$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa File: ddff14cf-541a-3e8a-a9fe-11e036c29959.roa (raw, json) Hash identifier: EHTwWbfni1f4YU8U0BlWN+PGH4M/eza4+H/fv0xesw4= Subject key identifier: C6:50:F2:6A:D1:9A:11:C6:13:6B:39:EF:7B:9D:F0:70:76:C3:E1:A5 Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Certificate serial: 010D0C9F43285849A1EF6EE8144ABE686A173C00 Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 400304 IP address blocks: 45.59.116.0/24 maxlen: 24 66.23.193.0/24 maxlen: 24 104.36.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6e:e8:14:4a:be:68:6a:17:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=22d64b92-6d69-405b-86f6-752fcbb94a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bc:f1:f8:b9:30:6e:29:94:69:88:df:2f:e8: e2:1f:ca:be:f1:9f:40:2f:de:90:d8:3d:b4:36:a7: 66:ed:23:97:cb:e3:8e:03:7f:a8:62:aa:02:67:14: 4e:85:61:e4:3f:da:28:50:e8:20:67:50:91:94:6e: 4d:77:8b:72:6d:29:55:2a:a0:f7:3d:6b:49:5e:7c: e1:64:43:96:57:44:0d:1d:1e:c7:f6:3e:76:24:6a: ac:1b:f0:41:aa:03:1e:1c:ad:ba:8e:ad:bb:cd:67: 3c:48:cc:f1:cc:3d:58:f7:e0:d1:2b:e4:72:c1:ac: a5:ad:9a:79:fb:89:83:68:88:5e:66:32:b9:0d:c9: c4:f3:9e:2c:56:9a:0f:74:3c:3a:ad:9f:15:f5:8f: 5a:04:c1:d5:8b:19:ce:9b:4f:cc:08:18:be:6d:64: ac:92:49:62:0e:9a:b2:d8:0b:98:89:bb:67:a1:41: 5e:a2:eb:c9:df:6f:01:fd:8e:42:30:9e:2f:f8:b8: 91:0a:d6:bf:8b:4f:07:ac:76:da:2e:71:4c:f6:c9: 96:27:ce:37:ad:a7:ae:e8:14:71:10:58:51:4a:41: 4c:43:c8:2d:b4:07:0f:09:b4:a7:d8:bd:35:d2:be: a1:22:b8:38:ed:f3:8e:5a:00:cf:d8:b8:fb:5e:f7: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:50:F2:6A:D1:9A:11:C6:13:6B:39:EF:7B:9D:F0:70:76:C3:E1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddff14cf-541a-3e8a-a9fe-11e036c29959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl X509v3 Authority Key Identifier: keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer sbgp-ipAddrBlock: critical IPv4: 45.59.116.0/24 66.23.193.0/24 104.36.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b1:2c:4a:a3:09:ae:63:d4:ee:c1:db:88:9c:c2:72:61:38: 62:2a:d4:28:93:30:49:9a:be:33:41:e4:38:f8:6c:8e:3d:23: d9:45:d2:a3:f5:84:df:d5:47:d9:74:58:4d:ff:e8:db:2f:8c: 14:7d:23:7e:be:58:1c:8c:86:ee:3a:70:51:86:b4:67:12:24: 91:7f:ca:e0:72:db:1e:36:df:c7:23:d0:41:a3:2e:97:fe:75: a6:07:cb:5f:50:fe:a1:81:fa:4b:b0:2b:1a:1e:9d:e0:1d:e1: d7:9b:bb:5c:a7:20:06:50:6e:4d:4e:22:5f:5f:e8:96:57:8d: 1a:15:23:b7:09:e4:be:db:8c:1f:02:2b:64:ce:af:21:9d:ca: 2e:9c:e7:ad:9c:d7:db:29:61:fa:c1:d3:d7:ae:7b:a3:3f:51: b8:0c:c2:64:25:ba:ea:b7:85:fb:e2:4e:c2:1e:b9:1f:bb:48: 33:d6:c9:a0:6e:c3:ee:df:f1:d5:68:e2:21:80:95:e1:13:d8: ac:d7:68:0c:07:0c:c9:76:0b:70:b8:eb:f9:1a:81:d6:36:ab: 2a:c1:e5:18:6d:09:09:89:0f:8a:3b:99:eb:57:c4:c6:e4:63: 8e:29:f9:58:dd:be:fa:d1:5a:d1:0f:61:f9:9f:59:0d:eb:95: 46:a1:4e:68 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEmh727oFEq+aGoXPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3 Y2IzMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MjJkNjRiOTItNmQ2OS00MDViLTg2ZjYtNzUyZmNiYjk0YTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbzx+LkwbimUaYjfL+jiH8q+8Z9AL96Q2D20 Nqdm7SOXy+OOA3+oYqoCZxROhWHkP9ooUOggZ1CRlG5Nd4tybSlVKqD3PWtJXnzh ZEOWV0QNHR7H9j52JGqsG/BBqgMeHK26jq27zWc8SMzxzD1Y9+DRK+RywaylrZp5 +4mDaIheZjK5DcnE854sVpoPdDw6rZ8V9Y9aBMHVixnOm0/MCBi+bWSskkliDpqy 2AuYibtnoUFeouvJ328B/Y5CMJ4v+LiRCta/i08HrHbaLnFM9smWJ843raeu6BRx EFhRSkFMQ8gttAcPCbSn2L010r6hIrg47fOOWgDP2Lj7XvfXMQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMZQ8mrRmhHGE2s573ud8HB2w+GlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0 OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvZGRmZjE0Y2YtNTQxYS0z ZThhLWE5ZmUtMTFlMDM2YzI5OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTMwNDk4MDAtZmYxNy00OWE2LWIw MjktZWM5MDhlMWM3Y2IzL2EzMDQ5ODAwLWZmMTctNDlhNi1iMDI5LWVjOTA4ZTFj N2NiMy5jcmwwHwYDVR0jBBgwFoAUaCPKKb2RoUnOleZasQ9ms4VnbPAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkw OGUxYzdjYjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALTt0AwQA QhfBAwQCaCRUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJOxLEqjCa5j1O7B24icwnJhOGIq1CiTMEmavjNB 5Dj4bI49I9lF0qP1hN/VR9l0WE3/6NsvjBR9I36+WByMhu46cFGGtGcSJJF/yuBy 2x4238cj0EGjLpf+daYHy19Q/qGB+kuwKxoeneAd4debu1ynIAZQbk1OIl9f6JZX jRoVI7cJ5L7bjB8CK2TOryGdyi6c562c19spYfrB09eue6M/UbgMwmQluuq3hfvi TsIeuR+7SDPWyaBuw+7f8dVo4iGAleET2KzXaAwHDMl2C3C46/kagdY2qyrB5Rht CQmJD4o7metXxMbkY44p+VjdvvrRWtEPYfmfWQ3rlUahTmg= -----END CERTIFICATE-----Generated at Mon Apr 28 10:01:24 2025 by rpki-client