$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa File: a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa (raw, json) Hash identifier: sy/AO7oOEdnQt/VkONpYSL+mg/ZhIrOn9t0BwW6GCSk= Subject key identifier: EC:1D:43:7A:45:82:73:33:68:18:C3:EC:18:25:79:C5:D8:DD:E5:0E Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F43285848EC96AED558B4D52472F9D8C0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 17378 IP address blocks: 208.69.108.0/22 maxlen: 24 208.88.240.0/22 maxlen: 24 209.59.0.0/19 maxlen: 24 209.92.7.0/24 maxlen: 24 209.92.39.0/24 maxlen: 24 209.92.44.0/24 maxlen: 24 209.92.53.0/24 maxlen: 24 209.92.56.0/24 maxlen: 24 209.92.62.0/24 maxlen: 24 209.92.68.0/24 maxlen: 24 209.92.70.0/23 maxlen: 24 209.92.74.0/23 maxlen: 24 209.92.79.0/24 maxlen: 24 209.92.88.0/24 maxlen: 24 209.92.90.0/23 maxlen: 24 209.92.137.0/24 maxlen: 24 209.92.224.0/21 maxlen: 24 209.177.16.0/22 maxlen: 24 216.27.0.0/18 maxlen: 24 216.27.64.0/19 maxlen: 24 216.46.48.0/20 maxlen: 24 216.48.112.0/20 maxlen: 24 216.58.224.0/19 maxlen: 24 216.150.128.0/19 maxlen: 24 216.182.80.0/20 maxlen: 24 216.211.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:ae:d5:58:b4:d5:24:72:f9:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=3a09f419-287a-4396-b266-f89591895380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:04:31:a3:25:cf:51:6f:ad:51:1f:a6:73: 9b:37:bc:45:e8:47:09:1d:3e:5e:ef:58:ac:98:d7: d3:60:72:a3:19:fd:ce:a3:83:f7:ba:9c:7f:a3:5b: 81:f3:4a:48:4a:5b:8a:02:62:6f:6b:83:57:95:a2: 2a:c4:43:3f:e3:3f:a2:79:8b:1a:03:d4:a3:63:fb: 76:8c:d6:72:5d:51:71:7a:56:18:b0:74:04:49:a9: ee:78:aa:6b:7a:41:96:28:3b:13:70:67:ac:da:c9: 22:ce:ea:14:86:f9:90:f3:b1:c9:8a:5b:f6:53:a2: 13:02:aa:4f:f5:09:c4:07:ef:b7:50:29:47:9c:09: f0:fe:a0:3a:2e:92:85:de:7f:0b:c2:33:97:44:1d: 4c:35:70:47:18:d7:81:95:66:b4:af:46:82:cb:f1: 3b:27:fa:cd:38:03:bd:ea:91:00:73:d3:e5:57:69: cf:b7:50:20:33:5f:d3:2a:6f:b9:d3:25:e5:7c:6d: 82:6b:b6:1c:f3:26:df:9e:60:f3:de:49:87:79:53: 5f:42:9d:9b:42:94:b7:7f:9c:7a:90:18:1e:4f:42: 42:7a:d6:a4:57:62:80:62:e5:83:08:e9:03:99:0d: 32:ff:33:56:c5:a1:11:e6:82:4c:b6:d6:57:f9:6a: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1D:43:7A:45:82:73:33:68:18:C3:EC:18:25:79:C5:D8:DD:E5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 208.69.108.0/22 208.88.240.0/22 209.59.0.0/19 209.92.7.0/24 209.92.39.0/24 209.92.44.0/24 209.92.53.0/24 209.92.56.0/24 209.92.62.0/24 209.92.68.0/24 209.92.70.0/23 209.92.74.0/23 209.92.79.0/24 209.92.88.0/24 209.92.90.0/23 209.92.137.0/24 209.92.224.0/21 209.177.16.0/22 216.27.0.0-216.27.95.255 216.46.48.0/20 216.48.112.0/20 216.58.224.0/19 216.150.128.0/19 216.182.80.0/20 216.211.