$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/9b57eb15-85bd-3c11-b0be-cda98acd7ec0.roa File: 9b57eb15-85bd-3c11-b0be-cda98acd7ec0.roa (raw, json) Hash identifier: x4HcoWaEwkC7ankWcOUUkY5YBHVJB3vZ5FGHJS6i5DI= Subject key identifier: 47:72:2B:7C:AD:DC:27:9C:16:A8:6C:53:35:FE:D9:46:D4:35:18:CD Certificate issuer: /CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Certificate serial: 010D0C9F432858492183FF1443264F64A7D8C1C0 Authority key identifier: 33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/9b57eb15-85bd-3c11-b0be-cda98acd7ec0.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 19504 IP address blocks: 64.6.112.0/20 maxlen: 24 66.109.112.0/21 maxlen: 24 68.171.176.0/20 maxlen: 24 104.200.208.0/21 maxlen: 24 216.122.152.0/21 maxlen: 24 216.147.224.0/20 maxlen: 24 2604:1c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:ff:14:43:26:4f:64:a7:d8:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=195f7d96-1ef5-4a82-973b-3d93c1a75d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:0a:6c:7e:33:f5:dc:d6:75:6c:c1:00:e9: 21:06:38:21:98:3a:80:93:08:ca:f1:27:17:90:4b: 1a:bc:0d:30:13:e6:c8:de:66:30:c4:71:62:66:5d: 06:39:13:1a:f3:ee:32:01:00:50:25:5a:1e:aa:e3: 79:6a:14:86:e1:d0:ac:2c:24:14:73:0e:dc:f6:61: 86:77:c9:c3:00:76:8e:c4:a0:64:35:51:83:1b:62: cf:49:29:0f:60:fe:0f:60:53:db:97:da:8c:a1:8f: ea:c9:d5:a4:6d:5a:04:d4:7b:aa:2e:4e:bf:50:70: c2:0d:32:37:5a:6f:8d:77:7d:d6:fe:f0:08:6f:56: 20:6f:6a:a0:57:6e:19:e5:47:1e:ea:d4:5d:0a:0e: 7c:44:99:d9:2c:34:a3:a6:ea:16:97:12:80:ea:16: cb:2d:32:fe:34:2a:c4:e5:db:34:8b:b0:d4:03:02: 2a:40:ca:29:02:e8:0c:89:1b:59:34:1b:8d:da:24: a8:10:00:43:81:b0:de:92:6f:a3:17:7e:9f:aa:b6: 6c:90:41:4a:1d:95:8e:bf:45:bc:7d:7f:73:9d:4e: 13:80:57:c4:32:fd:f1:5f:13:91:ac:9f:6f:03:01: 7e:b3:d1:1f:fd:fe:ff:1d:c3:64:2c:a2:5f:58:39: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:72:2B:7C:AD:DC:27:9C:16:A8:6C:53:35:FE:D9:46:D4:35:18:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/9b57eb15-85bd-3c11-b0be-cda98acd7ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.crl X509v3 Authority Key Identifier: keyid:33:48:4D:D7:F3:1C:85:0F:19:5D:51:25:B7:79:10:C1:DA:AF:F0:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d77e3a4-ab1b-40c3-ae54-9e50a2134cd3.cer sbgp-ipAddrBlock: critical IPv4: 64.6.112.0/20 66.109.112.0/21 68.171.176.0/20 104.200.208.0/21 216.122.152.0/21 216.147.224.0/20 IPv6: 2604:1c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:62:73:f3:d5:96:ce:b4:91:6b:11:82:d6:4c:88:90:07:24: 