$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa File: 7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa (raw, json) Hash identifier: i1WzV13FsbaagMd4QOPfET8IpzrydMdpkN9GRHtCouE= Subject key identifier: 5A:51:8C:7B:B7:46:E6:64:A5:DF:A5:6E:00:21:6B:5B:AD:E5:A9:EF Certificate issuer: /CN=f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8 Certificate serial: 010D0C9F43285849088194F42D2CF9A8914EF900 Authority key identifier: 7D:3C:6F:EE:64:A5:DD:6E:94:A6:94:A7:7D:7E:19:2C:46:EF:3D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 53848 IP address blocks: 23.252.176.0/20 maxlen: 20 52.124.22.0/23 maxlen: 23 64.45.182.0/23 maxlen: 23 104.254.40.0/22 maxlen: 22 104.255.160.0/21 maxlen: 21 199.202.0.0/19 maxlen: 19 209.127.128.0/21 maxlen: 21 216.211.144.0/20 maxlen: 20 2607:a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:94:f4:2d:2c:f9:a8:91:4e:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=476da30a-cf2b-4d85-b05b-51dfbe0f4998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5f:c1:97:91:2a:c3:1d:92:19:af:08:1c:a1: 03:31:31:99:8e:6c:7f:8a:2d:5d:51:60:2f:9d:d2: 08:de:b2:da:a9:cc:68:81:61:fd:36:c5:cc:75:40: 1c:6e:48:49:74:42:1c:30:c7:85:ea:c7:46:08:0f: da:7a:4d:dc:80:e1:ab:9f:52:a5:97:eb:4a:1f:84: 92:11:ca:5d:63:c7:3c:fa:fc:59:ad:e2:70:fe:2d: 5d:12:59:f0:45:76:68:a7:fd:c6:ed:d0:b3:f1:54: 53:01:22:d5:61:e8:60:04:a8:bf:b6:62:3b:e5:17: b4:33:a9:c6:6f:14:9b:b2:a5:34:c4:5f:83:85:22: ec:f5:58:c7:61:02:f6:3b:ac:9a:05:52:5b:5c:2a: b3:2f:c4:20:38:cc:5b:52:24:06:3d:0f:16:f0:a0: 62:08:70:03:1e:15:51:82:2a:88:5b:35:d9:c3:af: 44:b4:19:d3:51:9c:09:9c:b7:67:b4:56:57:59:b8: f1:31:1e:f8:ec:53:55:98:b1:5f:b4:93:42:25:60: e7:ec:bb:35:7e:ca:fe:90:01:a6:a5:4c:1b:ab:66: a9:c3:1e:23:af:cf:c8:fa:ff:28:cd:6d:a1:6e:dc: 51:7f:6b:10:3e:79:13:43:73:c9:6e:f1:04:3b:a0: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:51:8C:7B:B7:46:E6:64:A5:DF:A5:6E:00:21:6B:5B:AD:E5:A9:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/7f422755-4d8d-3be0-9e1c-60ad1f5996e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.crl X509v3 Authority Key Identifier: keyid:7D:3C:6F:EE:64:A5:DD:6E:94:A6:94:A7:7D:7E:19:2C:46:EF:3D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f14eb6bf-5141-4e9d-a0fa-571aa24ad5b8.cer sbgp-ipAddrBlock: critical IPv4: 23.252.176.0/20 52.124.22.0/23 64.45.182.0/23 104.254.40.0/22 104.255.160.0/21 199.202.0.0/19 209.127.128.0/21 216.211.144.0/20 IPv6: 2607:a80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:81:be:5c:b8:ce:1c:e5:96:b4:f7:41:9f:0c:d6:7e:6e:b0: 