$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa File: cebb264b-8916-3bf8-971e-9c880ec664a8.roa (raw, json) Hash identifier: 8pewW0KJHQcgJwu/M7lvbSlBm9eprDjLgdWF/s4iGcQ= Subject key identifier: 88:3D:AC:71:88:15:F5:E7:FE:33:2F:C6:BC:39:22:91:4B:AF:C8:D5 Certificate issuer: /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Certificate serial: 010D0C9F43285848DBD66554B91933D17BB28F40 Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 53698 IP address blocks: 23.174.128.0/24 maxlen: 24 23.174.129.0/24 maxlen: 24 23.175.16.0/24 maxlen: 24 165.140.128.0/23 maxlen: 24 192.33.139.0/24 maxlen: 24 209.209.4.0/22 maxlen: 24 2604:6040::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:65:54:b9:19:33:d1:7b:b2:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=51814cbd-736e-4f72-8c38-11d1f6d64ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:e6:c0:3e:de:f2:70:a5:a9:e2:07:e1:23: d8:01:27:78:63:29:bc:6f:72:ad:c1:52:fb:43:7b: d8:42:3c:7f:64:97:79:13:0d:07:16:78:1e:26:46: 72:28:ba:4e:41:fa:50:b6:d8:2f:e3:46:69:9f:61: 7c:69:9a:1c:57:21:b6:89:a6:71:7c:8c:a7:1b:9b: 38:03:cd:8d:cb:f4:bb:70:95:fc:26:86:15:4c:9c: 97:4a:b5:15:99:74:6b:ac:16:05:e3:09:c9:9a:c8: fb:73:6c:f2:94:76:aa:1d:65:49:3c:28:d1:9c:80: e0:38:e3:4e:5f:d0:b4:d2:96:7e:24:c0:9b:3e:cd: 24:6b:1e:ae:65:af:96:fd:bd:72:dc:b7:56:86:3d: 4d:6b:de:92:c8:26:bf:85:63:ee:21:63:1a:62:20: b1:86:76:a2:02:de:ac:28:dd:c1:c0:0f:b5:31:e0: c8:15:e6:a7:a5:19:75:88:90:d6:48:c5:e7:f8:84: 58:83:e2:24:a7:a2:73:6c:1d:02:60:5d:15:0a:ab: 8c:dd:e7:2d:9b:67:9c:dc:7b:a4:4b:cd:9b:0d:e7: e1:f4:48:cf:d3:09:7f:92:fc:37:c9:aa:a3:78:fc: 42:1f:63:ae:01:b9:54:6c:f1:00:38:fd:ee:39:55: 68:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3D:AC:71:88:15:F5:E7:FE:33:2F:C6:BC:39:22:91:4B:AF:C8:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl X509v3 Authority Key Identifier: keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer sbgp-ipAddrBlock: critical IPv4: 23.174.128.0/23 23.175.16.0/24 165.140.128.0/23 192.33.139.0/24 209.209.4.0/22 IPv6: 2604:6040::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b0:ee:e9:df:ed:8e:b3:35:5f:73:d5:5c:9e:89:7c:53:4e: d7:4d:35:fd:ba:7a:3b:7e:7a:79:34:77:ed:d9:f0:9b:c0:a3: e0:42:fa:51:79:a6:33:b0:9a:17:77:ba:33:b2:ab:0a:cd:da: bc:c6:91:7a:14:98:03:b1:46:e9:64:d3:79:3a:b9:fb:f1:da: 74:7f:d4:f2:f1:15:01:38:f4:2b:9a:b3:cd:90:a8:a5:13:38: 5a:53:8f:12:43:fe:d2:86:91:5c:56:76:5e:e2:18:d8:2f:f9: fa:30:22:16:24:51:a3:00:21:db:cd:5c:a8:c7:0d:47:c7:2e: f9:81:30:c0:44:c2:6b:d8:91:6a:fd:9f:a4:85:ba:e5:a6:c3: 38:30:3c:4c:2f:1a:a8:86:c9:9e:82:1d:c7:ff:0e:a1:2e:30: 6a:f4:a9:b7:b8:4a:b0:30:77:d5:70:87:dc:93:49:9d:ff:15: 90:ec:af:16:29:91:18:06:48:7e:bc:35:b6:d1:4b:51:35:ec: 66:41:f0:e4:81:8d:82:d3:02:eb:00:19:97:25:8e:5c:b8:59: 61:e2:01:e5:a4:8b:8e:87:60:fa:21:ab:fa:89:bb:ff:54:38: ab:5f:f3:2f:60:a6:02:d4:af:5b:aa:d2:f1:16:4e:52:70:ab: 78:08:ef:d6 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEjb1mVUuRkz0Xuyj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZTM1ZjktYmZlMS00YzY5LWJiMzItY2QyNTJjMTI1 YzY1MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk NTE4MTRjYmQtNzM2ZS00ZjcyLThjMzgtMTFkMWY2ZDY0ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1LmwD7e8nClqeIH4SPYASd4Yym8b3KtwVL7 Q3vYQjx/ZJd5Ew0HFngeJkZyKLpOQfpQttgv40Zpn2F8aZocVyG2iaZxfIynG5s4 A82Ny/S7cJX8JoYVTJyXSrUVmXRrrBYF4wnJmsj7c2zylHaqHWVJPCjRnIDgOONO X9C00pZ+JMCbPs0kax6uZa+W/b1y3LdWhj1Na96SyCa/hWPuIWMaYiCxhnaiAt6s KN3BwA+1MeDIFeanpRl1iJDWSMXn+IRYg+Ikp6JzbB0CYF0VCquM3ectm2ec3Huk S82bDefh9EjP0wl/kvw3yaqjePxCH2OuAblUbPEAOP3uOVVoDwIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFIg9rHGIFfXn/jMvxrw5IpFLr8jVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MTVl MzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1MmMxMjVjNjUvY2ViYjI2NGItODkxNi0z YmY4LTk3MWUtOWM4ODBlYzY2NGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjE1ZTM1ZjktYmZlMS00YzY5LWJi MzItY2QyNTJjMTI1YzY1LzYxNWUzNWY5LWJmZTEtNGM2OS1iYjMyLWNkMjUyYzEy NWM2NS5jcmwwHwYDVR0jBBgwFoAUfPNnR7JaJ7Vbv8yDaNxdsrhE0sIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MTVlMzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1 MmMxMjVjNjUuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQBF66AAwQA F68QAwQBpYyAAwQAwCGLAwQC0dEEMA4EAgACMAgDBgQmBGBAADBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAn sO7p3+2OszVfc9Vcnol8U07XTTX9uno7fnp5NHft2fCbwKPgQvpReaYzsJoXd7oz sqsKzdq8xpF6FJgDsUbpZNN5Orn78dp0f9Ty8RUBOPQrmrPNkKilEzhaU48SQ/7S hpFcVnZe4hjYL/n6MCIWJFGjACHbzVyoxw1Hxy75gTDARMJr2JFq/Z+khbrlpsM4 MDxMLxqohsmegh3H/w6hLjBq9Km3uEqwMHfVcIfck0md/xWQ7K8WKZEYBkh+vDW2 0UtRNexmQfDkgY2C0wLrABmXJY5cuFlh4gHlpIuOh2D6Iav6ibv/VDirX/MvYKYC 1K9bqtLxFk5ScKt4CO/W -----END CERTIFICATE-----Generated at Tue Apr 29 18:47:24 2025 by rpki-client