$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa File: dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa (raw, json) Hash identifier: J82K0fSrSpTR1M5aQkpms+R7IOINqiNbyBNlrUdgFM4= Subject key identifier: 24:91:D0:E4:D3:27:E1:FB:B6:DB:BB:6A:30:5A:F8:BC:09:5A:90:BF Certificate issuer: /CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Certificate serial: 010D0C9F432858491ED6EA70C5BD0AD837F95380 Authority key identifier: 67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 7018 IP address blocks: 192.31.9.0/24 maxlen: 24 198.17.99.0/24 maxlen: 24 198.22.152.0/24 maxlen: 24 198.137.234.0/23 maxlen: 23 199.74.244.0/24 maxlen: 24 199.79.216.0/24 maxlen: 24 199.89.132.0/23 maxlen: 23 199.89.158.0/23 maxlen: 23 199.89.160.0/24 maxlen: 24 204.89.153.0/24 maxlen: 24 204.89.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ea:70:c5:bd:0a:d8:37:f9:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32bcf38b-c46d-4bf1-8705-88aeec19abf1 Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=5244e11b-2064-4b32-af24-e89d6266f9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:25:f0:25:02:00:5e:af:a7:80:57:56:41:96: 74:35:aa:81:35:92:6d:56:e6:e1:69:1a:0c:32:3b: 2b:28:2a:3c:88:c1:26:64:7a:a9:72:69:08:a3:ef: 6a:a4:b8:bc:2f:88:d7:6f:a4:22:4a:91:c5:1f:39: fe:43:4d:b8:49:ec:9e:62:36:0f:ab:8e:25:50:6c: f0:bd:ca:de:8c:92:3e:b7:ae:b4:4d:5c:0c:0c:1e: c1:74:c8:2a:ae:3b:d4:21:24:d0:0a:fa:b1:cb:ba: 4e:de:61:0b:a0:aa:a6:47:42:79:73:96:a5:db:dc: 85:c1:e7:0c:28:1d:b1:08:3c:82:00:b5:59:82:e2: 74:89:9a:fb:cb:c8:21:27:4c:10:00:7a:de:d4:8d: aa:b8:d4:1c:b0:cc:c0:86:00:81:6a:54:44:d6:69: 88:81:f3:4d:be:bf:b9:86:07:7a:0c:36:b4:ae:56: 17:4c:8c:8e:a1:72:c1:2f:f4:37:c8:1a:ca:27:63: e3:ec:68:ba:1e:b0:13:3d:72:52:29:89:0f:02:78: e6:1e:7a:90:c7:11:f4:61:53:ae:5e:73:96:0c:44: 9f:3c:d1:0a:82:9a:09:b0:46:8f:1d:e8:77:02:d9: e4:c8:7f:be:b3:ad:23:e4:15:06:97:1e:3b:5c:a9: fa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:91:D0:E4:D3:27:E1:FB:B6:DB:BB:6A:30:5A:F8:BC:09:5A:90:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/dc9e3b90-beb9-3a11-a4bd-838fc26955ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1/32bcf38b-c46d-4bf1-8705-88aeec19abf1.crl X509v3 Authority Key Identifier: keyid:67:89:04:5D:7A:3F:46:31:8E:1C:3C:F8:17:C3:56:F2:E3:86:F8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/32bcf38b-c46d-4bf1-8705-88aeec19abf1.cer sbgp-ipAddrBlock: critical IPv4: 192.31.9.0/24 198.17.99.0/24 198.22.152.0/24 198.137.234.0/23 199.74.244.0/24 199.79.216.0/24 199.89.132.0/23 199.89.158.0-199.89.160.255 204.89.153.0-204.89.154.