$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa File: 08780fc2-df88-3de5-b147-ed57d81f5382.roa (raw, json) Hash identifier: WvEzfGkKCZCs2POPHBPB0QXhz16ZJNOOyW0nVYCbmvE= Subject key identifier: 18:41:4B:05:17:D4:43:E7:99:ED:DB:96:14:08:8C:38:85:24:14:EA Certificate issuer: /CN=1c5b9809-1c38-4760-b9bf-096829114292 Certificate serial: 010D0C9F43285848D6410B0E386B9D86EE68DB80 Authority key identifier: D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 32524 IP address blocks: 66.244.128.0/20 maxlen: 24 100.42.192.0/23 maxlen: 24 100.42.194.0/24 maxlen: 24 100.42.196.0/22 maxlen: 24 100.42.200.0/21 maxlen: 24 162.208.112.0/22 maxlen: 24 192.30.176.0/21 maxlen: 24 199.38.200.0/22 maxlen: 24 199.87.184.0/21 maxlen: 24 199.255.24.0/22 maxlen: 24 208.82.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0b:0e:38:6b:9d:86:ee:68:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5b9809-1c38-4760-b9bf-096829114292 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=6185c024-0a73-4f00-8c49-ff5d062a559f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:8b:8c:b2:bb:ac:c0:8b:e1:cc:7b:54:c5: 65:d4:c5:6a:2d:0f:06:6f:7a:93:d6:61:aa:64:a7: e9:0f:ea:64:b0:f5:94:f4:26:f4:57:b9:a2:b0:b9: 17:05:6c:22:06:49:08:ab:e8:43:b8:93:e6:5c:31: c8:3d:68:c5:98:ba:13:c9:17:f0:5a:24:a9:7d:42: 17:11:37:90:51:04:96:1a:0c:89:a9:cc:f1:b1:6b: c3:83:0d:0a:7f:a4:b8:47:e7:01:8b:e6:0f:c5:b7: 65:03:a1:0f:e8:73:73:17:e5:46:28:6a:81:13:cd: 83:20:b6:71:cd:8a:7a:58:7f:97:9b:00:ec:09:76: 9d:5a:71:31:d5:66:9a:20:36:bd:1d:c9:2a:81:0b: f5:ff:9d:21:0a:b2:c2:b5:4c:42:24:ff:a2:d5:37: 0f:35:3d:7b:15:76:11:74:dc:1d:fc:95:fc:2e:98: 0b:ff:d6:2f:3c:f4:6d:0e:92:5c:94:d3:40:f7:f8: a2:9e:8a:26:88:15:59:e5:bf:f8:ed:43:67:0c:c7: ac:81:58:fa:f4:92:ad:49:8c:bc:f8:bf:3f:bb:18: a8:d1:01:fb:ab:d3:83:ec:be:ff:2a:94:f2:68:a3: cc:7a:b4:54:36:4e:b7:77:66:84:92:f2:45:f5:d6: 83:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:41:4B:05:17:D4:43:E7:99:ED:DB:96:14:08:8C:38:85:24:14:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/08780fc2-df88-3de5-b147-ed57d81f5382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292/1c5b9809-1c38-4760-b9bf-096829114292.crl X509v3 Authority Key Identifier: keyid:D6:43:1E:5E:EA:50:DB:7F:7F:D5:3B:12:3F:7C:9A:05:E5:DC:49:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c5b9809-1c38-4760-b9bf-096829114292.cer sbgp-ipAddrBlock: critical IPv4: 66.244.128.0/20 100.42.192.0-100.42.194.255 100.42.196.0-100.42.207.255 162.208.112.0/22 192.30.176.0/21 199.38.200.0/22 199.87.184.0/21 199.255.24.0/22 208.82.