$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa File: 012553be-cadc-391f-be02-761ff5c3fe9c.roa (raw, json) Hash identifier: DRdyzmyL03n4CJtCiAtkiKn+pxa3kn2B4+yn83EUzQY= Subject key identifier: 40:88:F5:73:C5:0A:21:5D:2F:62:B2:F5:76:A2:39:80:0A:0A:53:21 Certificate issuer: /CN=e4877b41-a7e3-491a-a87e-56a8cf46d169 Certificate serial: 010D0C9F432858493C0928CE683ACDE4F3083280 Authority key identifier: 79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 26269 IP address blocks: 160.223.176.0/22 maxlen: 24 162.216.232.0/22 maxlen: 24 173.45.176.0/20 maxlen: 24 198.135.144.0/21 maxlen: 24 199.58.144.0/22 maxlen: 24 199.241.220.0/22 maxlen: 24 2602:ff89::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:28:ce:68:3a:cd:e4:f3:08:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4877b41-a7e3-491a-a87e-56a8cf46d169 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=f45b0c7a-63ed-4d66-aa6b-20ef849bfda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:79:1b:6e:e4:da:c4:63:32:38:72:33:b5: 9e:98:45:ca:46:42:11:00:7f:28:2a:43:2b:e4:1d: 11:aa:63:b1:fa:7a:86:69:d6:c7:a0:c7:e6:bb:33: 65:9f:3a:0d:fa:9d:eb:07:8c:32:30:e6:12:e4:73: 3f:9e:9b:d0:8b:15:35:99:26:e5:b3:15:1f:08:21: fb:d0:6a:8f:ad:5e:dc:75:e4:10:7c:35:5a:9c:bc: 9c:27:3f:e0:40:90:10:5c:86:99:7a:81:1f:15:03: 98:fa:47:e8:61:95:28:89:fb:e9:54:62:7a:42:83: 8d:3a:0f:0a:a2:f3:93:fc:a4:fb:fc:5a:d0:7d:0c: d2:1f:cf:07:42:29:db:5f:d2:1e:3f:9d:43:0a:40: 3b:ec:c7:89:13:cd:9e:8d:15:c1:a5:d6:72:5f:3b: 16:89:02:d4:c0:49:11:7e:27:8f:98:b4:f6:b3:ef: 91:9a:29:ee:e6:fb:66:80:fa:f1:e1:18:11:b2:68: cd:62:9a:15:10:fe:c3:02:e6:eb:4e:49:77:d1:9d: db:18:23:db:c7:3e:cf:fe:76:73:b7:05:de:1b:5e: 71:f2:76:0a:ec:8c:42:a2:f8:0d:d0:be:18:02:f1: 20:86:84:33:df:c8:39:05:78:64:6c:d1:b9:79:b4: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:88:F5:73:C5:0A:21:5D:2F:62:B2:F5:76:A2:39:80:0A:0A:53:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl X509v3 Authority Key Identifier: keyid:79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer sbgp-ipAddrBlock: critical IPv4: 160.223.176.0/22 162.216.232.0/22 173.45.176.0/20 198.135.144.0/21 199.58.144.0/22 199.241.220.0/22 IPv6: 2602:ff89::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:35:30:99:38:3a:93:f2:a4:93:5b:19:ce:e1:69:9d:0e:2a: 26:57:56:44:0e:78:d8:11:ad:bf:28:4b:a4:b4:50:fb:09:c4: d8:66:77:3f:bb:73:2f:5a:48:53:96:41:ce:3e:01:9c:95:97: 