$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa File: f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa (raw, json) Hash identifier: kJeytVy3HtRDDHCTyRG37gWpzD57wA83aKkRtlSEBNw= Subject key identifier: 52:28:91:A2:11:D3:18:0B:2D:EF:C3:3A:34:69:A7:38:DD:57:29:03 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858493ED3D35957DF2FD70DF42A00 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 21949 IP address blocks: 74.213.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d3:59:57:df:2f:d7:0d:f4:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=8e47641d-253b-4c78-a235-4571278e30cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:61:c0:25:d8:ef:75:bb:b6:4e:08:f0:52: 39:e2:66:4e:f6:fc:9d:97:9d:4d:69:b5:ea:cd:21: 6d:30:dc:d0:81:35:1e:36:11:74:c0:38:98:1f:7a: ca:f0:f8:c0:0e:76:db:6a:29:1b:2f:01:2e:a5:9e: f9:ad:1b:89:6d:20:ab:c4:6a:3f:9d:4a:90:64:78: 14:a4:27:2a:62:66:26:1a:b4:51:04:8b:95:cb:4f: 65:5c:4d:86:61:31:6f:83:53:11:14:46:b6:b4:8c: c8:60:30:94:33:bb:d5:e7:c3:1d:e9:76:75:b1:63: 1f:53:9c:31:d0:da:9b:38:62:58:eb:52:17:c8:c0: e5:70:34:08:74:b2:ae:28:9d:07:02:61:49:61:0e: c0:6d:ac:80:53:7c:87:59:c7:6f:91:cd:2e:2e:2c: 02:d1:c5:45:eb:25:cf:e5:ef:cf:95:87:53:58:1f: 16:4e:a2:34:38:57:8e:cf:47:cf:4f:9f:f2:4f:66: 40:8e:04:61:ec:75:62:29:6d:7a:4d:01:e8:ce:2c: 1d:ae:77:1d:72:30:a3:d7:61:af:29:82:2d:44:13: 18:7d:54:ba:29:1d:f1:aa:a1:5e:d1:50:27:68:88: 47:75:0d:3d:76:d3:0c:cd:47:72:5c:72:75:fb:6d: 5d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:28:91:A2:11:D3:18:0B:2D:EF:C3:3A:34:69:A7:38:DD:57:29:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 74.213.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:54:2c:7f:ae:88:b9:5b:23:53:fc:65:67:dd:7a:35:0a:03: e2:7b:48:5f:23:e7:1b:38:cf:e4:e1:b9:13:88:c3:a2:ef:c9: a4:fc:25:eb:63:09:64:24:f1:f1:61:fb:dd:7b:07:f4:80:56: c6:a3:57:9b:cb:12:38:9f:45:92:f7:6b:f0:b9:f0:6e:da:1a: 8c:6d:84:02:73:7c:7a:5c:ba:53:14:ec:aa:b8:6f:1b:4e:20: 45:66:5d:8b:0f:83:41:3a:e1:98:e0:02:ec:50:f0:cd:37:43: a3:8d:23:fe:d3:8f:0c:7a:44:b8:25:68:f2:74:8f:59:43:7d: c4:50:27:67:60:dc:ea:d1:38:8c:ff:23:04:36:1b:37:72:b3: da:1b:78:53:f5:a8:ce:ce:0d:64:5f:e6:90:5b:1b:dd:2d:0a: 27:4f:81:9c:a5:5e:f0:4d:af:ec:f8:6e:bf:2e:5f:fc:1c:e8: f4:85:54:fb:c3:8f:9d:c8:22:ff:71:d7:10:b1:be:f5:c6:df: 43:b2:70:8d:87:b8:aa:24:1a:5d:6c:18:f0:db:5f:05:a6:7b: 93:f1:a9:a7:5e:ec:72:b1:ec:f7:2c:1f:d9:20:62:5a:e0:05: 1b:38:2c:9c:74:8e:b3:28:ed:92:7d:91:86:f8:82:94:dc:6a: 62:bb:b9:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09NZV98v1w30KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk OGU0NzY0MWQtMjUzYi00Yzc4LWEyMzUtNDU3MTI3OGUzMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1RhwCXY73W7tk4I8FI54mZO9vydl51NabXq zSFtMNzQgTUeNhF0wDiYH3rK8PjADnbbaikbLwEupZ75rRuJbSCrxGo/nUqQZHgU pCcqYmYmGrRRBIuVy09lXE2GYTFvg1MRFEa2tIzIYDCUM7vV58Md6XZ1sWMfU5wx 0NqbOGJY61IXyMDlcDQIdLKuKJ0HAmFJYQ7AbayAU3yHWcdvkc0uLiwC0cVF6yXP 5e/PlYdTWB8WTqI0OFeOz0fPT5/yT2ZAjgRh7HViKW16TQHoziwdrncdcjCj12Gv KYItRBMYfVS6KR3xqqFe0VAnaIhHdQ09dtMMzUdyXHJ1+21dEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIokaIR0xgLLe/DOjRppzjdVykDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjlmOGRjZDgtMjFmNS0z MDMxLWExYWEtZjFiZjBmOWJiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFULH+uiLlbI1P8ZWfdejUKA+J7SF8j5xs4z+ThuROIw6LvyaT8Jetj CWQk8fFh+917B/SAVsajV5vLEjifRZL3a/C58G7aGoxthAJzfHpculMU7Kq4bxtO IEVmXYsPg0E64ZjgAuxQ8M03Q6ONI/7Tjwx6RLglaPJ0j1lDfcRQJ2dg3OrROIz/ IwQ2Gzdys9obeFP1qM7ODWRf5pBbG90tCidPgZylXvBNr+z4br8uX/wc6PSFVPvD j53IIv9x1xCxvvXG30OycI2HuKokGl1sGPDbXwWme5Pxqade7HKx7PcsH9kgYlrg BRs4LJx0jrMo7ZJ9kYb4gpTcamK7uWo= -----END CERTIFICATE-----Generated at Tue Apr 8 10:03:56 2025 by rpki-client