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f8:d8:27:1b:65:a9:ef:6c:49:1e:68:65:7e:90:04:d3:bc: 70:3d:21:9b:4d:aa:55:16:8f:81:4e:f7:ed:9b:de:2a:a2:3d: d2:ee:b7:c8:7a:38:7d:46:7f:4a:78:9c:f9:eb:3b:c8:b1:14: c8:c2:97:e7:de:17:b7:4a:95:3c:fb:32:c9:6a:c1:21:87:61: 7c:d6:3e:01:fd:f3:ce:3e:86:16:e1:e5:13:cc:a7:94:90:f1: 5e:b8:df:f7:36:a0:90:32:f9:21:e5:ee:75:25:82:19:b8:b8: 50:7a:8d:83:55:76:e3:dd:bd:a7:5b:d0:1b:be:37:5d:78:c9: 77:c9:ef:37:12:05:d3:33:00:1c:d0:4b:b7:2d:b5:22:24:77: 12:ab:08:44:7a:fb:f0:1a:45:31:8e:04:b7:ee:80:ca:e4:de: 00:17:0d:a0:65:85:0c:19:94:fa:4f:61:77:2b:cc:60:7d:c8: 85:4b:93:48:af:c5:dc:8c:b6:a0:56:7e:59:10:ee:d2:ed:59: 20:61:85:f8:56:60:49:bb:ea:48:e4:b5:43:6f:cd:ce:72:4b: ed:8e:ef:09:6d:98:d1:0c:70:78:ab:59:b1:7c:59:7a:df:fb: 62:19:53:5e:7f:ac:9f:9b:fd:47:7e:67:cb:c2:ef:31:10:8e: 11:82:42:19 -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEjWQQsOOGudhu5o24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1Yjk4MDktMWMzOC00NzYwLWI5YmYtMDk2ODI5MTE0 MjkyMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjE4NWMwMjQtMGE3My00ZjAwLThjNDktZmY1ZDA2MmE1NTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc2LjLK7rMCL4cx7VMVl1MVqLQ8Gb3qT1mGq ZKfpD+pksPWU9Cb0V7misLkXBWwiBkkIq+hDuJPmXDHIPWjFmLoTyRfwWiSpfUIX ETeQUQSWGgyJqczxsWvDgw0Kf6S4R+cBi+YPxbdlA6EP6HNzF+VGKGqBE82DILZx zYp6WH+XmwDsCXadWnEx1WaaIDa9HckqgQv1/50hCrLCtUxCJP+i1TcPNT17FXYR dNwd/JX8LpgL/9YvPPRtDpJclNNA9/iinoomiBVZ5b/47UNnDMesgVj69JKtSYy8 +L8/uxio0QH7q9OD7L7/KpTyaKPMerRUNk63d2aEkvJF9daDOwIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFBhBSwUX1EPnme3blhQIjDiFJBTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzVi OTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4MjkxMTQyOTIvMDg3ODBmYzItZGY4OC0z ZGU1LWIxNDctZWQ1N2Q4MWY1MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWM1Yjk4MDktMWMzOC00NzYwLWI5 YmYtMDk2ODI5MTE0MjkyLzFjNWI5ODA5LTFjMzgtNDc2MC1iOWJmLTA5NjgyOTEx NDI5Mi5jcmwwHwYDVR0jBBgwFoAU1kMeXupQ239/1TsSP3yaBeXcSekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzViOTgwOS0xYzM4LTQ3NjAtYjliZi0wOTY4 MjkxMTQyOTIuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQEQvSAMAwD BAZkKsADBABkKsIwDAMEAmQqxAMEBGQqwAMEAqLQcAMEA8AesAMEAscmyAMEA8dX uAMEAsf/GAMEA9BSiDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCY+NgnG2Wp72xJHmhlfpAE07xwPSGbTapV Fo+BTvftm94qoj3S7rfIejh9Rn9KeJz56zvIsRTIwpfn3he3SpU8+zLJasEhh2F8 1j4B/fPOPoYW4eUTzKeUkPFeuN/3NqCQMvkh5e51JYIZuLhQeo2DVXbj3b2nW9Ab vjddeMl3ye83EgXTMwAc0Eu3LbUiJHcSqwhEevvwGkUxjgS37oDK5N4AFw2gZYUM GZT6T2F3K8xgfciFS5NIr8XcjLagVn5ZEO7S7VkgYYX4VmBJu+pI5LVDb83Ockvt ju8JbZjRDHB4q1mxfFl63/tiGVNef6yfm/1HfmfLwu8xEI4RgkIZ -----END CERTIFICATE-----Generated at Tue Apr 29 03:35:19 2025 by rpki-client