$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/897e8122-e29c-392b-b8e5-76848c850458.roa File: 897e8122-e29c-392b-b8e5-76848c850458.roa (raw, json) Hash identifier: ewmZBy4yC3hgeY043HU0RViSMurBAu9GYAiI+fPt5ic= Subject key identifier: 6B:F0:F3:00:CA:1E:DA:1F:E5:D4:A1:64:D4:A7:26:36:48:AE:C8:3A Certificate issuer: /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Certificate serial: 010D0C9F432858488DB6A6F0C06FF5EDB10DD340 Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/897e8122-e29c-392b-b8e5-76848c850458.roa Signing time: Wed 15 Jan 2025 14:23:53 +0000 ROA not before: Wed 15 Jan 2025 14:23:53 +0000 ROA not after: Tue 15 Apr 2025 13:23:53 +0000 asID: 46606 IP address blocks: 74.91.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:b6:a6:f0:c0:6f:f5:ed:b1:0d:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e Validity Not Before: Jan 15 14:23:53 2025 GMT Not After : Apr 15 13:23:53 2025 GMT Subject: CN=667c8d52-24b1-407d-846b-ee51f468eddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:00:f3:6b:33:0b:30:f6:91:f4:6d:ac:1e:92: 85:ab:e9:a3:24:76:3b:29:07:ec:49:8f:31:e4:71: bf:1f:f2:87:a0:1d:25:bb:32:a9:b9:70:20:de:dd: e7:e5:2a:2d:f7:87:a3:93:94:db:5d:55:19:55:be: 30:ce:de:2d:71:46:90:2e:10:73:05:e4:6c:b8:e9: 1d:16:c4:0a:b8:07:a9:86:22:c9:ba:41:f0:c4:bf: c2:5c:ae:39:61:fa:6e:d1:2f:e6:2d:bf:aa:1d:ca: 09:69:f5:5d:2a:c0:21:81:17:0f:26:80:d7:71:e5: b4:b0:66:11:2d:f5:ac:97:cf:bd:3f:86:85:32:69: 05:5b:7c:fb:ab:0f:3a:bb:e3:e4:d2:47:df:27:1d: 8c:d4:54:ff:46:99:fe:84:5e:b5:5a:27:07:3a:b9: 1b:c5:1f:fe:90:27:92:85:57:20:9f:5c:8f:56:85: c6:55:06:f4:08:d5:d8:1e:53:22:24:d4:a1:4d:22: 5e:b6:a1:76:c7:ee:cd:0a:67:a5:8a:58:3e:6e:16: 01:87:54:8c:3c:0f:ca:f1:5b:76:0b:b4:c0:84:1f: 7d:90:d9:a2:d8:ba:3f:cd:ec:4e:66:35:24:2b:7a: c8:af:88:d1:74:45:24:bb:3c:ab:bb:8d:9b:9b:77: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F0:F3:00:CA:1E:DA:1F:E5:D4:A1:64:D4:A7:26:36:48:AE:C8:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/897e8122-e29c-392b-b8e5-76848c850458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl X509v3 Authority Key Identifier: keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer sbgp-ipAddrBlock: critical IPv4: 74.91.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8e:8f:34:22:5b:24:dd:53:d8:71:0a:86:ca:1d:82:c6:65: 43:95:0b:22:ed:48:53:90:e4:0f:9c:f1:fd:7d:e7:25:53:9c: 9a:7c:14:e8:c5:e5:b8:bf:a3:b8:31:f5:5c:62:ac:99:9f:af: 78:8d:03:67:2f:60:d3:3c:07:89:5a:fb:2b:72:65:1d:c2:69: be:71:63:cc:77:b0:70:f7:81:9f:85:07:3e:44:a3:cf:5e:a0: 8d:6e:ca:71:c0:36:1e:5e:ab:f5:19:ac:e7:6a:34:2a:e6:2c: c5:00:c8:d7:3f:34:dc:54:ae:03:d5:7e:7c:14:b6:11:98:b7: 83:38:10:ef:77:f6:e1:51:ec:9b:86:dd:b7:1f:f5:13:4c:7c: 93:8c:bd:f1:91:d7:ab:db:0a:43:28:55:f4:50:46:7a:1b:ab: 9c:99:be:1d:f9:4c:9e:e8:5e:2f:18:41:96:bd:4d:f2:8f:43: 0d:0d:7d:49:73:37:73:ba:bc:ef:47:49:f4:b4:cc:58:af:42: 21:2b:13:5e:ac:a6:83:74:76:74:36:cd:49:77:dc:f9:2a:cd: 8c:93:34:6e:05:19:0a:29:96:12:5a:08:89:a7:b6:0c:02:60: 35:70:d8:39:f4:64:c4:36:5c:99:1d:06:bb:d8:bf:c0:44:cd: e5:38:79:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNtqbwwG/17bEN00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi MDhlMB4XDTI1MDExNTE0MjM1M1oXDTI1MDQxNTEzMjM1M1owLzEtMCsGA1UEAxMk NjY3YzhkNTItMjRiMS00MDdkLTg0NmItZWU1MWY0NjhlZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gDzazMLMPaR9G2sHpKFq+mjJHY7KQfsSY8x 5HG/H/KHoB0luzKpuXAg3t3n5Sot94ejk5TbXVUZVb4wzt4tcUaQLhBzBeRsuOkd FsQKuAephiLJukHwxL/CXK45Yfpu0S/mLb+qHcoJafVdKsAhgRcPJoDXceW0sGYR LfWsl8+9P4aFMmkFW3z7qw86u+Pk0kffJx2M1FT/Rpn+hF61WicHOrkbxR/+kCeS hVcgn1yPVoXGVQb0CNXYHlMiJNShTSJetqF2x+7NCmelilg+bhYBh1SMPA/K8Vt2 C7TAhB99kNmi2Lo/zexOZjUkK3rIr4jRdEUkuzyru42bm3eRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvw8wDKHtof5dShZNSnJjZIrsg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvODk3ZTgxMjItZTI5Yy0z OTJiLWI4ZTUtNzY4NDhjODUwNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1 ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4 MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSluAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeOjzQiWyTdU9hxCobKHYLGZUOVCyLtSFOQ5A+c8f195yVTnJp8FOjF 5bi/o7gx9VxirJmfr3iNA2cvYNM8B4la+ytyZR3Cab5xY8x3sHD3gZ+FBz5Eo89e oI1uynHANh5eq/UZrOdqNCrmLMUAyNc/NNxUrgPVfnwUthGYt4M4EO939uFR7JuG 3bcf9RNMfJOMvfGR16vbCkMoVfRQRnobq5yZvh35TJ7oXi8YQZa9TfKPQw0NfUlz N3O6vO9HSfS0zFivQiErE16spoN0dnQ2zUl33PkqzYyTNG4FGQoplhJaCImntgwC YDVw2Dn0ZMQ2XJkdBrvYv8BEzeU4eeU= -----END CERTIFICATE-----Generated at Sat Apr 5 19:13:06 2025 by rpki-client