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ed:96:64:6e:4a:ac:4c:06:bb:9a:b9:ce:c2:00:50:b0:c1: 21:1a:c2:3a:e1:c6:40:be:e6:79:57:d8:8b:09:40:fd:c0:69: ba:91:8e:2c:c8:09:62:4e:f7:2a:9a:d9:e9:48:ea:74:09:35: ad:41:db:a9:ea:74:be:e4:e9:66:00:20:8c:1d:86:7f:6b:db: a2:7c:dc:cb:97:ac:44:ac:d1:4d:55:8b:9c:32:81:33:2b:6f: e7:87:7a:ff:a1:9d:06:de:76:92:37:37:0f:3b:f6:31:d5:d1: 9f:a2:fa:67:df:24:71:e2:9e:99:7c:f6:98:39:df:c7:47:8b: 29:e6:d0:5e:a8:af:90:cc:fd:a2:c7:c1:5a:61:b6:66:7a:5b: 90:63:89:f3:ae:d3:5a:73:95:9f:4e:8a:60:13:27:cd:8e:5b: 56:91:d3:8a:22:6b:9b:f8:0a:b8:ba:95:55:dd:72:b2:fd:89: 18:e7:80:52:f8:96:5e:89:47:05:2b:30:e7:9a:52:16:f0:64: 97:b1:d8:9d:6c:d3:b4:ac:1f:81:50:3c:e5:60:59:86:82:bc: e0:67:82:8b:30:34:e5:5c:2b:f3:3d:24:fd:22:e8:45:16:92: 19:4e:39:51:51:2b:d9:c5:74:9a:94:f4:24:3b:ab:58:1b:6b: 3d:30:dd:2a -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEke1upwxb0K2Df5U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiY2YzOGItYzQ2ZC00YmYxLTg3MDUtODhhZWVjMTlh YmYxMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NTI0NGUxMWItMjA2NC00YjMyLWFmMjQtZTg5ZDYyNjZmOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiXwJQIAXq+ngFdWQZZ0NaqBNZJtVubhaRoM MjsrKCo8iMEmZHqpcmkIo+9qpLi8L4jXb6QiSpHFHzn+Q024SeyeYjYPq44lUGzw vcrejJI+t660TVwMDB7BdMgqrjvUISTQCvqxy7pO3mELoKqmR0J5c5al29yFwecM KB2xCDyCALVZguJ0iZr7y8ghJ0wQAHre1I2quNQcsMzAhgCBalRE1mmIgfNNvr+5 hgd6DDa0rlYXTIyOoXLBL/Q3yBrKJ2Pj7Gi6HrATPXJSKYkPAnjmHnqQxxH0YVOu XnOWDESfPNEKgpoJsEaPHeh3AtnkyH++s60j5BUGlx47XKn6OQIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFCSR0OTTJ+H7ttu7ajBa+LwJWpC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJj ZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFlZWMxOWFiZjEvZGM5ZTNiOTAtYmViOS0z YTExLWE0YmQtODM4ZmMyNjk1NWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzJiY2YzOGItYzQ2ZC00YmYxLTg3 MDUtODhhZWVjMTlhYmYxLzMyYmNmMzhiLWM0NmQtNGJmMS04NzA1LTg4YWVlYzE5 YWJmMS5jcmwwHwYDVR0jBBgwFoAUZ4kEXXo/RjGOHDz4F8NW8uOG+JswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zMmJjZjM4Yi1jNDZkLTRiZjEtODcwNS04OGFl ZWMxOWFiZjEuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQAwB8JAwQA xhFjAwQAxhaYAwQBxonqAwQAx0r0AwQAx0/YAwQBx1mEMAwDBAHHWZ4DBADHWaAw DAMEAMxZmQMEAMxZmjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBj7ZZkbkqsTAa7mrnOwgBQsMEhGsI64cZA vuZ5V9iLCUD9wGm6kY4syAliTvcqmtnpSOp0CTWtQdup6nS+5OlmACCMHYZ/a9ui fNzLl6xErNFNVYucMoEzK2/nh3r/oZ0G3naSNzcPO/Yx1dGfovpn3yRx4p6ZfPaY Od/HR4sp5tBeqK+QzP2ix8FaYbZmeluQY4nzrtNac5WfTopgEyfNjltWkdOKImub +Aq4upVV3XKy/YkY54BS+JZeiUcFKzDnmlIW8GSXsdidbNO0rB+BUDzlYFmGgrzg Z4KLMDTlXCvzPST9IuhFFpIZTjlRUSvZxXSalPQkO6tYG2s9MN0q -----END CERTIFICATE-----Generated at Sun Apr 27 11:35:15 2025 by rpki-client