3b:cc:56:47:dd:9c:ad:90:cb:de:c6:f2:cf:ba:96:81:d1:fb: 96:0b:94:ac:22:d5:87:bf:b3:c1:dd:de:9f:a5:df:6d:01:93: ca:18:c9:88:5f:d7:b6:49:64:4c:f9:c1:ff:89:1b:c5:e3:32: bd:9d:b3:17:69:26:53:28:07:20:c6:1c:ba:cc:ad:2f:74:c1: 6c:1c:72:50:5c:39:2a:4c:b3:40:3d:6b:e9:04:77:9e:68:f2: 93:c7:ca:cb:2b:e6:98:ee:37:1e:64:08:ad:70:23:93:09:b0: 11:00:49:4f:62:24:9a:67:4e:a1:07:09:ea:c4:d7:39:ed:ba: 09:97:c1:31:55:55:86:90:51:94:8f:6f:9b:8a:41:36:44:df: 40:73:09:e9:7a:73:38:67:52:d3:4d:08:51:15:90:36:87:83: 81:31:05:4c:81:00:9c:d2:1c:8d:74:fb:1a:22:e7:84:ef:6d: 57:1f:d4:35:98:d7:d0:f5:3d:9c:4e:d2:6d:c0:02:0f:9b:88: ed:66:ce:64:0a:86:07:bd:f6:f4:b0:76:03:21:2a:34:df:99: 95:e7:18:7b:33:fa:e9:aa:8b:68:45:7d:2e:5d:ae:c5:a1:3b: 14:46:fb:41 -----BEGIN CERTIFICATE----- MIIGfDCCBWSgAwIBAgIUAQ0Mn0MoWEkIgZT0LSz5qJFO+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjE0ZWI2YmYtNTE0MS00ZTlkLWEwZmEtNTcxYWEyNGFk NWI4MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NDc2ZGEzMGEtY2YyYi00ZDg1LWIwNWItNTFkZmJlMGY0OTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl/Bl5Eqwx2SGa8IHKEDMTGZjmx/ii1dUWAv ndII3rLaqcxogWH9NsXMdUAcbkhJdEIcMMeF6sdGCA/aek3cgOGrn1Kll+tKH4SS EcpdY8c8+vxZreJw/i1dElnwRXZop/3G7dCz8VRTASLVYehgBKi/tmI75Re0M6nG bxSbsqU0xF+DhSLs9VjHYQL2O6yaBVJbXCqzL8QgOMxbUiQGPQ8W8KBiCHADHhVR giqIWzXZw69EtBnTUZwJnLdntFZXWbjxMR747FNVmLFftJNCJWDn7Ls1fsr+kAGm pUwbq2apwx4jr8/I+v8ozW2hbtxRf2sQPnkTQ3PJbvEEO6BdOQIDAQABo4IDjjCC A4owHQYDVR0OBBYEFFpRjHu3RuZkpd+lbgAha1ut5anvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMTRl YjZiZi01MTQxLTRlOWQtYTBmYS01NzFhYTI0YWQ1YjgvN2Y0MjI3NTUtNGQ4ZC0z YmUwLTllMWMtNjBhZDFmNTk5NmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjE0ZWI2YmYtNTE0MS00ZTlkLWEw ZmEtNTcxYWEyNGFkNWI4L2YxNGViNmJmLTUxNDEtNGU5ZC1hMGZhLTU3MWFhMjRh ZDViOC5jcmwwHwYDVR0jBBgwFoAUfTxv7mSl3W6UppSnfX4ZLEbvPYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMTRlYjZiZi01MTQxLTRlOWQtYTBmYS01NzFh YTI0YWQ1YjguY2VyMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQEF/ywAwQB NHwWAwQBQC22AwQCaP4oAwQDaP+gAwQFx8oAAwQD0X+AAwQE2NOQMA0EAgACMAcD BQAmBwqAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAMCBvly4zhzllrT3QZ8M1n5usDvMVkfdnK2Qy97G8s+6 loHR+5YLlKwi1Ye/s8Hd3p+l320Bk8oYyYhf17ZJZEz5wf+JG8XjMr2dsxdpJlMo ByDGHLrMrS90wWwcclBcOSpMs0A9a+kEd55o8pPHyssr5pjuNx5kCK1wI5MJsBEA SU9iJJpnTqEHCerE1zntugmXwTFVVYaQUZSPb5uKQTZE30BzCel6czhnUtNNCFEV kDaHg4ExBUyBAJzSHI10+xoi54TvbVcf1DWY19D1PZxO0m3AAg+biO1mzmQKhge9 9vSwdgMhKjTfmZXnGHsz+umqi2hFfS5drsWhOxRG+0E= -----END CERTIFICATE-----Generated at Fri May 9 09:44:14 2025 by rpki-client