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a6:4d:d6:ad:72:e2:30:b8:93:68:44:3e:20:d9:9c:2e:af: fe:87:8f:dc:93:36:bd:38:a0:73:66:e2:9c:f0:3e:4b:e0:53: 91:cd:ce:87:d1:a8:ad:45:bd:4c:f3:c0:df:94:75:f9:16:5f: d7:a4:9a:0c:4e:c4:dd:49:c5:03:f1:58:28:41:92:2e:15:96: 92:3e:e7:f9:2a:56:0a:78:59:44:a4:bd:64:30:81:b6:82:c5: 3c:a3:10:af:61:52:34:93:f1:18:e4:e4:8d:bc:fe:a1:65:20: aa:f3:a9:3b:b9:9c:64:9d:bc:44:8e:43:46:f8:15:80:ea:c5: 55:8f:8c:9f:8c:d0:90:9b:ed:9c:1b:81:69:ba:fc:9f:6c:50: ba:14:b6:20:00:eb:01:a0:2a:7e:08:d0:cf:3c:24:1d:81:e0: f4:f7:9c:3e:9c:a4:2e:aa:07:80:f7:7b:fc:06:9f:6a:e5:7e: 26:d5:cf:c3:82:d6:20:77:d3:45:f3:25:61:dd:cb:24:e8:0c: 7b:af:7a:82:69:95:65:ee:b2:5b:11:af:17:a4:b9:68:d1:d4: 14:56:db:2d:12:c9:f6:46:92:38:96:5d:0e:25:87:15:ba:7e: 38:b2:94:69:10:de:cb:c8:3e:5a:28:66:57:57:08:78:d1:60: 9e:d4:1c:f5 -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUAQ0Mn0MoWEjslq7VWLTVJHL52MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk M2EwOWY0MTktMjg3YS00Mzk2LWIyNjYtZjg5NTkxODk1MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdwEMaMlz1FvrVEfpnObN7xF6EcJHT5e71is mNfTYHKjGf3Oo4P3upx/o1uB80pISluKAmJva4NXlaIqxEM/4z+ieYsaA9SjY/t2 jNZyXVFxelYYsHQESanueKprekGWKDsTcGes2skizuoUhvmQ87HJilv2U6ITAqpP 9QnEB++3UClHnAnw/qA6LpKF3n8LwjOXRB1MNXBHGNeBlWa0r0aCy/E7J/rNOAO9 6pEAc9PlV2nPt1AgM1/TKm+50yXlfG2Ca7Yc8ybfnmDz3kmHeVNfQp2bQpS3f5x6 kBgeT0JCetakV2KAYuWDCOkDmQ0y/zNWxaER5oJMttZX+WqOqwIDAQABo4ID8TCC A+0wHQYDVR0OBBYEFOwdQ3pFgnMzaBjD7BglecXY3eUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTUyNjM1M2YtMmRkYy0z NDU3LWJjNDEtZGExY2QxY2MwZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBpAQCAAEwgZ0DBALQ RWwDBALQWPADBAXROwADBADRXAcDBADRXCcDBADRXCwDBADRXDUDBADRXDgDBADR XD4DBADRXEQDBAHRXEYDBAHRXEoDBADRXE8DBADRXFgDBAHRXFoDBADRXIkDBAPR XOADBALRsRAwCwMDANgbAwQF2BtAAwQE2C4wAwQE2DBwAwQF2DrgAwQF2JaAAwQE 2LZQAwQE2NOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGSmTdatcuIwuJNoRD4g2Zwur/6Hj9yTNr04oHNm 4pzwPkvgU5HNzofRqK1FvUzzwN+UdfkWX9ekmgxOxN1JxQPxWChBki4VlpI+5/kq Vgp4WUSkvWQwgbaCxTyjEK9hUjST8Rjk5I28/qFlIKrzqTu5nGSdvESOQ0b4FYDq xVWPjJ+M0JCb7ZwbgWm6/J9sULoUtiAA6wGgKn4I0M88JB2B4PT3nD6cpC6qB4D3 e/wGn2rlfibVz8OC1iB300XzJWHdyyToDHuveoJplWXuslsRrxekuWjR1BRW2y0S yfZGkjiWXQ4lhxW6fjiylGkQ3svIPlooZldXCHjRYJ7UHPU= -----END CERTIFICATE-----Generated at Sun Apr 27 21:30:49 2025 by rpki-client