$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa File: 211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa (raw, json) Hash identifier: duPMeyEx/pKFSfQ4pAGMUBujgrQhFRPVujevzhme4DQ= Subject key identifier: 45:42:BE:D2:99:18:10:D4:29:03:5F:8A:38:39:75:DD:B8:96:F5:48 Certificate issuer: /CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Certificate serial: 010D0C9F432858499AF48C63C63B77F6B2096780 Authority key identifier: 0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 23265 IP address blocks: 64.185.96.0/19 maxlen: 24 72.10.0.0/19 maxlen: 24 206.126.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8c:63:c6:3b:77:f6:b2:09:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e659e35d-faf2-4685-b322-e54fbe3a41e9 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=8d628fdb-df1e-471e-b9ab-cd441e7d4d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:99:33:15:a2:a3:6b:44:c0:13:e6:34:a7: e3:d8:96:6b:1b:bb:1e:b2:83:84:4d:b5:82:1b:6e: 1d:1a:57:79:83:4b:12:83:7c:8d:b6:94:88:ac:91: 2d:51:fa:e5:48:9b:2f:e0:40:85:87:31:d9:b5:4d: 2b:e8:e7:cc:e4:b3:23:8f:a1:18:cf:e2:8b:12:d7: aa:73:ed:6d:0d:36:93:f2:d3:6f:b0:ad:80:d9:9d: 3c:31:97:d2:b1:f2:34:ef:80:59:91:d5:4e:6f:3b: fb:ec:e7:3d:17:64:99:5a:63:13:b2:06:98:2a:07: ec:88:e1:0f:f4:4f:f1:a6:9b:7f:77:ce:07:cc:6c: f4:37:4d:29:35:32:a6:d8:18:a5:dd:88:72:57:4e: 6c:6c:ba:c5:a2:b9:40:64:8e:c4:1c:18:13:6e:ee: 8d:da:bb:35:91:1c:84:5a:0d:f4:19:4d:0f:1c:c0: 03:e2:ea:df:63:68:d6:0e:de:bf:7d:9c:d0:e4:93: a3:dc:20:7c:b6:31:c8:ca:b4:c6:9c:5d:d0:01:da: ea:49:72:ef:52:b3:a2:82:bd:16:5e:ec:2d:2d:0b: e4:ef:8b:6a:b5:c1:ac:e8:d3:03:45:e7:59:17:20: 59:56:d6:40:2f:b9:5c:b8:37:52:54:84:e9:e6:ee: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:42:BE:D2:99:18:10:D4:29:03:5F:8A:38:39:75:DD:B8:96:F5:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/211a0c54-f4ce-3b9b-a7a4-2d9e78461f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9/e659e35d-faf2-4685-b322-e54fbe3a41e9.crl X509v3 Authority Key Identifier: keyid:0E:22:9A:4B:EB:5E:CF:B1:66:AB:A8:F5:E5:88:21:29:35:12:5A:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e659e35d-faf2-4685-b322-e54fbe3a41e9.cer sbgp-ipAddrBlock: critical IPv4: 64.185.96.0/19 72.10.0.0/19 206.126.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a6:be:38:58:a9:26:52:83:1f:9a:bf:09:43:94:b2:12:4f: 6f:8c:c6:ea:2d:33:82:a6:aa:b9:7a:67:b2:fb:96:4f:4b:29: c1:3f:51:d3:70:5b:bb:cd:f2:c7:1e:26:6f:82:2a:f5:c1:af: 6f:9f:6b:b0:fe:f9:3e:88:ee:35:3f:ae:0d:e8:f6:d6:e1:0b: 72:6e:f8:a7:2a:8a:81:71:50:a8:f2:2a:d0:9b:56:74:6e:d2: a1:4c:15:9f:b7:41:10:7c:f6:df:f9:38:ab:2d:b9:05:ac:8f: b1:a6:92:82:3d:76:ee:9c:44:2d:b7:14:d6:e4:2a:81:06:b0: c7:f3:79:1f:ca:a1:40:ea:6d:82:0c:32:e2:32:0d:a3:35:5a: 45:1f:df:94:3d:dc:30:22:60:e6:68:a0:52:f7:62:2e:d1:42: 68:56:17:2d:a2:9e:3b:e2:d0:8f:89:6e:34:f7:c7:d3:ad:7b: 5a:79:4b:f5:92:33:51:15:cf:90:a1:ef:2a:e5:03:39:10:12: 8b:ef:51:3f:08:cb:5a:4b:30:6d:c8:81:aa:c6:10:b9:5d:fa: ee:c4:79:c9:9b:59:a5:e4:a7:18:d9:c5:1f:4a:58:50:16:ff: 0e:f1:3e:2e:82:27:87:81:83:c2:9d:ea:ed:6e:bf:2c:91:bb: ca:5c:64:3e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEma9Ixjxjt39rIJZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY1OWUzNWQtZmFmMi00Njg1LWIzMjItZTU0ZmJlM2E0 MWU5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk OGQ2MjhmZGItZGYxZS00NzFlLWI5YWItY2Q0NDFlN2Q0ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpGZMxWio2tEwBPmNKfj2JZrG7sesoOETbWC G24dGld5g0sSg3yNtpSIrJEtUfrlSJsv4ECFhzHZtU0r6OfM5LMjj6EYz+KLEteq c+1tDTaT8tNvsK2A2Z08MZfSsfI074BZkdVObzv77Oc9F2SZWmMTsgaYKgfsiOEP 9E/xppt/d84HzGz0N00pNTKm2Bil3YhyV05sbLrForlAZI7EHBgTbu6N2rs1kRyE Wg30GU0PHMAD4urfY2jWDt6/fZzQ5JOj3CB8tjHIyrTGnF3QAdrqSXLvUrOigr0W XuwtLQvk74tqtcGs6NMDRedZFyBZVtZAL7lcuDdSVITp5u4rUwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEVCvtKZGBDUKQNfijg5dd24lvVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5 ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRmYmUzYTQxZTkvMjExYTBjNTQtZjRjZS0z YjliLWE3YTQtMmQ5ZTc4NDYxZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTY1OWUzNWQtZmFmMi00Njg1LWIz MjItZTU0ZmJlM2E0MWU5L2U2NTllMzVkLWZhZjItNDY4NS1iMzIyLWU1NGZiZTNh NDFlOS5jcmwwHwYDVR0jBBgwFoAUDiKaS+tez7Fmq6j15YghKTUSWvswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNjU5ZTM1ZC1mYWYyLTQ2ODUtYjMyMi1lNTRm YmUzYTQxZTkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFQLlgAwQF SAoAAwQEzn4QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACumvjhYqSZSgx+avwlDlLIST2+MxuotM4Kmqrl6 Z7L7lk9LKcE/UdNwW7vN8sceJm+CKvXBr2+fa7D++T6I7jU/rg3o9tbhC3Ju+Kcq ioFxUKjyKtCbVnRu0qFMFZ+3QRB89t/5OKstuQWsj7GmkoI9du6cRC23FNbkKoEG sMfzeR/KoUDqbYIMMuIyDaM1WkUf35Q93DAiYOZooFL3Yi7RQmhWFy2injvi0I+J bjT3x9Ote1p5S/WSM1EVz5Ch7yrlAzkQEovvUT8Iy1pLMG3IgarGELld+u7Eecmb WaXkpxjZxR9KWFAW/w7xPi6CJ4eBg8Kd6u1uvyyRu8pcZD4= -----END CERTIFICATE-----Generated at Mon Apr 28 13:44:51 2025 by rpki-client