$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa File: 4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa (raw, json) Hash identifier: o0X9aw44wXR3a0lfgGoHyrisbNo5a8a/XQtc8J3h5aA= Subject key identifier: AB:55:5B:94:7C:2B:B1:4A:E5:FC:D3:C8:D1:CF:4C:FD:F2:1A:CB:C0 Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880 Certificate serial: 010D0C9F43285848EF613C00C077E72F13E51FD0 Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 399989 IP address blocks: 74.117.216.0/21 maxlen: 21 74.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3c:00:c0:77:e7:2f:13:e5:1f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=7a9c03fe-fea1-46f5-b4e9-f4d6d87c0b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:79:ac:52:45:41:ba:35:59:b7:a0:bd:c0: 5e:0a:a0:39:da:9b:4e:1f:7e:56:d4:83:94:cb:cc: 06:d1:6b:49:bf:25:00:dc:cc:4a:f7:5d:07:da:e7: 7e:30:39:c3:ca:c0:e4:3c:d9:4b:4b:9c:45:f6:4f: 4e:16:8b:21:b3:83:46:33:15:9a:f3:48:1a:9d:5b: 0f:fb:d7:e8:55:1a:06:98:9e:b7:18:7b:26:13:59: 84:b3:0e:48:43:45:ce:a8:60:e9:06:8f:ef:68:cf: a8:ed:a8:9e:37:e1:9f:07:28:1f:5e:5f:44:91:45: cd:4d:44:a0:58:e4:60:4d:7e:3f:e3:20:c6:31:e5: c7:b9:97:47:6d:f2:12:8d:01:24:0a:85:05:9e:1f: 0f:10:93:9a:7f:52:87:66:94:e2:b1:60:84:27:6d: f3:d8:95:44:ad:ae:c3:38:b4:c5:1b:8e:12:e0:41: 6c:45:b1:d2:a1:8a:4f:23:2e:6b:8b:9d:2c:af:0c: 90:81:9b:58:d0:85:e4:de:9d:69:fc:84:84:bd:ab: 58:b7:c4:16:9d:ac:79:53:04:6b:4e:7a:8e:a0:dc: a0:04:ee:9c:30:19:ac:1f:b9:93:f8:02:29:e9:ee: 67:8c:e8:66:70:bf:64:9c:4b:1f:6a:a8:c2:60:0d: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:55:5B:94:7C:2B:B1:4A:E5:FC:D3:C8:D1:CF:4C:FD:F2:1A:CB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl X509v3 Authority Key Identifier: keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer sbgp-ipAddrBlock: critical IPv4: 74.117.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0c:f0:8c:12:ca:0b:cc:3b:98:e8:a1:6e:9c:19:47:a6:c1: bd:73:42:c7:e4:a2:40:d3:fb:b4:4b:e3:24:8c:66:ec:f7:a2: 75:5a:e3:27:9b:30:6d:d8:fe:df:a3:d9:c1:87:37:06:f9:d5: eb:c9:68:1a:26:3b:9e:da:a9:3c:5f:e0:c3:ec:26:ce:de:49: ec:fa:cd:21:ed:df:02:14:1e:c1:4b:97:07:4c:f6:ad:59:ed: 56:40:a5:28:f3:d2:87:62:2c:de:97:f0:af:c9:69:51:8c:7d: 0e:b3:d1:69:02:e1:26:96:3c:0e:32:07:40:03:c9:d8:f4:e2: 05:10:e7:e6:30:b5:7a:bc:bb:14:16:92:46:e4:1a:a6:c9:01: dd:40:13:c5:b4:a7:b1:3b:7d:dd:fe:5e:29:eb:a4:0e:b7:7a: 59:a2:dd:68:10:3a:a8:25:06:e1:2a:27:fe:dc:9f:20:26:9d: f9:a8:d8:8a:c9:c0:b0:27:9e:64:d0:be:b0:0c:59:34:1d:73: 4c:be:64:f9:9a:d5:17:e2:21:db:80:ef:d0:f4:29:33:0a:ba: 62:35:a0:4a:e7:d4:90:2d:fd:b2:2c:e3:f7:bf:fc:96:24:ac: 42:70:38:e4:37:4b:60:0d:a0:59:30:47:60:10:00:42:0d:3c: 91:48:41:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTwAwHfnLxPlH9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNjA2OGItYmU0OC00Y2M5LWFkNzUtMzM4ZGFhZTI0 ODgwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk N2E5YzAzZmUtZmVhMS00NmY1LWI0ZTktZjRkNmQ4N2MwYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEt5rFJFQbo1WbegvcBeCqA52ptOH35W1IOU y8wG0WtJvyUA3MxK910H2ud+MDnDysDkPNlLS5xF9k9OFoshs4NGMxWa80ganVsP +9foVRoGmJ63GHsmE1mEsw5IQ0XOqGDpBo/vaM+o7aieN+GfBygfXl9EkUXNTUSg WORgTX4/4yDGMeXHuZdHbfISjQEkCoUFnh8PEJOaf1KHZpTisWCEJ23z2JVEra7D OLTFG44S4EFsRbHSoYpPIy5ri50srwyQgZtY0IXk3p1p/ISEvatYt8QWnax5UwRr TnqOoNygBO6cMBmsH7mT+AIp6e5njOhmcL9knEsfaqjCYA1OswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtVW5R8K7FK5fzTyNHPTP3yGsvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2 MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhkYWFlMjQ4ODAvNGE0OGUyMGEtMGUyOS0z ZTFmLWE4MWUtNGE3MmI3NDJlNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JiNjA2OGItYmU0OC00Y2M5LWFk NzUtMzM4ZGFhZTI0ODgwLzNiYjYwNjhiLWJlNDgtNGNjOS1hZDc1LTMzOGRhYWUy NDg4MC5jcmwwHwYDVR0jBBgwFoAUbtTxliCn6Jrv3X4Q6UKTgKaqUgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhk YWFlMjQ4ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMM8IwSygvMO5jooW6cGUemwb1zQsfkokDT+7RL4ySMZuz3onVa4yeb MG3Y/t+j2cGHNwb51evJaBomO57aqTxf4MPsJs7eSez6zSHt3wIUHsFLlwdM9q1Z 7VZApSjz0odiLN6X8K/JaVGMfQ6z0WkC4SaWPA4yB0ADydj04gUQ5+YwtXq8uxQW kkbkGqbJAd1AE8W0p7E7fd3+XinrpA63elmi3WgQOqglBuEqJ/7cnyAmnfmo2IrJ wLAnnmTQvrAMWTQdc0y+ZPma1RfiIduA79D0KTMKumI1oErn1JAt/bIs4/e//JYk rEJwOOQ3S2ANoFkwR2AQAEINPJFIQR4= -----END CERTIFICATE-----Generated at Sat Apr 5 23:18:28 2025 by rpki-client