23:99:af:7a:39:ba:ce:06:89:04:a3:de:69:27:26:6c:29:d8: a2:71:52:00:58:ae:ec:f8:83:c5:97:94:cf:72:bc:e3:84:d1: 88:11:4c:7c:22:46:15:5d:9b:3f:90:15:2b:e2:fc:01:ee:bd: db:e3:93:37:a7:c3:05:05:35:c5:db:cc:85:18:1b:e5:6b:4a: d2:4a:88:f0:4f:c2:3e:4f:15:04:c2:29:b9:8d:cf:11:6e:16: c5:35:11:80:77:76:c4:12:d0:de:dd:bf:ce:41:85:17:5d:aa: ca:b0:5e:46:08:2b:fa:08:b5:1a:d9:69:fe:84:cf:2e:2b:b0: b4:9a:9a:1a:57:bc:55:72:df:80:d1:c3:94:e9:2b:26:09:df: 8d:cc:6a:cb:2d:6e:24:de:fc:f3:f0:49:d0:4d:01:45:0c:ae: dd:a5:d7:b6:c6:17:0c:59:c8:91:e0:87:37:09:c2:a9:ca:8d: f9:e5:be:34:cc:3a:fa:8e:f1:38:54:30:c6:e2:e1:24:b2:a7: 6d:2a:e0:5b -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEk8CSjOaDrN5PMIMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ4NzdiNDEtYTdlMy00OTFhLWE4N2UtNTZhOGNmNDZk MTY5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZjQ1YjBjN2EtNjNlZC00ZDY2LWFhNmItMjBlZjg0OWJmZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWN5G27k2sRjMjhyM7WemEXKRkIRAH8oKkMr 5B0RqmOx+nqGadbHoMfmuzNlnzoN+p3rB4wyMOYS5HM/npvQixU1mSblsxUfCCH7 0GqPrV7cdeQQfDVanLycJz/gQJAQXIaZeoEfFQOY+kfoYZUoifvpVGJ6QoONOg8K ovOT/KT7/FrQfQzSH88HQinbX9IeP51DCkA77MeJE82ejRXBpdZyXzsWiQLUwEkR fiePmLT2s++Rminu5vtmgPrx4RgRsmjNYpoVEP7DAubrTkl30Z3bGCPbxz7P/nZz twXeG15x8nYK7IxCovgN0L4YAvEghoQz38g5BXhkbNG5ebQSGwIDAQABo4IDgzCC A38wHQYDVR0OBBYEFECI9XPFCiFdL2Ky9XaiOYAKClMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNDg3 N2I0MS1hN2UzLTQ5MWEtYTg3ZS01NmE4Y2Y0NmQxNjkvMDEyNTUzYmUtY2FkYy0z OTFmLWJlMDItNzYxZmY1YzNmZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTQ4NzdiNDEtYTdlMy00OTFhLWE4 N2UtNTZhOGNmNDZkMTY5L2U0ODc3YjQxLWE3ZTMtNDkxYS1hODdlLTU2YThjZjQ2 ZDE2OS5jcmwwHwYDVR0jBBgwFoAUeU/s9F/sLc89/I7kYL/QlEbVJuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNDg3N2I0MS1hN2UzLTQ5MWEtYTg3ZS01NmE4 Y2Y0NmQxNjkuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDAqBAIAATAkAwQCoN+wAwQC otjoAwQErS2wAwQDxoeQAwQCxzqQAwQCx/HcMA4EAgACMAgDBgQmAv+JADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQCINTCZODqT8qSTWxnO4WmdDiomV1ZEDnjYEa2/KEuktFD7CcTYZnc/u3Mv WkhTlkHOPgGclZcjma96ObrOBokEo95pJyZsKdiicVIAWK7s+IPFl5TPcrzjhNGI EUx8IkYVXZs/kBUr4vwB7r3b45M3p8MFBTXF28yFGBvla0rSSojwT8I+TxUEwim5 jc8RbhbFNRGAd3bEEtDe3b/OQYUXXarKsF5GCCv6CLUa2Wn+hM8uK7C0mpoaV7xV ct+A0cOU6SsmCd+NzGrLLW4k3vzz8EnQTQFFDK7dpde2xhcMWciR4Ic3CcKpyo35 5b40zDr6jvE4VDDG4uEksqdtKuBb -----END CERTIFICATE-----Generated at Sat Apr 19 16:01:13 2025 by rpki-client