$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/d34b8187-b278-3f2c-8301-e2278f3b89ad.roa File: d34b8187-b278-3f2c-8301-e2278f3b89ad.roa (raw, json) Hash identifier: GIA8nIDZM1AazQdSFbqKRDtgPtVUIIn6kmqF9fnwZwA= Subject key identifier: FB:C2:F3:02:7C:93:BF:74:4A:85:E3:32:93:2E:E9:E5:22:4F:3E:61 Certificate issuer: /CN=7adf94af-0a81-4f9a-b7ec-1b257b0f0963 Certificate serial: 010D0C9F43285849244E85611A32A878096793E0 Authority key identifier: 6B:65:82:B5:03:8E:8A:EB:CB:E8:21:37:F9:3D:DA:C1:53:B9:11:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/d34b8187-b278-3f2c-8301-e2278f3b89ad.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 33294 IP address blocks: 140.82.224.0/21 maxlen: 21 147.136.192.0/19 maxlen: 19 216.180.0.0/19 maxlen: 19 2606:7440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:85:61:1a:32:a8:78:09:67:93:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7adf94af-0a81-4f9a-b7ec-1b257b0f0963 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=13df758a-128f-44e4-a80e-1f2823498271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:c0:bb:ea:c0:ec:5b:02:7f:70:8a:c3:bc: 70:da:10:71:03:11:29:4b:09:b6:c2:29:25:05:42: 0c:55:9e:f2:b9:3a:2d:e2:01:be:da:79:d1:b1:13: 23:70:93:f9:fd:8f:f8:b3:c6:5f:80:2a:ed:0f:ff: b1:96:00:04:1f:91:72:a7:91:70:cf:4d:5b:8f:0c: 66:d4:a4:99:d7:73:7d:72:35:f4:90:62:b3:0f:e9: ef:b3:b9:35:8f:81:ec:8e:10:24:7a:6f:c9:21:57: aa:07:7e:4e:5d:ee:43:94:06:cf:f9:b8:41:a8:27: a1:26:9a:e7:69:1a:82:ca:42:bf:2f:1c:00:83:2b: 15:9a:a4:e7:85:37:0e:e0:66:d0:17:cd:71:51:07: b4:4c:93:26:a3:b4:4f:9f:41:bb:c0:4e:9c:9e:0d: 14:32:9c:81:8d:9d:56:77:71:12:a0:ca:13:6b:ba: c4:25:3c:49:1f:d9:93:e0:cf:d9:7a:45:29:0a:d2: b7:36:8c:e0:c5:82:b7:21:48:bc:46:79:dc:c2:2e: 95:e3:8e:98:03:d4:44:77:4a:5d:91:a0:48:a4:9d: 12:83:b5:f7:5a:3b:6f:55:a2:c3:8d:70:38:9a:32: 60:59:b3:3b:9c:41:b1:46:4d:82:77:aa:ad:67:f9: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C2:F3:02:7C:93:BF:74:4A:85:E3:32:93:2E:E9:E5:22:4F:3E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/d34b8187-b278-3f2c-8301-e2278f3b89ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.crl X509v3 Authority Key Identifier: keyid:6B:65:82:B5:03:8E:8A:EB:CB:E8:21:37:F9:3D:DA:C1:53:B9:11:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.cer sbgp-ipAddrBlock: critical IPv4: 140.82.224.0/21 147.136.192.0/19 216.180.0.0/19 IPv6: 2606:7440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e4:3e:0f:2b:a9:5c:29:53:a4:3a:9a:80:03:a6:7f:4d:60: 