$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa File: ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa (raw, json) Hash identifier: de+Js3MfDPCJIGxpTUuqEid4w/QQ//Xfua7g2G17jJI= Subject key identifier: AE:4E:0E:2E:A1:77:4C:0E:9D:4A:AC:1C:B1:20:F2:A8:90:70:F9:7A Certificate issuer: /CN=c067ebcd-d586-4479-97f2-23ae813be2d8 Certificate serial: 010D0C9F43285849552952AC3730DE6503539C00 Authority key identifier: 06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 19224 IP address blocks: 130.51.84.0/22 maxlen: 24 172.98.0.0/22 maxlen: 22 192.210.0.0/24 maxlen: 24 204.10.32.0/22 maxlen: 22 2606:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:52:ac:37:30:de:65:03:53:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c067ebcd-d586-4479-97f2-23ae813be2d8 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=403712da-a135-443e-8a70-92a1a6fdf5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:b0:38:ea:8a:1b:1e:d1:93:44:b9:ab:0e: aa:fd:50:24:5e:67:d2:b9:1a:35:a0:61:d0:f6:c8: 8f:ac:ac:51:00:a5:94:19:56:af:97:a5:89:64:d2: ab:d8:65:9d:e3:c8:c3:42:79:44:87:c4:fc:45:1e: e2:ad:15:db:08:82:87:57:01:cf:9c:28:7b:81:1c: 19:06:4a:9e:55:72:5f:2e:f4:5b:9d:18:75:a6:4e: cb:5c:67:45:97:1e:40:a8:59:5f:7b:6b:f9:9d:d4: 2e:2a:12:38:fc:11:a1:d0:fb:fc:1c:c1:90:48:c4: 46:76:b7:90:67:c2:33:25:53:2f:35:0a:39:dd:f0: fb:4b:74:4a:dd:f1:17:7e:5d:a9:e7:79:e3:e9:4e: ef:bd:9f:10:36:df:2b:c9:b1:20:34:d5:11:50:5f: f4:49:ab:48:43:bb:ed:93:27:dc:be:a5:3b:7e:c2: 62:aa:4b:de:d8:ae:c6:84:df:d4:82:73:36:c2:1a: a0:61:5b:ad:60:d2:a6:d7:d2:11:7b:68:16:06:c2: ec:0e:71:ed:ae:ee:aa:97:b4:65:76:a0:b7:f6:3f: e7:77:2c:7e:c6:eb:10:0c:59:99:5b:44:10:fb:4c: 3f:f6:3d:f5:fc:8e:0b:07:6a:63:56:2e:55:10:1c: 06:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4E:0E:2E:A1:77:4C:0E:9D:4A:AC:1C:B1:20:F2:A8:90:70:F9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.crl X509v3 Authority Key Identifier: keyid:06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer sbgp-ipAddrBlock: critical IPv4: 130.51.84.0/22 172.98.0.0/22 192.210.0.0/24 204.10.32.0/22 IPv6: 2606:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:38:60:af:63:2c:96:21:8d:38:ed:8e:01:3c:58:7a:36:6b: 17:30:f4:06:0e:5e:ec:c9:1d:21:9a:e0:37:5a:4c:d4:8e:ea: ce:fc:c8:ae:e0:8b:12:c8:a3:63:f7:4a:e5:7c:7f:50:0c:5d: 06:91:2f:63:4b:7e:da:0d:6e:4b:52:be:42:2e:fa:86:24:11: 76:f9:9e:eb:19:50:a4:03:8f:26:ab:5b:2e:69:0d:68:88:4c: ad:e7:c9:3d:9a:39:e8:3a:64:42:a8:2a:77:b4:21:0f:ea:54: 8d:88:a7:58:92:07:13:ca:12:cf:cc:72:59:55:78:28:32:e1: e7:96:59:2e:1e:f0:6a:86:4f:4d:f7:b3:69:61:46:eb:d0:0f: a7:23:59:d3:25:0d:51:b6:0a:ff:0d:f0:65:8d:9a:f3:c4:92: b8:ba:e0:66:ac:2f:13:51:24:ed:5f:ec:38:b7:83:6c:ad:50: cc:89:8a:ef:98:37:2d:b1:94:9f:42:b3:ef:29:c1:53:56:28: 2b:3a:54:fc:e3:62:31:b6:75:4c:df:7c:aa:46:ca:a8:bd:b7: 03:86:db:32:09:10:1e:ae:8f:60:c2:bf:3b:dc:5e:2c:20:b9: 7a:a6:70:3a:01:a7:37:7e:16:55:a8:38:b5:f5:96:5d:7f:2c: 10:3d:28:a9 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWElVKVKsNzDeZQNTnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA2N2ViY2QtZDU4Ni00NDc5LTk3ZjItMjNhZTgxM2Jl MmQ4MB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk NDAzNzEyZGEtYTEzNS00NDNlLThhNzAtOTJhMWE2ZmRmNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa6wOOqKGx7Rk0S5qw6q/VAkXmfSuRo1oGHQ 9siPrKxRAKWUGVavl6WJZNKr2GWd48jDQnlEh8T8RR7irRXbCIKHVwHPnCh7gRwZ BkqeVXJfLvRbnRh1pk7LXGdFlx5AqFlfe2v5ndQuKhI4/BGh0Pv8HMGQSMRGdreQ Z8IzJVMvNQo53fD7S3RK3fEXfl2p53nj6U7vvZ8QNt8rybEgNNURUF/0SatIQ7vt kyfcvqU7fsJiqkve2K7GhN/UgnM2whqgYVutYNKm19IRe2gWBsLsDnHtru6ql7Rl dqC39j/ndyx+xusQDFmZW0QQ+0w/9j31/I4LB2pjVi5VEBwGRQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFK5ODi6hd0wOnUqsHLEg8qiQcPl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDY3 ZWJjZC1kNTg2LTQ0NzktOTdmMi0yM2FlODEzYmUyZDgvZmYwZDc2MDgtOTg5Yy0z ZjVkLWJkMmQtZjA3ZDQyMmYxYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA2N2ViY2QtZDU4Ni00NDc5LTk3 ZjItMjNhZTgxM2JlMmQ4L2MwNjdlYmNkLWQ1ODYtNDQ3OS05N2YyLTIzYWU4MTNi ZTJkOC5jcmwwHwYDVR0jBBgwFoAUBnwdX+SIpk6llyLUoXQYbMbcrn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDY3ZWJjZC1kNTg2LTQ0NzktOTdmMi0yM2Fl ODEzYmUyZDguY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCgjNUAwQC rGIAAwQAwNIAAwQCzAogMA0EAgACMAcDBQAmBrtAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADQ4YK9jLJYh jTjtjgE8WHo2axcw9AYOXuzJHSGa4DdaTNSO6s78yK7gixLIo2P3SuV8f1AMXQaR L2NLftoNbktSvkIu+oYkEXb5nusZUKQDjyarWy5pDWiITK3nyT2aOeg6ZEKoKne0 IQ/qVI2Ip1iSBxPKEs/McllVeCgy4eeWWS4e8GqGT033s2lhRuvQD6cjWdMlDVG2 Cv8N8GWNmvPEkri64GasLxNRJO1f7Di3g2ytUMyJiu+YNy2xlJ9Cs+8pwVNWKCs6 VPzjYjG2dUzffKpGyqi9twOG2zIJEB6uj2DCvzvcXiwguXqmcDoBpzd+FlWoOLX1 ll1/LBA9KKk= -----END CERTIFICATE-----Generated at Tue Apr 29 08:36:24 2025 by rpki-client