$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/9fa88fe6-a684-32ce-9a5e-753d12d1ae98.roa File: 9fa88fe6-a684-32ce-9a5e-753d12d1ae98.roa (raw, json) Hash identifier: XTdl+sVPRqyLTMj5RmA+6GhJt9VM76aPDfZGuKswPpg= Subject key identifier: 38:0E:4A:6E:3B:BA:29:DB:B1:19:75:D4:37:B4:12:A4:4D:CB:CA:B7 Certificate issuer: /CN=45df54ec-090c-4c1e-aae6-b1ddb295a796 Certificate serial: 010D0C9F432858490B4C2718718844E18883F140 Authority key identifier: EA:ED:8D:83:88:5E:EB:A0:BC:CD:7F:2D:B2:44:DC:63:69:AC:6D:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/9fa88fe6-a684-32ce-9a5e-753d12d1ae98.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 19045 IP address blocks: 23.169.64.0/24 maxlen: 24 23.169.65.0/24 maxlen: 24 50.21.112.0/20 maxlen: 20 104.37.248.0/22 maxlen: 22 139.60.64.0/21 maxlen: 21 160.223.184.0/21 maxlen: 21 199.30.184.0/22 maxlen: 22 199.200.104.0/22 maxlen: 22 206.251.40.0/21 maxlen: 21 207.204.56.0/21 maxlen: 21 208.54.224.0/20 maxlen: 20 2607:2e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/45df54ec-090c-4c1e-aae6-b1ddb295a796.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/45df54ec-090c-4c1e-aae6-b1ddb295a796.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:27:18:71:88:44:e1:88:83:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45df54ec-090c-4c1e-aae6-b1ddb295a796 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=38baf6f3-9dc7-4486-92b8-00ac6844c6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:cb:3d:39:64:ca:5f:2b:31:7c:0d:c3:5a: a9:c3:c8:89:32:d9:88:8e:f3:90:07:f7:63:05:80: 35:22:80:e3:e2:f2:02:88:f8:b3:98:14:c2:d0:b3: 9b:b8:ba:b5:2d:3f:c6:01:8d:82:bb:14:d7:35:5b: 2a:8b:aa:5f:01:c3:90:c5:4d:5d:91:b2:d9:1e:93: ca:9b:c0:2a:d1:90:8c:06:1f:37:8b:cb:da:57:34: 20:d9:3b:08:50:01:65:26:e6:30:34:88:36:4f:40: 92:46:b0:ed:cd:73:84:05:ba:1b:70:d3:63:ef:8e: 4f:39:44:49:bd:8d:2a:b0:32:b9:8c:0e:5f:18:1b: a7:eb:52:98:39:c4:a5:22:89:c2:8d:70:63:dc:56: 47:6c:e2:ff:52:23:ae:8f:90:f5:64:58:19:40:8e: e0:22:e2:14:c9:e0:3c:ab:ee:9c:d4:32:78:d1:d9: 5b:e2:40:a0:0f:64:65:b9:2c:05:6d:d6:e9:b8:57: f9:e8:0d:d0:09:a5:20:10:4a:0b:01:87:0c:40:3a: 81:fd:11:2e:59:e1:9d:c2:42:9d:de:4a:e3:6e:cf: 2d:e0:cb:91:40:a8:4f:29:c5:c1:fb:1d:69:f9:d2: d6:bf:5a:68:f3:b9:b5:90:d3:e3:28:3a:eb:d2:eb: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0E:4A:6E:3B:BA:29:DB:B1:19:75:D4:37:B4:12:A4:4D:CB:CA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/9fa88fe6-a684-32ce-9a5e-753d12d1ae98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796/45df54ec-090c-4c1e-aae6-b1ddb295a796.crl X509v3 Authority Key Identifier: keyid:EA:ED:8D:83:88:5E:EB:A0:BC:CD:7F:2D:B2:44:DC:63:69:AC:6D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/45df54ec-090c-4c1e-aae6-b1ddb295a796.cer sbgp-ipAddrBlock: critical IPv4: 23.169.64.0/23 50.21.112.0/20 