79:f9:72:2a:cc:1a:9d:6a:1f:c9:3e:ae:54:09:58:21:f4:08: 4a:8b:3b:29:ce:38:43:80:3b:64:d6:60:bf:63:c1:a4:ce:c1: dc:89:c7:4f:f6:59:66:09:29:8d:44:82:ac:12:8c:68:2a:a2: 41:23:af:f8:99:5c:21:99:6d:c7:ce:83:dd:f5:bd:93:42:22: 09:56:23:9b:81:00:a1:d5:43:e3:c5:f7:84:e1:ea:16:80:4f: df:c1:df:36:40:69:c1:11:ce:f0:cb:13:92:7f:8b:9e:3a:d0: c6:36:50:a3:0c:4a:c8:47:f2:aa:e7:81:4e:48:f2:9e:5b:01: 8b:5f:b0:1d:bf:43:2f:0f:10:e2:16:33:92:11:df:24:99:8b: 99:80:5f:4e:92:7b:94:83:d9:c2:31:23:d8:40:02:55:1c:80: e2:82:80:d4:8b:6d:2a:ca:c5:19:89:6b:e6:61:53:87:49:62: b6:0f:6b:80:1f:b3:16:6c:fc:29:49:77:48:4b:37:29:f6:4e: aa:72:00:08:17:74:8f:de:04:b4:b2:0e:b4:3b:c2:93:86:74: 48:36:ef:4a:61:97:17:e0:1e:94:89:f3:89:25:15:b1:22:79: d5:18:f4:40 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEkhg/8UQyZPZKfYwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ3N2UzYTQtYWIxYi00MGMzLWFlNTQtOWU1MGEyMTM0 Y2QzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MTk1ZjdkOTYtMWVmNS00YTgyLTk3M2ItM2Q5M2MxYTc1ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g0KbH4z9dzWdWzBAOkhBjghmDqAkwjK8ScX kEsavA0wE+bI3mYwxHFiZl0GORMa8+4yAQBQJVoequN5ahSG4dCsLCQUcw7c9mGG d8nDAHaOxKBkNVGDG2LPSSkPYP4PYFPbl9qMoY/qydWkbVoE1HuqLk6/UHDCDTI3 Wm+Nd33W/vAIb1Ygb2qgV24Z5Uce6tRdCg58RJnZLDSjpuoWlxKA6hbLLTL+NCrE 5ds0i7DUAwIqQMopAugMiRtZNBuN2iSoEABDgbDekm+jF36fqrZskEFKHZWOv0W8 fX9znU4TgFfEMv3xXxORrJ9vAwF+s9Ef/f7/HcNkLKJfWDlNKwIDAQABo4IDgjCC A34wHQYDVR0OBBYEFEdyK3yt3CecFqhsUzX+2UbUNRjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3 ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUwYTIxMzRjZDMvOWI1N2ViMTUtODViZC0z YzExLWIwYmUtY2RhOThhY2Q3ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ3N2UzYTQtYWIxYi00MGMzLWFl NTQtOWU1MGEyMTM0Y2QzLzhkNzdlM2E0LWFiMWItNDBjMy1hZTU0LTllNTBhMjEz NGNkMy5jcmwwHwYDVR0jBBgwFoAUM0hN1/MchQ8ZXVElt3kQwdqv8KYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDc3ZTNhNC1hYjFiLTQwYzMtYWU1NC05ZTUw YTIxMzRjZDMuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEQAZwAwQD Qm1wAwQERKuwAwQDaMjQAwQD2HqYAwQE2JPgMA0EAgACMAcDBQAmBAHAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAJBic/PVls60kWsRgtZMiJAHJHn5cirMGp1qH8k+rlQJWCH0CEqLOynOOEOA O2TWYL9jwaTOwdyJx0/2WWYJKY1EgqwSjGgqokEjr/iZXCGZbcfOg931vZNCIglW I5uBAKHVQ+PF94Th6haAT9/B3zZAacERzvDLE5J/i5460MY2UKMMSshH8qrngU5I 8p5bAYtfsB2/Qy8PEOIWM5IR3ySZi5mAX06Se5SD2cIxI9hAAlUcgOKCgNSLbSrK xRmJa+ZhU4dJYrYPa4AfsxZs/ClJd0hLNyn2TqpyAAgXdI/eBLSyDrQ7wpOGdEg2 70phlxfgHpSJ84klFbEiedUY9EA= -----END CERTIFICATE-----Generated at Tue Apr 29 07:06:03 2025 by rpki-client