$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa File: 3b3dd675-b170-3eee-bf6a-12af67835d86.roa (raw, json) Hash identifier: VvEosI8z5qaOmzP2nktk6O36uaPoqTdriBDIXOT5VdI= Subject key identifier: 6F:5A:12:D6:3D:0D:F9:42:14:1B:7C:18:70:E7:E4:F7:FF:5D:55:4B Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849A784C0822D6E91C70A76B300 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 134190 IP address blocks: 63.216.170.0/24 maxlen: 32 63.216.192.160/27 maxlen: 32 63.216.195.192/27 maxlen: 32 63.216.196.128/27 maxlen: 32 63.216.198.96/27 maxlen: 32 63.217.71.96/27 maxlen: 32 63.217.89.64/27 maxlen: 32 63.220.1.192/26 maxlen: 32 63.221.136.32/27 maxlen: 32 63.221.139.32/27 maxlen: 32 63.221.140.192/27 maxlen: 32 63.221.141.32/27 maxlen: 32 63.221.159.0/27 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c0:82:2d:6e:91:c7:0a:76:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=4e322338-4ec9-49b7-9a4d-8e84332213cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:85:e1:1a:f5:df:0c:cf:f8:48:a9:f5:d3:3c: f8:52:3b:43:2d:61:89:55:81:93:9d:f3:e3:cf:e5: 54:d4:59:5e:ad:87:c2:91:d0:bc:cf:6a:45:0b:fb: 26:5c:8d:2a:c2:d1:30:ee:47:ef:72:d3:3f:e5:4e: c1:41:33:98:86:6d:f5:6a:b5:ea:cc:2d:36:62:27: 13:f6:3b:13:aa:e1:1c:24:8d:45:c1:bb:81:9f:95: e8:70:fa:c1:a8:61:11:74:f2:95:d9:71:98:0f:44: 99:90:1d:65:3c:95:7e:82:bf:d4:e0:92:0b:a4:54: 76:d0:9f:fa:37:51:68:16:45:46:65:5a:7a:df:cc: 93:74:80:11:4c:b2:b2:28:46:5e:57:56:f9:9b:ef: 0a:00:02:f3:d1:96:e3:54:ad:7a:d7:45:5b:65:d8: c7:80:f8:97:82:9d:23:1c:09:16:47:eb:2a:da:35: b7:b3:cd:aa:ea:94:b0:51:7a:bd:9a:55:5b:45:1d: 2e:59:f1:f3:2f:50:8e:71:96:9d:78:bb:7f:72:78: 37:e6:a3:f0:38:51:e0:47:e2:4e:9e:29:66:d3:9e: 6f:bc:d3:ca:28:91:05:1f:c9:47:59:76:4f:0b:84: 93:55:9a:bf:69:e3:e1:6f:95:87:71:5a:5b:5e:7c: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5A:12:D6:3D:0D:F9:42:14:1B:7C:18:70:E7:E4:F7:FF:5D:55:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3b3dd675-b170-3eee-bf6a-12af67835d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.216.170.0/24 63.216.192.160/27 63.216.195.192/27 63.216.196.128/27 63.216.198.96/27 63.217.71.96/27 63.217.89.64/27 63.220.1.192/26 63.221.136.32/27 63.221.139.32/27 63.221.140.192/27 63.221.141.32/27 63.221.159.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:b6:65:50:22:a1:4f:d6:e2:b3:33:81:de:3e:93:39:4b:65: 9b:2f:81:d1:6f:a4:f4:28:5a:a8:e4:db:cb:d9:a0:41:1e:64: 15:a1:ed:90:9e:2f:7a:87:94:ef:7d:e4:fc:ee:0c:26:dc:4a: 7b:19:4e:83:78:90:75:c9:c3:89:50:12:80:c2:d1:01:01:9a: 8d:7b:13:9c:64:0f:e3:ef:50:9a:b4:56:80:8d:92:a2:27:4d: ca:42:f6:94:31:7e:02:5b:1a:4f:29:73:4d:7e:a0:3e:1d:3a: bb:0c:69:9e:23:9e:35:a7:59:10:34:56:eb:64:1e:25:89:9f: c5:02:b7:ee:b2:47:42:32:07:c8:ac:5b:b6:ec:f3:3a:4e:b9: dc:32:62:1b:6c:d9:12:61:88:1e:ab:f4:9c:0c:09:b8:b8:d0: c0:57:63:d9:43:5a:3e:fe:0a:d6:81:23:67:1d:45:91:04:c6: b3:23:f2:b2:e6:6d:fb:12:54:6d:d2:83:2f:9e:49:f0:49:fe: 11:57:65:74:6d:bb:81:6b:0d:2f:0f:72:b1:03:2c:ff:db:7d: 31:de:0f:a9:26:0f:eb:fc:f3:c2:85:4f:2a:51:eb:c9:e0:f5: df:2d:9b:7e:d3:b1:cc:f8:d0:e2:b6:d8:ef:24:bd:f4:ca:bd: a6:06:1c:4f -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUAQ0Mn0MoWEmnhMCCLW6Rxwp2swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk NGUzMjIzMzgtNGVjOS00OWI3LTlhNGQtOGU4NDMzMjIxM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4XhGvXfDM/4SKn10zz4UjtDLWGJVYGTnfPj z+VU1FlerYfCkdC8z2pFC/smXI0qwtEw7kfvctM/5U7BQTOYhm31arXqzC02YicT 9jsTquEcJI1FwbuBn5XocPrBqGERdPKV2XGYD0SZkB1lPJV+gr/U4JILpFR20J/6 N1FoFkVGZVp638yTdIARTLKyKEZeV1b5m+8KAALz0ZbjVK1610VbZdjHgPiXgp0j HAkWR+sq2jW3s82q6pSwUXq9mlVbRR0uWfHzL1COcZadeLt/cng35qPwOFHgR+JO nilm055vvNPKKJEFH8lHWXZPC4STVZq/aePhb5WHcVpbXnxwCQIDAQABo4IDqTCC A6UwHQYDVR0OBBYEFG9aEtY9DflCFBt8GHDn5Pf/XVVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvM2IzZGQ2NzUtYjE3MC0z ZWVlLWJmNmEtMTJhZjY3ODM1ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAP9iqAwUF P9jAoAMFBT/Yw8ADBQU/2MSAAwUFP9jGYAMFBT/ZR2ADBQU/2VlAAwUGP9wBwAMF BT/diCADBQU/3YsgAwUFP92MwAMFBT/djSADBQU/3Z8AMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALu2ZVAi oU/W4rMzgd4+kzlLZZsvgdFvpPQoWqjk28vZoEEeZBWh7ZCeL3qHlO995PzuDCbc SnsZToN4kHXJw4lQEoDC0QEBmo17E5xkD+PvUJq0VoCNkqInTcpC9pQxfgJbGk8p c01+oD4dOrsMaZ4jnjWnWRA0VutkHiWJn8UCt+6yR0IyB8isW7bs8zpOudwyYhts 2RJhiB6r9JwMCbi40MBXY9lDWj7+CtaBI2cdRZEExrMj8rLmbfsSVG3Sgy+eSfBJ /hFXZXRtu4FrDS8PcrEDLP/bfTHeD6kmD+v888KFTypR68ng9d8tm37Tscz40OK2 2O8kvfTKvaYGHE8= -----END CERTIFICATE-----Generated at Sat Apr 26 18:35:24 2025 by rpki-client