQAPgPNZ7LXCXJoYuVW1TX5M x/N6rYuxHbB9jgKGkFGyGVgSgj5DBjKmOkTODjg99z4WhDK1IyhKsUrZayta3Ob/ 1kbINuNlB/cgq2nOZnsv8aGad8w= -----END CERTIFICATE-----Generated at Fri Apr 11 23:38:47 2025 by rpki-client