$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/be3a8932-5a74-3864-9cfd-670de871133d.roa File: be3a8932-5a74-3864-9cfd-670de871133d.roa (raw, json) Hash identifier: GZiYxtyfouSxHdwzMEPP8Ef5KgyMwQdxS4MaJOVsnn0= Subject key identifier: 23:DA:8A:5D:B4:64:02:C7:93:A4:E5:9E:EB:B0:F2:32:9A:21:D0:1A Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F43285849754453E091B1FA2C85384680 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/be3a8932-5a74-3864-9cfd-670de871133d.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 23465 IP address blocks: 76.164.15.0/24 maxlen: 24 76.164.48.0/23 maxlen: 23 76.164.51.0/24 maxlen: 24 76.164.52.0/23 maxlen: 23 76.164.56.0/23 maxlen: 23 76.164.59.0/24 maxlen: 24 76.164.60.0/24 maxlen: 24 76.164.61.0/24 maxlen: 24 76.164.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:53:e0:91:b1:fa:2c:85:38:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=c6e678c8-e1d6-4407-ad5e-83761192ce22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:7f:21:80:75:0e:a1:58:54:38:46:d5:78: 04:e8:e8:b1:2a:e2:10:bf:af:58:ac:50:b8:ae:60: e4:cc:41:b3:cb:ed:e7:92:70:65:d7:2e:74:3f:7f: 56:a1:98:36:08:59:63:98:12:e2:1a:be:12:12:1b: 53:fb:ba:a9:5c:58:7a:75:63:4a:34:de:70:2c:36: f4:25:07:31:02:97:76:29:15:c8:cc:fa:ce:e2:78: b8:49:c6:3c:27:62:91:24:91:03:6c:97:57:ab:ca: a5:5c:d9:42:ca:33:11:1a:3e:31:e6:ea:69:2c:63: 62:77:38:4c:47:75:63:26:83:04:8a:be:e1:51:f6: 40:26:bf:d1:1c:7e:32:98:47:77:e9:4a:71:e1:ab: 06:f6:b5:07:22:bd:d7:ec:77:af:68:a7:57:4a:6e: f9:b0:ce:e7:dd:4b:d6:a0:c2:52:eb:ee:f1:04:ec: b2:53:04:ae:6e:06:9e:33:0a:ac:99:58:e1:76:33: 97:46:8d:bf:ff:e1:92:7d:94:df:85:42:d7:cc:cd: d1:4b:70:84:e0:8f:7d:01:ab:07:e7:3b:29:8a:a7: b6:e6:c7:fb:34:31:9e:e5:a7:f4:3e:1b:f5:b6:ea: 86:5f:ec:d1:78:23:0b:7d:17:07:05:58:02:be:e0: 6d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DA:8A:5D:B4:64:02:C7:93:A4:E5:9E:EB:B0:F2:32:9A:21:D0:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/be3a8932-5a74-3864-9cfd-670de871133d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 76.164.15.0/24 76.164.48.0/23 76.164.51.0-76.164.53.255 76.164.56.0/23 76.164.59.0-76.164.61.255 76.164.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1f:f4:c1:3d:5a:ce:09:4c:f6:39:1c:86:a4:53:ef:b2:9f: bf:d7:1f:05:70:9a:cd:41:a1:de:a5:f5:8f:2e:b9:16:87:55: 9c:24:06:1d:2f:da:e2:10:5b:bc:41:22:79:c8:c6:e3:25:bf: fd:b5:1d:df:82:b8:6f:36:ac:ed:7d:2a:be:76:88:47:9f:7f: d4:ea:f2:59:8a:a7:1d:79:8c:d2:f3:b2:2b:b1:b6:bb:00:6e: 3f:96:c6:c0:24:61:c3:00:07:d5:bf:ef:ac:98:52:1c:7c:14: a4:51:c1:da:0d:cf:13:dd:ca:fe:25:ff:e8:39:44:32:0e:f8: 15:9d:c4:1d:ef:a5:5d:f7:17:91:98:ee:65:26:e4:f7:4a:1f: 35:ab:f2:dc:a1:c8:23:e2:1a:76:2b:0a:e5:e6:8c:09:a9:da: 14:5f:f2:84:b1:84:da:93:c9:88:74:7f:86:c4:47:c4:44:d4: cc:0b:3e:2a:75:2e:04:fc:4b:e8:c0:26:21:9b:e0:63:23:78: 75:73:ec:46:71:06:1f:dc:ff:a2:cb:27:84:9b:b9:b8:be:d2: da:2d:0c:22:cd:46:4e:0d:87:4c:3a:3f:ac:68:fe:5b:65:73: 6f:07:02:79:64:53:b3:d2:e0:00:0d:fe:f0:4c:73:93:9b:7d: 54:2f:e4:24 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEl1RFPgkbH6LIU4RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk YzZlNjc4YzgtZTFkNi00NDA3LWFkNWUtODM3NjExOTJjZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnZ/IYB1DqFYVDhG1XgE6OixKuIQv69YrFC4 rmDkzEGzy+3nknBl1y50P39WoZg2CFljmBLiGr4SEhtT+7qpXFh6dWNKNN5wLDb0 JQcxApd2KRXIzPrO4ni4ScY8J2KRJJEDbJdXq8qlXNlCyjMRGj4x5uppLGNidzhM R3VjJoMEir7hUfZAJr/RHH4ymEd36Upx4asG9rUHIr3X7HevaKdXSm75sM7n3UvW oMJS6+7xBOyyUwSubgaeMwqsmVjhdjOXRo2//+GSfZTfhULXzM3RS3CE4I99AasH 5zspiqe25sf7NDGe5af0Phv1tuqGX+zReCMLfRcHBVgCvuBtKwIDAQABo4IDgzCC A38wHQYDVR0OBBYEFCPail20ZALHk6Tlnuuw8jKaIdAaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYmUzYTg5MzItNWE3NC0z ODY0LTljZmQtNjcwZGU4NzExMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQATKQPAwQB TKQwMAwDBABMpDMDBAFMpDQDBAFMpDgwDAMEAEykOwMEAUykPAMEAEykPzBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAjH/TBPVrOCUz2ORyGpFPvsp+/1x8FcJrNQaHepfWPLrkWh1WcJAYdL9ri EFu8QSJ5yMbjJb/9tR3fgrhvNqztfSq+dohHn3/U6vJZiqcdeYzS87Irsba7AG4/ lsbAJGHDAAfVv++smFIcfBSkUcHaDc8T3cr+Jf/oOUQyDvgVncQd76Vd9xeRmO5l JuT3Sh81q/Lcocgj4hp2Kwrl5owJqdoUX/KEsYTak8mIdH+GxEfERNTMCz4qdS4E /EvowCYhm+BjI3h1c+xGcQYf3P+iyyeEm7m4vtLaLQwizUZODYdMOj+saP5bZXNv BwJ5ZFOz0uAADf7wTHOTm31UL+Qk -----END CERTIFICATE-----Generated at Sun May 11 13:55:42 2025 by rpki-client