64:ee:a1:6f:c4:50:b0:37:ec:88:a5:e9:92:5a:61:80:86:a2: 83:60:f9:9a:9d:ce:1e:a0:95:ba:e4:84:e4:e5:4a:17:72:57: bf:c5:40:08:bc:fe:37:4f:dc:d2:9e:29:a1:55:76:50:89:e3: ee:a3:9b:14:ab:8e:70:33:e2:d3:7f:84:25:af:d3:c8:78:6c: 02:df:20:71:39:2f:b2:1b:92:31:c0:45:4e:25:4a:70:a2:ac: b7:a7:91:c4:60:05:57:af:1e:07:6f:b7:17:13:fc:b1:4a:35: f4:16:56:5e:e1:23:40:79:71:61:65:94:d8:75:f5:e9:9b:ef: 5f:3c:77:27:b7:f8:59:72:d9:16:27:8f:0a:2d:51:dd:29:18: 87:0d:24:e7:a2:be:ed:01:f8:0a:3f:ee:e2:89:41:46:37:a6: 48:a3:7a:52:df:4a:6c:4b:ad:74:2f:31:90:8d:66:e2:09:1b: 55:ae:0c:ba:d2:1f:d4:48:77:a6:78:cf:64:9e:0e:ee:23:22: ac:31:d3:d3:d7:87:6b:21:f7:2a:8f:30:0d:b0:67:ce:6e:03: 6a:61:cb:3c:ff:0a:ed:73:68:f6:26:f3:65:f1:4d:c4:32:ad: 5d:2f:da:71 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEkkToVhGjKoeAlnk+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FkZjk0YWYtMGE4MS00ZjlhLWI3ZWMtMWIyNTdiMGYw OTYzMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MTNkZjc1OGEtMTI4Zi00NGU0LWE4MGUtMWYyODIzNDk4MjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgHAu+rA7FsCf3CKw7xw2hBxAxEpSwm2wikl BUIMVZ7yuTot4gG+2nnRsRMjcJP5/Y/4s8ZfgCrtD/+xlgAEH5Fyp5Fwz01bjwxm 1KSZ13N9cjX0kGKzD+nvs7k1j4HsjhAkem/JIVeqB35OXe5DlAbP+bhBqCehJprn aRqCykK/LxwAgysVmqTnhTcO4GbQF81xUQe0TJMmo7RPn0G7wE6cng0UMpyBjZ1W d3ESoMoTa7rEJTxJH9mT4M/ZekUpCtK3NozgxYK3IUi8Rnncwi6V446YA9REd0pd kaBIpJ0Sg7X3WjtvVaLDjXA4mjJgWbM7nEGxRk2Cd6qtZ/m2mQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFPvC8wJ8k790SoXjMpMu6eUiTz5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YWRm OTRhZi0wYTgxLTRmOWEtYjdlYy0xYjI1N2IwZjA5NjMvZDM0YjgxODctYjI3OC0z ZjJjLTgzMDEtZTIyNzhmM2I4OWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2FkZjk0YWYtMGE4MS00ZjlhLWI3 ZWMtMWIyNTdiMGYwOTYzLzdhZGY5NGFmLTBhODEtNGY5YS1iN2VjLTFiMjU3YjBm MDk2My5jcmwwHwYDVR0jBBgwFoAUa2WCtQOOiuvL6CE3+T3awVO5EeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YWRmOTRhZi0wYTgxLTRmOWEtYjdlYy0xYjI1 N2IwZjA5NjMuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDjFLgAwQF k4jAAwQF2LQAMA0EAgACMAcDBQAmBnRAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHnkPg8rqVwpU6Q6moAD pn9NYGTuoW/EULA37Iil6ZJaYYCGooNg+Zqdzh6glbrkhOTlShdyV7/FQAi8/jdP 3NKeKaFVdlCJ4+6jmxSrjnAz4tN/hCWv08h4bALfIHE5L7IbkjHARU4lSnCirLen kcRgBVevHgdvtxcT/LFKNfQWVl7hI0B5cWFllNh19emb7188dye3+Fly2RYnjwot Ud0pGIcNJOeivu0B+Ao/7uKJQUY3pkijelLfSmxLrXQvMZCNZuIJG1WuDLrSH9RI d6Z4z2SeDu4jIqwx09PXh2sh9yqPMA2wZ85uA2phyzz/Cu1zaPYm82XxTcQyrV0v 2nE= -----END CERTIFICATE-----Generated at Sun Apr 27 23:09:17 2025 by rpki-client