$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa File: f7b3b4db-44c1-3096-8bf9-01bfba232028.roa (raw, json) Hash identifier: wBOlke7Rkw9M9t84WL8WQXl8UTW3pTDhg60IMVpC/k4= Subject key identifier: 0E:1A:E4:8B:CD:30:EC:3D:C5:EF:B4:E6:72:91:9F:3D:3F:40:8E:87 Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388 Certificate serial: 010D0C9F432858494CC94FCCED6C1E9627DDDB10 Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 63023 IP address blocks: 67.220.66.0/23 maxlen: 24 67.220.69.0/24 maxlen: 24 67.220.70.0/23 maxlen: 24 67.220.72.0/22 maxlen: 24 67.220.76.0/22 maxlen: 24 67.220.80.0/24 maxlen: 24 67.220.82.0/24 maxlen: 24 67.220.85.0/24 maxlen: 24 67.220.86.0/23 maxlen: 24 67.220.88.0/23 maxlen: 24 67.220.94.0/23 maxlen: 24 68.168.31.0/24 maxlen: 24 69.42.209.0/24 maxlen: 24 186.190.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4f:cc:ed:6c:1e:96:27:dd:db:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=b241effe-241e-4c53-837b-a14a8f77c146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:e7:14:6d:36:0e:8b:22:79:31:e7:07:48: 31:3a:44:30:14:dd:3b:77:3b:2a:b7:38:84:4d:4c: 41:79:15:ef:64:58:a3:e3:cb:77:09:35:1a:ca:a7: 3b:84:16:52:e1:d4:69:12:d2:a7:19:42:f3:cc:da: 4b:f9:0d:c9:72:4d:5a:4f:39:29:00:0b:40:de:b1: d4:a1:1e:cd:19:fb:a2:95:4a:a9:f8:78:cb:e7:48: 3d:6f:ec:92:aa:09:6d:9c:a4:e3:39:23:dd:32:52: 83:1a:1e:da:b1:b9:30:4f:1a:6f:0a:ef:6d:2f:f1: f0:ab:b5:33:9b:74:e1:fb:22:df:b3:3b:e6:f3:d5: 5f:33:ce:d3:33:85:15:f8:47:8f:ce:54:a1:11:b6: 17:51:7b:91:db:89:5c:fe:65:e8:04:eb:ac:f4:62: 0c:96:2a:1b:17:8d:20:e6:85:fd:9d:60:99:03:27: 9e:96:7b:7f:5a:e5:80:c2:76:f2:ac:52:ca:97:d8: 5b:19:2b:39:ce:bc:90:3d:39:36:58:a0:68:8e:11: f6:e1:23:fb:be:80:f3:c3:db:0a:77:7d:fb:2f:42: 86:01:ea:34:73:b9:99:db:c4:7c:ac:98:4e:07:44: 68:f6:65:bd:5a:22:dd:70:c7:0e:90:5c:06:1c:3f: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1A:E4:8B:CD:30:EC:3D:C5:EF:B4:E6:72:91:9F:3D:3F:40:8E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f7b3b4db-44c1-3096-8bf9-01bfba232028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl X509v3 Authority Key Identifier: keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer sbgp-ipAddrBlock: critical IPv4: 67.220.66.0/23 67.220.69.0-67.220.80.255 67.220.82.0/24 67.220.85.0-67.220.89.255 67.220.94.0/23 68.168.31.0/24 69.42.209.0/24 186.190.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:cd:04:13:3d:49:00:de:f1:70:81:a0:b5:b8:d0:6e:da:07: 62:d2:25:1f:23:80:fa:97:0d:65:f4:52:d9:da:69:ed:55:57: cb:5e:c9:f6:81:ae:64:f8:fa:5f:99:d4:20:0e:ed:16:ac:1e: ea:a4:75:a4:13:25:9d:2e:ab:dc:12:34:cd:4e:40:54:38:5b: 9a:34:6b:ad:89:5d:27:55:ac:96:66:bf:5d:d2:91:29:b0:6c: ce:02:44:24:b6:74:5b:b4:ce:eb:a8:c0:8a:a6:73:c8:dc:18: 36:71:b3:9d:b6:eb:3f:8f:ae:00:c7:94:f1:8c:b1:cf:d1:b4: b2:ee:41:3a:94:dd:d8:e1:b3:e2:8c:65:46:ee:4a:76:6d:5e: 05:ca:b4:69:a1:0d:f5:77:5d:22:c4:48:35:a0:55:e8:c0:40: ba:8d:ab:d7:d4:ba:00:83:14:55:cb:29:c7:67:b0:cd:94:12: 51:b7:ca:a6:1f:82:8c:bd:27:83:bf:5b:a3:e1:1a:5d:70:9c: f9:50:f4:29:06:36:7e:39:28:6a:66:33:19:3c:97:61:93:91: e5:c4:d0:45:07:02:4c:24:2b:12:da:49:0a:c1:8c:ae:6c:7a: 30:b4:c6:db:45:7d:25:d6:cc:0c:a6:fe:b7:bd:eb:6d:30:09: 4b:60:28:3d -----BEGIN CERTIFICATE----- MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWElMyU/M7Wwelifd2xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0 Mzg4MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjI0MWVmZmUtMjQxZS00YzUzLTgzN2ItYTE0YThmNzdjMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheHnFG02DosieTHnB0gxOkQwFN07dzsqtziE TUxBeRXvZFij48t3CTUayqc7hBZS4dRpEtKnGULzzNpL+Q3Jck1aTzkpAAtA3rHU oR7NGfuilUqp+HjL50g9b+ySqgltnKTjOSPdMlKDGh7asbkwTxpvCu9tL/Hwq7Uz m3Th+yLfszvm89VfM87TM4UV+EePzlShEbYXUXuR24lc/mXoBOus9GIMliobF40g 5oX9nWCZAyeelnt/WuWAwnbyrFLKl9hbGSs5zryQPTk2WKBojhH24SP7voDzw9sK d337L0KGAeo0c7mZ28R8rJhOB0Ro9mW9WiLdcMcOkFwGHD+PqQIDAQABo4IDjzCC A4swHQYDVR0OBBYEFA4a5IvNMOw9xe+05nKRnz0/QI6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvZjdiM2I0ZGItNDRjMS0z MDk2LThiZjktMDFiZmJhMjMyMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4 NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi N2Q4ODQzODguY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQBQ9xCMAwD BABD3EUDBABD3FADBABD3FIwDAMEAEPcVQMEAUPcWAMEAUPcXgMEAESoHwMEAEUq 0QMEALq+1zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAkzQQTPUkA3vFwgaC1uNBu2gdi0iUfI4D6lw1l9FLZ 2mntVVfLXsn2ga5k+PpfmdQgDu0WrB7qpHWkEyWdLqvcEjTNTkBUOFuaNGutiV0n VayWZr9d0pEpsGzOAkQktnRbtM7rqMCKpnPI3Bg2cbOdtus/j64Ax5TxjLHP0bSy 7kE6lN3Y4bPijGVG7kp2bV4FyrRpoQ31d10ixEg1oFXowEC6javX1LoAgxRVyynH Z7DNlBJRt8qmH4KMvSeDv1uj4RpdcJz5UPQpBjZ+OShqZjMZPJdhk5HlxNBFBwJM JCsS2kkKwYyubHowtMbbRX0l1swMpv63vettMAlLYCg9 -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:56 2025 by rpki-client