$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa File: fe196e76-1d06-3092-a96a-07322f606f5e.roa (raw, json) Hash identifier: eh0yurxy5s/n66YL3UqAg4t/P5kkBlHoP2WzxRk4hOc= Subject key identifier: CB:78:43:24:B7:83:3B:7A:34:E5:4B:4A:F6:A1:C7:E6:62:DC:1D:3B Certificate issuer: /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3 Certificate serial: 010D0C9F432858491D717866D6DC214B15D39740 Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 54643 IP address blocks: 23.111.64.0/21 maxlen: 22 23.111.72.0/22 maxlen: 23 66.85.28.0/22 maxlen: 23 67.231.16.0/20 maxlen: 23 104.36.148.0/22 maxlen: 23 104.193.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:78:66:d6:dc:21:4b:15:d3:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=64cfda17-ab5f-43e1-a43f-adeeb53b8da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:6c:ec:b0:65:66:7e:6e:80:a8:51:ae:be: 6f:fb:4f:a6:59:d8:61:58:b8:e1:41:17:d0:08:c9: f5:8b:71:df:48:c4:fb:43:db:4f:d9:e7:16:7b:f1: aa:72:2f:fa:62:2f:90:5a:e2:12:9f:2e:16:e3:a9: 31:f7:53:f7:ae:4b:52:73:03:d4:5d:c5:5b:67:2c: 9a:99:68:8f:49:c2:af:3a:bf:7a:f4:c2:1d:6b:85: 3e:74:ff:87:68:2a:ac:4d:c9:87:ef:6b:e5:9a:bc: cb:90:42:06:c6:5d:51:5c:42:63:64:b7:24:53:5d: 37:b7:c4:e3:49:81:37:7a:e3:af:a6:52:b2:d7:00: cc:65:26:4b:f7:66:1d:69:d1:dd:3b:92:78:a0:21: 17:d2:81:ff:38:ae:f0:53:56:88:fb:ca:41:e7:0b: 9a:34:7a:0a:ff:a5:6e:b8:a3:f4:8c:61:83:09:2e: 11:af:fa:c2:c5:ca:ca:e3:16:6e:58:41:84:20:2c: e9:22:81:f8:b1:30:ef:45:f9:7a:a7:f1:6a:6b:81: ef:02:12:4c:61:7b:19:5a:bd:21:89:87:3d:d4:d1: 4b:58:0f:fd:3c:20:e8:e5:cd:ec:2e:c1:b7:22:c9: e7:6e:df:5d:6d:91:69:af:62:78:7b:30:d4:f9:68: b6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:78:43:24:B7:83:3B:7A:34:E5:4B:4A:F6:A1:C7:E6:62:DC:1D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/fe196e76-1d06-3092-a96a-07322f606f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl X509v3 Authority Key Identifier: keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer sbgp-ipAddrBlock: critical IPv4: 23.111.64.0-23.111.75.255 66.85.28.0/22 67.231.16.0/20 104.36.148.0/22 104.193.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:89:c3:5b:13:eb:ea:20:02:bd:06:46:b5:c7:8e:53:68:68: 67:2a:bf:ae:20:44:ed:dc:88:f8:69:f7:28:d5:1b:77:7d:5a: 30:40:dc:89:d1:3a:12:f8:ac:19:eb:17:22:65:e3:19:ac:d0: 6f:eb:f9:9a:28:f7:0c:e8:c5:a7:6f:8b:89:6d:c4:de:51:a1: b4:94:68:71:a4:a5:0b:c3:44:55:04:e7:ed:de:29:c9:d6:ad: 3b:c7:54:aa:fc:97:f9:5f:7c:28:39:0e:59:cf:b5:9c:4e:cc: a2:ea:72:88:20:bf:bf:8b:9b:b0:76:c0:45:6e:ef:6b:55:fc: 64:4b:67:4a:8c:c2:9b:8d:fe:b9:be:25:0f:49:d6:55:d9:a5: c8:f5:63:14:d9:08:3d:fd:4b:82:e0:7c:19:68:05:6b:39:3f: 63:1f:79:fb:3c:c6:be:e1:49:dc:fb:d5:5c:77:d8:58:54:c6: 23:44:4b:d4:f4:2b:21:e7:7f:59:26:de:62:8a:56:78:61:54: 29:a5:62:8b:5b:c5:97:4e:9e:d6:29:6e:8e:70:f4:1a:38:19: 63:a3:70:52:33:b5:7c:f0:d1:f5:d7:87:a0:e2:cc:21:32:d6: 25:29:ac:77:58:b4:cc:63:c6:66:7f:89:90:bb:9c:85:d6:60: 8f:b2:c2:8f -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEkdcXhm1twhSxXTl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhZWQ3NTgtODQ3Yi00ODUzLTlmY2UtZjA0NTFiNWZh MmIzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NjRjZmRhMTctYWI1Zi00M2UxLWE0M2YtYWRlZWI1M2I4ZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRNs7LBlZn5ugKhRrr5v+0+mWdhhWLjhQRfQ CMn1i3HfSMT7Q9tP2ecWe/Gqci/6Yi+QWuISny4W46kx91P3rktScwPUXcVbZyya mWiPScKvOr969MIda4U+dP+HaCqsTcmH72vlmrzLkEIGxl1RXEJjZLckU103t8Tj SYE3euOvplKy1wDMZSZL92YdadHdO5J4oCEX0oH/OK7wU1aI+8pB5wuaNHoK/6Vu uKP0jGGDCS4Rr/rCxcrK4xZuWEGEICzpIoH4sTDvRfl6p/Fqa4HvAhJMYXsZWr0h iYc91NFLWA/9PCDo5c3sLsG3Isnnbt9dbZFpr2J4ezDU+Wi2eQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFMt4QyS3gzt6NOVLSvahx+Zi3B07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMGFl ZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1MWI1ZmEyYjMvZmUxOTZlNzYtMWQwNi0z MDkyLWE5NmEtMDczMjJmNjA2ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDBhZWQ3NTgtODQ3Yi00ODUzLTlm Y2UtZjA0NTFiNWZhMmIzL2QwYWVkNzU4LTg0N2ItNDg1My05ZmNlLWYwNDUxYjVm YTJiMy5jcmwwHwYDVR0jBBgwFoAUJilJP/OCupL6yCxvq0gH82UlXCcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMGFlZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1 MWI1ZmEyYjMuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAYXb0AD BAIXb0gDBAJCVRwDBARD5xADBAJoJJQDBAJowawwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHonDWxPr6iAC vQZGtceOU2hoZyq/riBE7dyI+Gn3KNUbd31aMEDcidE6EvisGesXImXjGazQb+v5 mij3DOjFp2+LiW3E3lGhtJRocaSlC8NEVQTn7d4pydatO8dUqvyX+V98KDkOWc+1 nE7MoupyiCC/v4ubsHbARW7va1X8ZEtnSozCm43+ub4lD0nWVdmlyPVjFNkIPf1L guB8GWgFazk/Yx95+zzGvuFJ3PvVXHfYWFTGI0RL1PQrIed/WSbeYopWeGFUKaVi i1vFl06e1ilujnD0GjgZY6NwUjO1fPDR9deHoOLMITLWJSmsd1i0zGPGZn+JkLuc hdZgj7LCjw== -----END CERTIFICATE-----Generated at Mon Apr 28 15:07:05 2025 by rpki-client