$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa File: cebb264b-8916-3bf8-971e-9c880ec664a8.roa (raw, json) Hash identifier: fRNBIZ+bm32VoUtTiyaeQf9k7VSyf78uBMc1rsmH+Vc= Subject key identifier: 8A:DD:35:4F:8F:20:46:B1:03:64:CA:C4:B5:9A:76:CB:67:DC:5C:47 Certificate issuer: /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Certificate serial: 010D0C9F43285849BB0F75180A171C3C4CC8DE00 Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 53698 IP address blocks: 23.174.128.0/24 maxlen: 24 23.174.129.0/24 maxlen: 24 23.175.16.0/24 maxlen: 24 165.140.128.0/23 maxlen: 24 192.33.139.0/24 maxlen: 24 209.209.4.0/22 maxlen: 24 2604:6040::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:75:18:0a:17:1c:3c:4c:c8:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=928dc986-c071-483f-9b29-8ec3f07646ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c8:cb:f3:d0:2e:d6:37:27:3b:0b:0f:3f:d5: 6f:96:a9:92:66:f6:68:7a:f6:27:a6:17:4a:8e:13: 7c:c0:8d:15:97:2f:5b:7f:7d:35:2a:2a:21:75:5c: f9:1b:29:83:f9:11:f1:ca:53:97:ee:0c:99:fc:70: 62:a6:df:73:d5:fb:8d:28:8d:ac:7e:f8:3c:2c:ad: 5f:bf:1d:44:aa:28:72:0a:9f:45:35:84:23:fa:c9: 3a:d9:f7:b0:02:24:30:d0:c3:42:34:6b:8e:dc:39: ae:ed:fc:4b:40:b2:fa:97:55:41:c8:aa:dd:7b:f9: 9e:c1:76:f9:3b:0a:b8:9e:20:7b:1e:6a:66:93:74: eb:8b:fb:a7:16:9c:64:1e:a3:da:6f:67:db:6a:fa: 66:f3:24:3f:c7:ce:2e:23:a6:d8:bf:c0:0d:cf:45: 7e:f8:44:23:fd:c6:91:3e:65:73:ff:42:db:b5:63: 5d:55:da:32:8e:f8:3c:59:d3:f6:db:af:91:77:ee: e9:85:07:90:17:69:75:b1:a9:3e:ee:11:cb:1a:d2: 52:e3:d0:74:43:2d:d4:8c:da:4c:4c:e1:db:a1:82: 3d:3e:5b:ff:97:47:98:f6:d8:94:e0:5e:62:7e:00: 76:85:2c:8c:8b:bc:60:0c:21:0a:8f:e4:fe:9d:ea: 47:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DD:35:4F:8F:20:46:B1:03:64:CA:C4:B5:9A:76:CB:67:DC:5C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl X509v3 Authority Key Identifier: keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer sbgp-ipAddrBlock: critical IPv4: 23.174.128.0/23 23.175.16.0/24 165.140.128.0/23 192.33.139.0/24 209.209.4.0/22 IPv6: 2604:6040::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e0:39:d0:fb:85:64:20:f8:86:b0:6f:e3:30:04:4f:90:a1: 7d:9e:89:f6:cf:9a:8f:9d:db:fa:50:b4:56:9b:e4:dd:c4:0f: 4e:1f:9d:ec:2a:3a:99:71:7f:d2:f0:47:71:cc:32:94:bf:36: 98:69:c2:8c:01:38:a5:36:91:2b:36:fa:91:11:95:b8:cb:70: 5e:db:f1:a3:fc:d4:4d:29:f9:d4:cf:b2:16:8e:fb:54:d7:45: 7a:a7:91:89:f4:4b:6b:1c:e1:eb:c0:67:de:6a:10:d5:49:2a: ce:97:ec:58:1c:45:bf:63:1b:e4:d7:a5:1a:fa:40:1b:6b:35: af:d4:13:47:ae:92:b8:7b:15:84:09:ca:58:ba:20:7d:03:40: 1b:4c:fc:32:e4:17:8b:66:33:e7:a8:39:b6:4d:29:db:bf:39: 73:27:01:ea:fd:31:6a:ec:ef:b6:52:c4:60:30:14:e4:be:9e: 95:75:7b:6b:22:a2:38:24:31:bc:da:dc:9e:aa:d3:01:cd:3d: 51:b1:e5:36:d2:82:f9:70:c7:23:60:ef:8c:f0:89:71:c9:b2: f2:78:74:88:90:87:c7:9c:85:59:15:b1:26:fa:a4:21:a2:c3: dd:65:32:d6:8f:18:13:77:b9:49:4b:f8:75:92:29:8a:0b:90: f8:18:e5:6a -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEm7D3UYChccPEzI3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZTM1ZjktYmZlMS00YzY5LWJiMzItY2QyNTJjMTI1 YzY1MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk OTI4ZGM5ODYtYzA3MS00ODNmLTliMjktOGVjM2YwNzY0NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMjL89Au1jcnOwsPP9VvlqmSZvZoevYnphdK jhN8wI0Vly9bf301KiohdVz5GymD+RHxylOX7gyZ/HBipt9z1fuNKI2sfvg8LK1f vx1EqihyCp9FNYQj+sk62fewAiQw0MNCNGuO3Dmu7fxLQLL6l1VByKrde/mewXb5 Owq4niB7Hmpmk3Tri/unFpxkHqPab2fbavpm8yQ/x84uI6bYv8ANz0V++EQj/caR PmVz/0LbtWNdVdoyjvg8WdP226+Rd+7phQeQF2l1sak+7hHLGtJS49B0Qy3UjNpM TOHboYI9Plv/l0eY9tiU4F5ifgB2hSyMi7xgDCEKj+T+nepHxwIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFIrdNU+PIEaxA2TKxLWadstn3FxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MTVl MzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1MmMxMjVjNjUvY2ViYjI2NGItODkxNi0z YmY4LTk3MWUtOWM4ODBlYzY2NGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjE1ZTM1ZjktYmZlMS00YzY5LWJi MzItY2QyNTJjMTI1YzY1LzYxNWUzNWY5LWJmZTEtNGM2OS1iYjMyLWNkMjUyYzEy NWM2NS5jcmwwHwYDVR0jBBgwFoAUfPNnR7JaJ7Vbv8yDaNxdsrhE0sIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MTVlMzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1 MmMxMjVjNjUuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQBF66AAwQA F68QAwQBpYyAAwQAwCGLAwQC0dEEMA4EAgACMAgDBgQmBGBAADBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAT 4DnQ+4VkIPiGsG/jMARPkKF9non2z5qPndv6ULRWm+TdxA9OH53sKjqZcX/S8Edx zDKUvzaYacKMATilNpErNvqREZW4y3Be2/Gj/NRNKfnUz7IWjvtU10V6p5GJ9Etr HOHrwGfeahDVSSrOl+xYHEW/Yxvk16Ua+kAbazWv1BNHrpK4exWECcpYuiB9A0Ab TPwy5BeLZjPnqDm2TSnbvzlzJwHq/TFq7O+2UsRgMBTkvp6VdXtrIqI4JDG82tye qtMBzT1RseU20oL5cMcjYO+M8IlxybLyeHSIkIfHnIVZFbEm+qQhosPdZTLWjxgT d7lJS/h1kimKC5D4GOVq -----END CERTIFICATE-----Generated at Mon May 12 03:20:58 2025 by rpki-client