$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa File: f159d949-9c09-33cf-8df2-ab93c225a5ab.roa (raw, json) Hash identifier: KIP/UNSJNe9XOmvPm6fSK4SFywZYlFoXhOQY0fqVocM= Subject key identifier: 35:69:DF:83:86:94:09:A8:49:85:F0:F6:C3:2D:EE:DD:CE:DE:BB:D8 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584973DEE9CF26CBAE34CF6F2380 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 5650 IP address blocks: 104.251.80.0/24 maxlen: 24 104.251.85.0/24 maxlen: 24 104.251.89.0/24 maxlen: 24 104.251.91.0/24 maxlen: 24 158.115.224.0/24 maxlen: 24 158.115.225.0/24 maxlen: 24 158.115.226.0/24 maxlen: 24 158.115.227.0/24 maxlen: 24 158.115.248.0/24 maxlen: 24 158.115.249.0/24 maxlen: 24 158.115.250.0/24 maxlen: 24 158.115.251.0/24 maxlen: 24 172.98.185.0/24 maxlen: 24 206.127.218.0/24 maxlen: 24 207.230.96.0/23 maxlen: 23 207.230.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e9:cf:26:cb:ae:34:cf:6f:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=5bfd9854-ab02-4b57-bcda-eed2a5bbfeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:59:df:1d:62:d7:b0:fc:f6:7a:43:0c:db:f2: 0c:b3:84:b2:51:0c:c1:5a:78:17:f5:b3:99:92:9f: e6:11:f4:44:9c:19:71:9b:8d:f0:12:96:10:f0:27: da:bb:fc:02:a9:55:b8:6e:98:2f:da:91:5c:3e:a2: fa:8c:e6:e0:25:c7:ff:a4:4d:51:e7:23:85:75:9f: a6:71:6f:58:41:43:8b:3b:7f:5e:bd:eb:8a:9e:15: 83:0b:b9:18:28:6d:2f:d8:2a:72:00:30:ed:f6:8a: 4d:27:4b:d9:41:df:5d:6d:62:ba:8b:e6:ce:62:76: bd:9c:e0:96:0b:a4:7b:ec:a2:01:0a:f8:01:dc:c8: b7:4e:e8:5a:64:ba:bc:26:49:4c:1c:ac:23:61:7f: f9:40:6b:ca:ca:72:e1:f2:e3:b6:76:a0:04:2d:51: 3b:48:00:ac:1d:b0:65:0c:2d:5f:7e:d4:3a:80:39: 69:fa:7b:83:21:03:b8:28:cb:2c:61:a6:d8:79:d6: b5:72:9f:bd:6e:75:a9:bd:65:6e:4d:81:de:31:a8: 4a:5c:84:bf:84:f8:75:9c:82:ac:0b:53:f2:ee:45: 40:08:ec:d4:f0:0f:7a:2d:2d:77:99:10:14:e3:90: a6:99:d7:54:b3:12:56:e5:f9:1a:af:e9:bc:02:a9: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:69:DF:83:86:94:09:A8:49:85:F0:F6:C3:2D:EE:DD:CE:DE:BB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 104.251.80.0/24 104.251.85.0/24 104.251.89.0/24 104.251.91.0/24 158.115.224.0/22 158.115.248.0/22 172.98.185.0/24 206.127.218.0/24 207.230.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8d:41:05:8b:83:8a:4e:4c:a6:9f:ee:bd:93:6d:4e:57:f3: 4b:bb:7f:04:bf:5a:7a:1e:f2:97:bd:b5:f8:c1:5c:c2:6c:17: 57:56:9d:0a:b1:50:42:ec:c7:72:aa:f5:64:8e:bf:43:ea:92: a5:23:62:ee:32:eb:03:df:df:c9:33:a8:68:3a:81:ac:06:c9: d3:4c:af:d7:91:58:a5:e3:bb:5d:31:10:0f:e6:fd:c0:0b:90: ba:bf:1c:94:1e:80:13:67:d1:4d:c3:63:be:ce:ae:ed:39:b7: 92:7d:ce:4c:e9:22:c4:88:8b:4f:8b:9e:77:5a:12:61:23:63: 40:ac:d9:08:13:ff:74:6d:9c:cf:48:d7:1a:19:16:8e:20:11: 7f:e7:f8:0c:8d:50:fe:1f:0b:d9:64:5b:b2:2a:98:17:b7:d1: 7d:c4:ea:34:51:5b:24:55:d7:09:9c:18:93:57:cd:49:38:a8: 05:a8:99:d9:c9:49:7e:27:c5:b7:18:6b:e5:10:d3:2d:88:7e: 78:01:82:52:b0:ab:95:58:3c:72:8a:26:6a:a4:a7:b6:e6:f7: 2c:69:ba:5e:07:42:21:a4:01:51:3b:6c:0d:d5:51:46:f1:d9: 10:61:01:2b:1f:28:ba:69:b7:b8:79:87:7e:33:cc:93:79:7d: ae:20:73:1a -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgIUAQ0Mn0MoWElz3unPJsuuNM9vI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NWJmZDk4NTQtYWIwMi00YjU3LWJjZGEtZWVkMmE1YmJmZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVnfHWLXsPz2ekMM2/IMs4SyUQzBWngX9bOZ kp/mEfREnBlxm43wEpYQ8Cfau/wCqVW4bpgv2pFcPqL6jObgJcf/pE1R5yOFdZ+m cW9YQUOLO39eveuKnhWDC7kYKG0v2CpyADDt9opNJ0vZQd9dbWK6i+bOYna9nOCW C6R77KIBCvgB3Mi3TuhaZLq8JklMHKwjYX/5QGvKynLh8uO2dqAELVE7SACsHbBl DC1fftQ6gDlp+nuDIQO4KMssYabYeda1cp+9bnWpvWVuTYHeMahKXIS/hPh1nIKs C1Py7kVACOzU8A96LS13mRAU45CmmddUsxJW5fkar+m8AqlaRQIDAQABo4IDhTCC A4EwHQYDVR0OBBYEFDVp34OGlAmoSYXw9sMt7t3O3rvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjE1OWQ5NDktOWMwOS0z M2NmLThkZjItYWI5M2MyMjVhNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAaPtQAwQA aPtVAwQAaPtZAwQAaPtbAwQCnnPgAwQCnnP4AwQArGK5AwQAzn/aAwQCz+ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiNQQWLg4pOTKaf7r2TbU5X80u7fwS/Wnoe8pe9tfjBXMJsF1dWnQqx UELsx3Kq9WSOv0PqkqUjYu4y6wPf38kzqGg6gawGydNMr9eRWKXju10xEA/m/cAL kLq/HJQegBNn0U3DY77Oru05t5J9zkzpIsSIi0+LnndaEmEjY0Cs2QgT/3RtnM9I 1xoZFo4gEX/n+AyNUP4fC9lkW7IqmBe30X3E6jRRWyRV1wmcGJNXzUk4qAWomdnJ SX4nxbcYa+UQ0y2IfngBglKwq5VYPHKKJmqkp7bm9yxpul4HQiGkAVE7bA3VUUbx 2RBhASsfKLppt7h5h34zzJN5fa4gcxo= -----END CERTIFICATE-----Generated at Sun Apr 27 12:13:22 2025 by rpki-client