$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/17081104-1472-3424-a75e-699ec47d4f30.roa File: 17081104-1472-3424-a75e-699ec47d4f30.roa (raw, json) Hash identifier: hZvRMkbtGC2KP8YsR8PTLIRaflDVOj+nqDt68Wcxces= Subject key identifier: 44:A1:74:AC:BC:5A:46:74:B0:CE:45:53:3C:D7:BE:2B:0B:8A:6C:6B Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F43285848EC96910FF43146D3F5D44B80 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/17081104-1472-3424-a75e-699ec47d4f30.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 27552 IP address blocks: 198.160.60.0/23 maxlen: 24 198.160.62.0/23 maxlen: 24 199.114.248.0/22 maxlen: 24 208.118.224.0/20 maxlen: 24 216.93.240.0/20 maxlen: 24 2001:4830::/32 maxlen: 48 2001:4830:100::/40 maxlen: 48 2001:4830:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:91:0f:f4:31:46:d3:f5:d4:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=da0a7525-ba70-41fb-917c-5e60b6b3b8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:1f:03:8e:6f:08:cf:34:e5:a6:52:19:32: 05:e8:6e:81:28:8c:95:4c:4e:bf:20:96:a1:3f:b6: 4a:6d:65:a2:d3:2c:a6:7e:19:e2:f1:9f:b7:5b:d3: 2a:d3:a4:ae:ae:55:23:4d:af:41:1a:8e:9c:b0:f3: c3:de:76:fb:f2:a7:0a:e0:cc:e6:e4:0b:fa:cb:2c: 97:8a:b0:d1:27:8c:80:66:58:ed:19:b4:47:f7:39: c5:cb:0d:cc:c1:a8:f4:2c:68:97:42:cb:42:50:c1: 15:cc:99:0d:f6:85:35:4c:26:53:c9:1d:f7:8d:06: d7:6b:27:99:e9:b3:9e:87:54:4f:28:2b:98:6f:bf: 91:84:20:47:29:28:fe:6e:bb:53:37:b2:31:17:55: 77:6e:3e:29:4b:e6:fd:56:7e:21:86:77:a2:47:d3: a2:b3:f5:3a:65:39:f5:b2:4c:c0:9c:96:93:ba:91: 83:7d:5d:f3:ec:a8:ae:6e:e9:95:3c:4d:64:b9:84: 78:09:98:75:c7:c6:d4:e7:b3:46:db:4e:37:d6:d6: 21:0f:6a:fe:6a:f9:4c:9d:04:13:27:a2:44:b9:da: ef:fd:65:8b:2c:38:0f:be:0e:6a:18:0c:fe:1b:70: 76:7b:ec:2e:74:c7:bc:8e:d0:fd:24:ca:66:7d:08: db:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A1:74:AC:BC:5A:46:74:B0:CE:45:53:3C:D7:BE:2B:0B:8A:6C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/17081104-1472-3424-a75e-699ec47d4f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 198.160.60.0/22 199.114.248.0/22 208.118.224.0/20 216.93.240.0/20 IPv6: 2001:4830::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c3:cc:be:f2:23:81:cd:f3:e3:ea:bd:86:5a:49:bf:28:8f: e2:df:44:88:4f:f8:f0:03:b4:a8:0d:4c:48:0c:dd:b1:07:99: 11:0c:49:34:0b:4a:d6:29:1a:a9:84:95:2f:d0:1c:da:6a:1e: 2d:6f:9e:86:f5:d0:d4:ef:a2:e5:e6:98:36:e8:f8:18:1d:30: 9d:dd:c9:69:e4:f5:a3:d5:f3:c2:ca:73:eb:94:ca:09:27:f5: 55:df:7a:9c:80:bd:71:2f:f8:66:f4:6b:af:2c:fb:d3:a6:dd: af:b0:77:f0:8a:d8:5a:f6:4b:bb:2c:c8:c0:29:38:af:e5:cd: bd:12:4d:37:c5:8a:dd:d1:ed:2a:25:bc:70:e9:5c:46:f2:9a: 21:ab:ee:9b:9f:67:a4:55:40:88:ce:39:25:48:e2:45:df:84: 70:cc:f6:2e:be:e4:c7:2c:9a:56:6f:dc:72:67:ed:fe:ef:6e: b6:81:69:58:7f:4b:c5:eb:29:13:47:82:4d:ec:1a:ca:19:7c: 16:8c:9e:aa:8d:6b:13:83:f8:ab:e6:14:e9:d1:52:ff:b1:92: 97:32:e0:cc:86:de:75:2d:01:99:97:4b:de:f7:df:00:19:36: 2c:bf:63:aa:18:e1:3f:91:de:9a:c8:b8:42:a3:e9:dd:5f:79: af:7e:ba:04 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEjslpEP9DFG0/XUS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZGEwYTc1MjUtYmE3MC00MWZiLTkxN2MtNWU2MGI2YjNiOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+IfA45vCM805aZSGTIF6G6BKIyVTE6/IJah P7ZKbWWi0yymfhni8Z+3W9Mq06SurlUjTa9BGo6csPPD3nb78qcK4Mzm5Av6yyyX irDRJ4yAZljtGbRH9znFyw3Mwaj0LGiXQstCUMEVzJkN9oU1TCZTyR33jQbXayeZ 6bOeh1RPKCuYb7+RhCBHKSj+brtTN7IxF1V3bj4pS+b9Vn4hhneiR9Ois/U6ZTn1 skzAnJaTupGDfV3z7KiubumVPE1kuYR4CZh1x8bU57NG20431tYhD2r+avlMnQQT J6JEudrv/WWLLDgPvg5qGAz+G3B2e+wudMe8jtD9JMpmfQjbEQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFEShdKy8WkZ0sM5FUzzXvisLimxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMTcwODExMDQtMTQ3Mi0z NDI0LWE3NWUtNjk5ZWM0N2Q0ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCxqA8AwQC x3L4AwQE0HbgAwQE2F3wMA0EAgACMAcDBQAgAUgwMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABjDzL7yI4HN 8+PqvYZaSb8oj+LfRIhP+PADtKgNTEgM3bEHmREMSTQLStYpGqmElS/QHNpqHi1v nob10NTvouXmmDbo+BgdMJ3dyWnk9aPV88LKc+uUygkn9VXfepyAvXEv+Gb0a68s +9Om3a+wd/CK2Fr2S7ssyMApOK/lzb0STTfFit3R7SolvHDpXEbymiGr7pufZ6RV QIjOOSVI4kXfhHDM9i6+5McsmlZv3HJn7f7vbraBaVh/S8XrKRNHgk3sGsoZfBaM nqqNaxOD+KvmFOnRUv+xkpcy4MyG3nUtAZmXS9733wAZNiy/Y6oY4T+R3prIuEKj 6d1fea9+ugQ= -----END CERTIFICATE-----Generated at Wed Apr 9 16:48:17 2025 by rpki-client