$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa File: 0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa (raw, json) Hash identifier: Qxg+AmxPBdr365xZUlpJxrS+IfeL7/6QTsAHsVrOtKc= Subject key identifier: D9:06:58:2A:34:2C:14:70:1C:91:B4:39:8F:95:5F:74:A3:58:1A:9A Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584902EBFD0C5A3940AA7C065380 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 3462 IP address blocks: 23.91.111.0/24 maxlen: 24 107.155.30.0/24 maxlen: 24 107.155.57.0/24 maxlen: 24 128.1.37.0/24 maxlen: 24 128.1.45.0/24 maxlen: 24 128.1.50.0/24 maxlen: 24 128.1.63.0/24 maxlen: 24 128.1.101.0/24 maxlen: 24 128.1.102.0/23 maxlen: 24 128.14.238.0/24 maxlen: 24 192.254.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:eb:fd:0c:5a:39:40:aa:7c:06:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=c2b129f5-9f98-441f-ade2-02c99784d7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:23:6d:35:60:71:c3:a8:52:49:93:7d:85:25: 1a:c2:32:55:89:1d:d6:57:98:d3:83:95:5e:0c:64: 50:86:a8:18:f2:c5:0a:b0:76:e8:48:10:93:6e:eb: 74:38:8e:df:59:c6:a3:dc:fd:87:00:76:6f:fb:9f: f1:85:bb:c4:30:b3:50:57:06:c8:13:9a:be:95:6c: 32:7e:74:60:43:e8:47:64:5e:f3:c1:18:0b:b9:2f: 88:a6:23:b0:37:a5:58:e8:2c:c4:39:2a:3d:1d:55: 96:82:3d:77:7e:d0:52:07:79:01:b2:14:87:b8:37: 1e:dc:86:b0:28:73:87:32:9e:b1:de:a3:46:41:aa: 9d:30:c9:df:2f:44:76:e4:2e:23:54:c6:99:83:cb: 83:0d:dd:66:1e:23:f9:75:04:3d:94:e7:9f:51:fc: 1e:8a:97:8b:1d:da:97:ab:25:d0:c6:52:c2:9f:d7: 7f:49:a2:b9:27:c1:f1:df:26:6f:03:de:21:40:5b: 25:ce:57:4f:45:a2:27:6b:ce:83:3d:4e:b4:80:a0: 1d:e2:4c:32:68:b7:f0:73:ee:32:00:37:d8:3c:20: 58:ea:70:66:09:14:fc:1d:de:67:c4:e8:be:d3:46: cb:b2:8c:ed:4f:2a:33:23:86:4a:93:8f:b1:63:9e: ec:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:06:58:2A:34:2C:14:70:1C:91:B4:39:8F:95:5F:74:A3:58:1A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0c0b38c2-f10b-3b4c-8ae0-c5c46c1ab576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 23.91.111.0/24 107.155.30.0/24 107.155.57.0/24 128.1.37.0/24 128.1.45.0/24 128.1.50.0/24 128.1.63.0/24 128.1.101.0-128.1.103.255 128.14.238.0/24 192.254.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:10:bd:b4:95:1a:07:95:98:d5:34:99:01:b2:11:76:d7:06: 8a:58:b9:f1:2b:01:cb:96:52:2b:2c:12:e8:f5:9b:66:fd:a6: 49:c8:16:78:13:93:10:57:51:8f:3a:0f:11:c6:1c:9a:ff:40: 5e:32:1b:ab:5a:41:d3:9f:18:c6:32:ab:ad:66:d7:d2:81:3e: fe:6b:58:67:e6:a9:da:e2:f6:8a:02:7d:b7:fd:a8:c2:a9:4b: d1:f2:33:3c:29:10:00:38:e8:fe:5e:91:e4:2d:52:57:14:42: 6c:51:ca:c4:48:06:a8:ad:12:b6:5a:ce:11:45:e8:cf:5d:e8: 30:83:46:35:86:34:54:c5:3e:b9:4b:ef:27:5a:8a:55:10:d1: 0f:b7:1d:23:ef:d6:fd:c7:c7:82:48:bf:a6:04:42:94:1f:a2: 7f:f1:bd:c3:34:58:24:38:c2:fa:c5:5a:dc:da:0e:aa:73:b5: 71:f7:5e:d8:5a:2c:c4:60:5c:b0:7c:c6:fc:d6:9e:f2:0e:57: a0:33:68:e1:90:f8:42:78:40:8e:c9:fb:39:a0:f8:16:40:8b: 00:fa:f2:ef:d1:2f:c8:8f:14:5e:e4:66:02:df:27:d9:48:f7: 37:4b:c2:5a:b5:ac:a1:8e:b8:21:4d:c6:a5:f3:52:71:f4:4b: 3e:dc:ef:b1 -----BEGIN CERTIFICATE----- MIIGgTCCBWmgAwIBAgIUAQ0Mn0MoWEkC6/0MWjlAqnwGU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YzJiMTI5ZjUtOWY5OC00NDFmLWFkZTItMDJjOTk3ODRkN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yNtNWBxw6hSSZN9hSUawjJViR3WV5jTg5Ve DGRQhqgY8sUKsHboSBCTbut0OI7fWcaj3P2HAHZv+5/xhbvEMLNQVwbIE5q+lWwy fnRgQ+hHZF7zwRgLuS+IpiOwN6VY6CzEOSo9HVWWgj13ftBSB3kBshSHuDce3Iaw KHOHMp6x3qNGQaqdMMnfL0R25C4jVMaZg8uDDd1mHiP5dQQ9lOefUfweipeLHdqX qyXQxlLCn9d/SaK5J8Hx3yZvA94hQFslzldPRaIna86DPU60gKAd4kwyaLfwc+4y ADfYPCBY6nBmCRT8Hd5nxOi+00bLsoztTyozI4ZKk4+xY57snwIDAQABo4IDkzCC A48wHQYDVR0OBBYEFNkGWCo0LBRwHJG0OY+VX3SjWBqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMGMwYjM4YzItZjEwYi0z YjRjLThhZTAtYzVjNDZjMWFiNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAF1tvAwQA a5seAwQAa5s5AwQAgAElAwQAgAEtAwQAgAEyAwQAgAE/MAwDBACAAWUDBAOAAWAD BACADu4DBADA/lYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAKhC9tJUaB5WY1TSZAbIRdtcGili58SsBy5ZS KywS6PWbZv2mScgWeBOTEFdRjzoPEcYcmv9AXjIbq1pB058YxjKrrWbX0oE+/mtY Z+ap2uL2igJ9t/2owqlL0fIzPCkQADjo/l6R5C1SVxRCbFHKxEgGqK0StlrOEUXo z13oMINGNYY0VMU+uUvvJ1qKVRDRD7cdI+/W/cfHgki/pgRClB+if/G9wzRYJDjC +sVa3NoOqnO1cfde2FosxGBcsHzG/Nae8g5XoDNo4ZD4QnhAjsn7OaD4FkCLAPry 79EvyI8UXuRmAt8n2Uj3N0vCWrWsoY64IU3GpfNScfRLPtzvsQ== -----END CERTIFICATE-----Generated at Tue May 6 10:31:25 2025 by rpki-client