$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa File: efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa (raw, json) Hash identifier: 5PoQ/eQuoCGa2LHpq4/2tTDFR7Pb64erRzQwspWizoc= Subject key identifier: D5:17:A6:37:64:D1:6A:A6:CA:AB:65:C7:B5:E3:C5:6E:25:33:C1:02 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F432858497279A47BB93B8D22021B4C80 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 6621 IP address blocks: 174.32.76.0/24 maxlen: 24 174.32.81.0/24 maxlen: 24 174.32.92.0/24 maxlen: 24 174.32.107.0/24 maxlen: 24 174.32.108.0/22 maxlen: 22 174.32.112.0/20 maxlen: 20 174.32.129.0/24 maxlen: 24 174.32.130.0/23 maxlen: 23 174.32.133.0/24 maxlen: 24 174.32.134.0/23 maxlen: 23 174.32.136.0/21 maxlen: 21 174.32.144.0/23 maxlen: 23 174.32.160.0/22 maxlen: 22 174.32.164.0/22 maxlen: 22 174.32.168.0/22 maxlen: 22 174.32.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:a4:7b:b9:3b:8d:22:02:1b:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=2b9b49ca-8af4-43ba-9d1b-c5ca8960adb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7b:80:9b:ef:99:73:b2:49:19:43:df:6d:3a: f2:cf:32:e2:21:94:a3:07:29:6f:e0:87:4d:93:dd: a4:22:67:93:44:9e:2f:08:9e:1f:31:bc:ac:26:0a: 07:a7:ec:32:a7:65:62:29:4f:b7:50:26:5b:15:4a: 8f:74:25:2f:ea:b5:4c:aa:4f:09:9e:31:6d:ea:1a: 46:c8:74:6b:62:e8:75:a6:ec:50:96:f3:de:e7:17: 55:f0:36:9b:1c:6e:e3:e6:00:c4:a9:ce:67:32:b9: e5:7f:b4:a4:81:96:4b:a6:c2:37:75:14:86:b5:64: d1:88:4b:c4:55:be:ee:e4:3e:98:e8:63:3a:22:2d: 72:16:26:d1:c1:68:52:51:c6:68:74:11:5d:7b:1b: ae:07:95:79:7f:a0:19:cb:9d:16:78:8d:ee:bf:56: f2:40:4f:9e:b5:69:e3:a3:07:72:4b:ae:39:87:0d: 45:84:19:d1:01:83:24:66:66:b4:3f:1d:fc:0c:7b: f2:df:84:ed:1c:a6:6f:58:d4:19:5e:e9:ac:8f:ad: 9d:49:4b:51:ef:07:ee:58:87:f5:d8:57:8b:35:33: d2:ac:72:00:2f:79:53:e1:d3:dd:75:84:5f:43:af: c4:93:85:34:e0:19:30:b8:1d:66:03:0d:8e:3b:33: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:17:A6:37:64:D1:6A:A6:CA:AB:65:C7:B5:E3:C5:6E:25:33:C1:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/efacbaaf-444a-32fb-8ee0-e182bd9e55fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 174.32.76.0/24 174.32.81.0/24 174.32.92.0/24 174.32.107.0-174.32.127.255 174.32.129.0-174.32.131.255 174.32.133.0-174.32.145.255 174.32.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:32:31:18:7f:a5:e4:5c:4a:14:3e:60:84:98:39:5b:b4:8f: fa:50:53:30:21:0d:df:40:ca:8d:a3:dc:d2:ca:19:c5:a6:a3: b1:78:ce:9c:19:01:86:ab:9d:85:fa:22:c9:a3:f1:fe:20:f5: 1a:78:34:7b:55:71:9e:92:68:31:e9:81:4b:43:80:e1:87:25: 4f:ba:2f:60:55:28:68:3f:bf:cf:6d:a0:be:45:d5:07:b7:08: 9f:4a:7d:e6:34:44:22:bd:38:75:21:06:4f:00:10:d1:ab:89: 7e:6d:0d:8f:d5:91:0c:9a:a5:e8:48:c3:a5:55:42:2e:cf:4b: d1:b0:68:6d:0f:70:ca:97:f0:d7:23:80:94:6c:ed:dd:28:2a: ee:b9:36:1e:28:67:88:1d:fc:13:9a:81:34:ea:20:b8:a1:2e: c8:2a:f5:d4:46:6f:f6:e7:30:98:62:8d:c0:36:e3:51:80:7e: df:57:02:11:3c:b1:97:d4:cb:aa:57:c9:19:3f:c1:bd:43:f7: cf:e7:1f:02:76:41:ce:7d:33:55:54:70:45:cc:74:3e:54:6a: 55:51:30:bd:3a:e7:e0:1e:ec:ff:03:2e:cb:ff:b9:5b:70:13: 6e:e1:ad:4c:88:3c:ad:71:48:da:95:ee:29:c3:d6:b0:3e:48: 7f:eb:f2:9f -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWElyeaR7uTuNIgIbTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk MmI5YjQ5Y2EtOGFmNC00M2JhLTlkMWItYzVjYTg5NjBhZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXuAm++Zc7JJGUPfbTryzzLiIZSjBylv4IdN k92kImeTRJ4vCJ4fMbysJgoHp+wyp2ViKU+3UCZbFUqPdCUv6rVMqk8JnjFt6hpG yHRrYuh1puxQlvPe5xdV8DabHG7j5gDEqc5nMrnlf7SkgZZLpsI3dRSGtWTRiEvE Vb7u5D6Y6GM6Ii1yFibRwWhSUcZodBFdexuuB5V5f6AZy50WeI3uv1byQE+etWnj owdyS645hw1FhBnRAYMkZma0Px38DHvy34TtHKZvWNQZXumsj62dSUtR7wfuWIf1 2FeLNTPSrHIAL3lT4dPddYRfQ6/Ek4U04BkwuB1mAw2OOzM3WwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFNUXpjdk0Wqmyqtlx7XjxW4lM8ECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZWZhY2JhYWYtNDQ0YS0z MmZiLThlZTAtZTE4MmJkOWU1NWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAriBMAwQA riBRAwQAriBcMAwDBACuIGsDBAeuIAAwDAMEAK4ggQMEAq4ggDAMAwQAriCFAwQB riCQAwQEriCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJ8yMRh/peRcShQ+YISYOVu0j/pQUzAhDd9Ayo2j 3NLKGcWmo7F4zpwZAYarnYX6Ismj8f4g9Rp4NHtVcZ6SaDHpgUtDgOGHJU+6L2BV KGg/v89toL5F1Qe3CJ9KfeY0RCK9OHUhBk8AENGriX5tDY/VkQyapehIw6VVQi7P S9GwaG0PcMqX8NcjgJRs7d0oKu65Nh4oZ4gd/BOagTTqILihLsgq9dRGb/bnMJhi jcA241GAft9XAhE8sZfUy6pXyRk/wb1D98/nHwJ2Qc59M1VUcEXMdD5UalVRML06 5+Ae7P8DLsv/uVtwE27hrUyIPK1xSNqV7inD1rA+SH/r8p8= -----END CERTIFICATE-----Generated at Mon Apr 28 21:08:03 2025 by rpki-client