$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa File: cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa (raw, json) Hash identifier: yUvH2vca6ulfxL4EvFHKO4S4J5sbGWfB6L7N+m9RoP8= Subject key identifier: 60:7B:55:D0:5F:6F:66:16:03:C7:B2:38:1D:98:51:A0:57:CA:58:3B Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F43285849287E51030CFE7537AA056000 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 21928 IP address blocks: 24.221.0.0/16 maxlen: 24 52.144.16.0/21 maxlen: 24 75.122.0.0/15 maxlen: 24 104.152.20.0/22 maxlen: 24 173.4.0.0/14 maxlen: 24 174.141.208.0/20 maxlen: 24 174.144.0.0/12 maxlen: 24 184.192.0.0/10 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:51:03:0c:fe:75:37:aa:05:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=884dd0f4-bd86-4735-9cc3-f0c093f151cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:52:08:9d:ae:c3:1a:13:62:9e:a5:db:c1: 8b:a1:b3:8d:7f:af:75:fc:08:e7:67:75:f6:dc:d1: 47:d0:e7:ea:b1:31:02:37:28:54:fb:a6:a2:ff:7b: 34:33:c3:e5:0c:7e:c2:63:3c:74:d7:f5:ae:f7:48: c6:e1:9a:46:3d:6e:d0:92:6f:1c:90:f4:67:4d:f0: 6c:87:ab:03:88:f5:ed:84:9b:57:44:d4:09:c3:50: 1f:20:5c:7f:d3:fe:68:3b:8c:80:03:c0:f7:96:56: 4a:12:3f:40:8a:bf:95:7d:ae:4a:08:d6:c6:5a:d3: 17:1b:1a:16:c2:a2:ff:56:77:4e:77:7e:4f:ff:e6: 6c:85:27:ad:04:1b:1f:a3:35:ae:79:fb:c3:80:19: c7:ae:99:ae:74:54:59:48:53:42:9b:54:31:f0:80: 38:13:af:a2:39:73:1f:4c:e5:ba:90:4d:6f:79:eb: f1:f0:9d:03:ed:21:74:74:bb:dc:d2:f3:0b:db:5f: a7:d0:23:0d:92:63:7d:ac:14:a6:2e:fe:57:96:ec: 33:29:6e:b4:e8:91:9c:ac:12:c9:d3:a0:80:4f:d2: 0a:18:fc:b3:be:cd:9e:92:f7:73:01:f0:5f:95:53: c6:95:a6:08:42:48:b7:aa:4b:8a:03:eb:8e:85:fd: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7B:55:D0:5F:6F:66:16:03:C7:B2:38:1D:98:51:A0:57:CA:58:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/cc940f7d-110c-374c-9fbd-616d6f8a0e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 24.221.0.0/16 52.144.16.0/21 75.122.0.0/15 104.152.20.0/22 173.4.0.0/14 174.141.208.0/20 174.144.0.0/12 184.192.0.0/10 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a4:60:4f:bc:4e:53:6b:f0:9c:8e:01:d8:7f:e6:dc:95:64: 0e:d1:76:01:8f:e9:d4:69:de:be:31:c8:d3:e3:11:f8:73:96: ba:de:78:ff:b7:c2:9d:c9:10:b0:9c:61:1c:f6:59:38:1a:1e: f1:19:be:b3:a1:c7:99:e9:84:53:88:9a:02:1b:88:ff:58:e7: 51:81:ff:f4:87:65:a0:de:72:40:c2:01:04:9d:92:2a:c0:04: e4:8d:2a:30:27:40:df:08:b2:ce:e9:2a:cb:91:0f:9d:b8:99: 5e:a8:e3:c3:6f:db:be:b7:0e:89:b1:b1:f3:5d:3d:15:87:b2: 33:ab:db:73:ad:c2:a5:d9:a9:04:18:e0:67:89:af:77:5b:0f: 21:5a:57:ea:ca:cf:78:88:66:79:de:47:ed:83:9e:69:93:5a: 5a:09:95:b7:1c:9b:c1:13:25:0c:0d:a3:64:18:f0:14:9b:b9: f7:08:0e:fd:53:73:f8:f1:bb:26:a9:25:7f:25:25:ff:e6:44: 51:d0:79:26:f3:38:46:b1:af:11:8f:31:cd:dc:32:98:20:fd: 57:77:38:84:86:51:9b:2a:0f:b8:76:a4:94:1d:3f:e5:5d:2f: a7:88:5a:9a:4f:e6:3d:a5:ea:b9:08:b1:96:00:fa:6a:bf:bd: a6:1c:d5:ca -----BEGIN CERTIFICATE----- MIIGaDCCBVCgAwIBAgIUAQ0Mn0MoWEkoflEDDP51N6oFYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODg0ZGQwZjQtYmQ4Ni00NzM1LTljYzMtZjBjMDkzZjE1MWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjVSCJ2uwxoTYp6l28GLobONf691/AjnZ3X2 3NFH0OfqsTECNyhU+6ai/3s0M8PlDH7CYzx01/Wu90jG4ZpGPW7Qkm8ckPRnTfBs h6sDiPXthJtXRNQJw1AfIFx/0/5oO4yAA8D3llZKEj9Air+Vfa5KCNbGWtMXGxoW wqL/VndOd35P/+ZshSetBBsfozWuefvDgBnHrpmudFRZSFNCm1Qx8IA4E6+iOXMf TOW6kE1veevx8J0D7SF0dLvc0vML21+n0CMNkmN9rBSmLv5XluwzKW606JGcrBLJ 06CAT9IKGPyzvs2ekvdzAfBflVPGlaYIQki3qkuKA+uOhf2QPwIDAQABo4IDejCC A3YwHQYDVR0OBBYEFGB7VdBfb2YWA8eyOB2YUaBXylg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvY2M5NDBmN2QtMTEwYy0z NzRjLTlmYmQtNjE2ZDZmOGEwZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArAwMAGN0DBAM0 kBADAwFLegMEAmiYFAMDAq0EAwQEro3QAwMErpADAwa4wDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3pGBP vE5Ta/CcjgHYf+bclWQO0XYBj+nUad6+McjT4xH4c5a63nj/t8KdyRCwnGEc9lk4 Gh7xGb6zoceZ6YRTiJoCG4j/WOdRgf/0h2Wg3nJAwgEEnZIqwATkjSowJ0DfCLLO 6SrLkQ+duJleqOPDb9u+tw6JsbHzXT0Vh7Izq9tzrcKl2akEGOBnia93Ww8hWlfq ys94iGZ53kftg55pk1paCZW3HJvBEyUMDaNkGPAUm7n3CA79U3P48bsmqSV/JSX/ 5kRR0Hkm8zhGsa8RjzHN3DKYIP1XdziEhlGbKg+4dqSUHT/lXS+niFqaT+Y9peq5 CLGWAPpqv72mHNXK -----END CERTIFICATE-----Generated at Sun Apr 27 19:01:30 2025 by rpki-client