$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa File: cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa (raw, json) Hash identifier: wCfJvQfATaf/uc11Ngxvhse7oj/8FY1h225Hl3xbN9Q= Subject key identifier: 14:FF:F0:73:E6:94:1A:E2:BB:FB:3E:F3:F2:BF:A7:B2:EC:9E:0A:2E Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584950F95C187238A49E26578680 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 395092 IP address blocks: 146.71.80.0/22 maxlen: 24 199.87.210.0/23 maxlen: 24 208.123.118.0/23 maxlen: 24 2607:a680:1::/48 maxlen: 48 2607:a680:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:5c:18:72:38:a4:9e:26:57:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=7dae13ff-a2b7-4c49-a393-be10266509d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:2d:6a:cd:4e:d8:ac:74:64:c3:92:ef:0b: 1e:18:70:a2:80:18:3a:e9:f6:02:d7:9e:8d:49:3f: 27:5a:c2:67:72:5a:82:54:fc:ae:72:c2:49:15:ce: e8:72:51:a0:32:a6:53:7c:16:ef:fd:e0:ee:bd:b8: 7e:e1:8a:40:f1:d7:9b:8c:e2:78:5e:cc:ef:67:f0: 96:dc:42:5a:b0:79:35:37:04:96:70:af:97:9d:fe: 80:13:a0:d0:cf:dc:aa:af:4c:4a:f9:c8:ee:66:7e: 2d:e8:5c:62:04:17:25:a5:20:90:42:02:a0:12:96: 91:3b:0b:26:38:ce:d0:b6:0c:b6:d2:93:13:80:0e: 6c:eb:f4:b0:5f:2c:be:6e:b6:cd:a8:46:12:d0:42: 4e:97:6d:37:8b:75:3d:3c:bf:25:8b:43:33:7c:ed: 59:ec:ca:a0:aa:d9:3a:0d:7b:2a:d8:bb:fd:d5:95: 4c:48:52:df:3f:a7:85:1d:cf:dc:93:ab:41:45:b7: 94:b6:49:aa:47:e1:f4:2a:16:1b:dd:dc:d0:c4:99: 04:ca:4f:46:e5:fa:93:e6:99:0c:5f:5b:b4:98:a6: 4e:98:59:e9:1f:5c:16:d5:b1:f6:6d:35:58:99:8e: 66:47:50:b0:0f:34:21:76:bc:07:9f:63:8e:43:5b: 43:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FF:F0:73:E6:94:1A:E2:BB:FB:3E:F3:F2:BF:A7:B2:EC:9E:0A:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/cc735ba9-adb4-37f3-88e2-2c562bc2c9db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 146.71.80.0/22 199.87.210.0/23 208.123.118.0/23 IPv6: 2607:a680:1::/48 2607:a680:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:14:50:b6:f1:0c:fd:71:f7:ca:19:4a:d6:8a:a3:9a:80:3d: 65:16:c1:fe:b9:85:64:eb:94:87:23:7b:b5:69:e6:e7:a1:35: 39:be:1d:e7:c1:bf:ec:c3:aa:9d:02:ec:07:f4:9f:a4:39:9e: 87:de:74:fd:85:13:5f:0d:50:bb:85:ce:71:9c:b8:bb:60:f8: 3f:59:df:22:64:ce:0f:f8:a2:4f:19:27:d0:2f:4b:46:bd:a6: db:72:b5:5c:75:94:a3:5b:07:8b:48:ea:7c:d4:0b:d2:97:0a: 1b:93:53:4a:bc:cc:c8:ef:89:b9:d5:d3:d0:cd:e4:f0:a6:7a: 53:02:e0:9c:5a:02:9a:2b:86:81:53:54:d6:4c:fc:68:2f:b6: 8f:2e:4d:ef:4e:1e:96:53:21:d9:7e:ee:c1:88:27:99:0d:37: 41:fa:eb:bd:78:f4:0e:1e:04:ed:cf:04:6b:20:b8:0f:90:7a: 79:ed:63:fe:a5:b9:be:a3:b4:39:b2:31:b7:ca:a4:d8:af:ca: cb:df:9d:ac:db:a7:29:fd:6b:08:02:dd:5b:f3:38:56:0a:5d: 5a:ac:ef:82:5b:5e:80:01:6a:f3:bc:75:a5:a8:90:f3:de:31: 7d:70:ac:32:c4:1c:e8:88:ab:37:bd:7e:f1:33:45:91:b5:dd: a4:35:26:47 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWElQ+VwYcjikniZXhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk N2RhZTEzZmYtYTJiNy00YzQ5LWEzOTMtYmUxMDI2NjUwOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmotas1O2Kx0ZMOS7wseGHCigBg66fYC156N ST8nWsJnclqCVPyucsJJFc7oclGgMqZTfBbv/eDuvbh+4YpA8debjOJ4XszvZ/CW 3EJasHk1NwSWcK+Xnf6AE6DQz9yqr0xK+cjuZn4t6FxiBBclpSCQQgKgEpaROwsm OM7Qtgy20pMTgA5s6/SwXyy+brbNqEYS0EJOl203i3U9PL8li0MzfO1Z7Mqgqtk6 DXsq2Lv91ZVMSFLfP6eFHc/ck6tBRbeUtkmqR+H0KhYb3dzQxJkEyk9G5fqT5pkM X1u0mKZOmFnpH1wW1bH2bTVYmY5mR1CwDzQhdrwHn2OOQ1tDMwIDAQABo4IDezCC A3cwHQYDVR0OBBYEFBT/8HPmlBriu/s+8/K/p7LsngouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvY2M3MzViYTktYWRiNC0z N2YzLTg4ZTItMmM1NjJiYzJjOWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCkkdQAwQB x1fSAwQB0Ht2MBgEAgACMBIDBwAmB6aAAAEDBwAmB6aAAAgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYRRQ tvEM/XH3yhlK1oqjmoA9ZRbB/rmFZOuUhyN7tWnm56E1Ob4d58G/7MOqnQLsB/Sf pDmeh950/YUTXw1Qu4XOcZy4u2D4P1nfImTOD/iiTxkn0C9LRr2m23K1XHWUo1sH i0jqfNQL0pcKG5NTSrzMyO+JudXT0M3k8KZ6UwLgnFoCmiuGgVNU1kz8aC+2jy5N 704ellMh2X7uwYgnmQ03QfrrvXj0Dh4E7c8EayC4D5B6ee1j/qW5vqO0ObIxt8qk 2K/Ky9+drNunKf1rCALdW/M4VgpdWqzvgltegAFq87x1paiQ894xfXCsMsQc6Iir N71+8TNFkbXdpDUmRw== -----END CERTIFICATE-----Generated at Sun Apr 27 07:06:14 2025 by rpki-client