104.37.248.0/22 139.60.64.0/21 160.223.184.0/21 199.30.184.0/22 199.200.104.0/22 206.251.40.0/21 207.204.56.0/21 208.54.224.0/20 IPv6: 2607:2e80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:94:a4:9b:72:3e:b7:0d:ee:f2:b9:50:12:6d:10:a1:15:a1: a1:b4:68:1a:44:82:d4:ae:2b:49:41:f1:8e:eb:93:36:96:9f: e7:2d:6d:a1:24:d8:a8:8e:50:4c:a3:74:1b:8a:77:f1:c2:ab: 43:fe:66:7b:0e:70:2c:5e:27:b9:65:f4:48:c0:8c:61:ea:68: 4c:06:4e:c4:49:bc:a2:6f:bd:ae:13:5f:0d:89:41:d6:ed:0b: 8b:6f:b7:42:65:d5:81:f9:97:bc:83:93:7c:fb:4c:02:a2:40: e9:41:f1:95:3e:6d:29:eb:44:d9:5b:37:c1:ab:ba:2c:50:23: 82:6e:c6:35:4d:27:d3:06:05:33:8b:97:57:24:1a:ba:11:20: cb:f5:4c:63:e6:88:0a:ac:b4:c2:5b:04:c0:43:cd:86:0a:b4: f8:f8:7d:6e:7d:bd:76:04:a6:24:e7:b1:26:a2:f4:ad:07:6c: f3:36:69:88:8f:64:63:25:4c:57:03:90:ef:80:9d:87:6e:86: fc:6e:aa:94:16:db:60:ac:4e:1a:bb:06:01:d3:e3:94:e0:11: 65:c7:6e:52:45:56:95:21:86:4a:ef:2c:d8:5a:01:99:ad:ce: 69:16:af:72:d2:20:77:78:fc:cf:6b:58:3c:f9:bc:34:1e:f4: 8f:49:1b:e3 -----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgIUAQ0Mn0MoWEkLTCcYcYhE4YiD8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZjU0ZWMtMDkwYy00YzFlLWFhZTYtYjFkZGIyOTVh Nzk2MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MzhiYWY2ZjMtOWRjNy00NDg2LTkyYjgtMDBhYzY4NDRjNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NbLPTlkyl8rMXwNw1qpw8iJMtmIjvOQB/dj BYA1IoDj4vICiPizmBTC0LObuLq1LT/GAY2CuxTXNVsqi6pfAcOQxU1dkbLZHpPK m8Aq0ZCMBh83i8vaVzQg2TsIUAFlJuYwNIg2T0CSRrDtzXOEBbobcNNj745POURJ vY0qsDK5jA5fGBun61KYOcSlIonCjXBj3FZHbOL/UiOuj5D1ZFgZQI7gIuIUyeA8 q+6c1DJ40dlb4kCgD2RluSwFbdbpuFf56A3QCaUgEEoLAYcMQDqB/REuWeGdwkKd 3krjbs8t4MuRQKhPKcXB+x1p+dLWv1po87m1kNPjKDrr0uuxEQIDAQABo4IDmjCC A5YwHQYDVR0OBBYEFDgOSm47uinbsRl11De0EqRNy8q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NWRm NTRlYy0wOTBjLTRjMWUtYWFlNi1iMWRkYjI5NWE3OTYvOWZhODhmZTYtYTY4NC0z MmNlLTlhNWUtNzUzZDEyZDFhZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDVkZjU0ZWMtMDkwYy00YzFlLWFh ZTYtYjFkZGIyOTVhNzk2LzQ1ZGY1NGVjLTA5MGMtNGMxZS1hYWU2LWIxZGRiMjk1 YTc5Ni5jcmwwHwYDVR0jBBgwFoAU6u2Ng4he66C8zX8tskTcY2msbeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NWRmNTRlYy0wOTBjLTRjMWUtYWFlNi1iMWRk YjI5NWE3OTYuY2VyMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQBF6lAAwQE MhVwAwQCaCX4AwQDizxAAwQDoN+4AwQCxx64AwQCx8hoAwQDzvsoAwQDz8w4AwQE 0DbgMA0EAgACMAcDBQAmBy6AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH2UpJtyPrcN7vK5UBJtEKEVoaG0 aBpEgtSuK0lB8Y7rkzaWn+ctbaEk2KiOUEyjdBuKd/HCq0P+ZnsOcCxeJ7ll9EjA jGHqaEwGTsRJvKJvva4TXw2JQdbtC4tvt0Jl1YH5l7yDk3z7TAKiQOlB8ZU+bSnr RNlbN8GruixQI4JuxjVNJ9MGBTOLl1ckGroRIMv1TGPmiAqstMJbBMBDzYYKtPj4 fW59vXYEpiTnsSai9K0HbPM2aYiPZGMlTFcDkO+AnYduhvxuqpQW22CsThq7BgHT 45TgEWXHblJFVpUhhkrvLNhaAZmtzmkWr3LSIHd4/M9rWDz5vDQe9I9JG+M= -----END CERTIFICATE-----Generated at Mon Apr 28 17:40:54 2025 by rpki-client