$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2957b6af-fefa-33f9-a309-1517c06a19f6.roa File: 2957b6af-fefa-33f9-a309-1517c06a19f6.roa (raw, json) Hash identifier: VpiN1rTIXqBjrl/b2eKpR24goM9zWZe/I2KIf5r00Y0= Subject key identifier: 50:BB:88:78:7A:4A:6E:F9:6A:74:52:51:A9:36:40:63:F3:89:EA:26 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99643F34136177E8E7CFD00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2957b6af-fefa-33f9-a309-1517c06a19f6.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397227 IP address blocks: 204.74.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:43:f3:41:36:17:7e:8e:7c:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=8045d51b-3ea1-4ea5-b475-ec899e2a167e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:e7:0b:8f:69:06:1c:8c:52:63:ca:3c:a4: 1b:b3:c3:b9:47:89:4f:65:14:46:55:22:0b:ea:10: 9a:ec:83:b5:e1:6f:cc:65:bb:a9:1b:81:6f:46:3a: 2b:6f:99:f9:14:66:95:b5:22:6c:1e:6f:56:54:a7: 0e:f1:48:f8:b8:25:26:f0:be:c4:1b:b2:bb:5a:80: c7:a6:58:31:f7:76:75:57:85:a4:77:1f:2d:31:86: bf:78:25:b2:3d:10:5b:97:48:fe:f9:42:1b:bb:b4: 9c:59:0d:43:f5:4a:ab:80:04:41:f7:9d:69:96:3d: 75:fd:a1:8e:ac:b6:8a:d2:f8:55:c7:cd:cf:8b:3c: 7c:10:29:97:98:64:70:f8:9d:f5:47:8b:8c:39:61: e2:2b:b0:17:b4:eb:25:0a:14:2a:65:a6:a6:fd:9d: b1:cf:b8:19:8f:e9:31:00:8b:c9:f1:89:22:45:ab: b1:4d:70:1e:e7:01:5b:2c:cd:61:92:84:03:d8:24: d1:9d:ac:3f:b2:90:cc:a1:63:b0:c2:ca:53:bb:ec: 02:6c:ad:03:f6:e4:4a:29:a0:86:3a:b9:9e:0c:64: 23:8f:a9:76:c3:b6:4e:6b:af:68:f3:8f:38:04:78: 02:c6:20:b7:98:74:97:92:92:b3:73:93:9e:f7:15: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BB:88:78:7A:4A:6E:F9:6A:74:52:51:A9:36:40:63:F3:89:EA:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2957b6af-fefa-33f9-a309-1517c06a19f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6b:6c:92:02:8e:2e:c5:24:21:b0:5e:80:5b:f5:2b:bc:21: d7:70:40:dd:2c:93:46:6a:fc:ee:6c:ce:58:54:55:8c:40:6a: 37:14:43:57:69:1d:46:9e:00:28:77:11:45:0d:dc:6c:42:8a: 5e:4a:53:22:02:b9:9b:21:18:9c:71:0b:c9:60:80:ae:0c:54: 1d:68:9f:fc:31:7c:91:71:97:80:b9:67:96:2e:28:23:ef:60: 44:b7:88:16:53:44:3a:37:99:90:69:1c:9d:9a:7f:2a:b9:7e: 1e:c5:2c:03:f2:49:b9:b4:22:60:a7:9c:7e:1d:09:d0:86:c3: 92:8c:cb:e0:cd:5b:b4:b6:44:eb:a6:cf:a1:15:d6:66:c0:0e: 25:75:96:47:ef:66:62:f0:5b:2f:39:a8:28:a0:57:1e:e3:00: a8:2e:dc:a6:7e:89:03:88:bd:5f:2c:23:73:80:03:dc:61:dc: 85:d6:2b:f1:d6:30:81:7f:91:9c:6f:2e:5a:00:28:71:b9:e5: a2:1b:d3:36:69:d8:7a:85:80:7c:f1:70:65:6f:f8:ae:ad:a5: 63:d1:a4:ab:b8:3a:d4:61:cd:3b:71:f1:37:35:27:9b:60:2a: a2:b3:3d:91:e5:70:e7:57:f3:2b:ce:72:90:fa:79:bb:ec:69: e3:a6:bf:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkPzQTYXfo58/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODA0NWQ1MWItM2VhMS00ZWE1LWI0NzUtZWM4OTllMmExNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOTnC49pBhyMUmPKPKQbs8O5R4lPZRRGVSIL 6hCa7IO14W/MZbupG4FvRjorb5n5FGaVtSJsHm9WVKcO8Uj4uCUm8L7EG7K7WoDH plgx93Z1V4Wkdx8tMYa/eCWyPRBbl0j++UIbu7ScWQ1D9UqrgARB951plj11/aGO rLaK0vhVx83Pizx8ECmXmGRw+J31R4uMOWHiK7AXtOslChQqZaam/Z2xz7gZj+kx AIvJ8YkiRauxTXAe5wFbLM1hkoQD2CTRnaw/spDMoWOwwspTu+wCbK0D9uRKKaCG OrmeDGQjj6l2w7ZOa69o8484BHgCxiC3mHSXkpKzc5Oe9xWL8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC7iHh6Sm75anRSUak2QGPzieomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMjk1N2I2YWYtZmVmYS0z M2Y5LWEzMDktMTUxN2MwNmExOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVrbJICji7FJCGwXoBb9Su8IddwQN0sk0Zq/O5szlhUVYxAajcUQ1dp HUaeACh3EUUN3GxCil5KUyICuZshGJxxC8lggK4MVB1on/wxfJFxl4C5Z5YuKCPv YES3iBZTRDo3mZBpHJ2afyq5fh7FLAPySbm0ImCnnH4dCdCGw5KMy+DNW7S2ROum z6EV1mbADiV1lkfvZmLwWy85qCigVx7jAKgu3KZ+iQOIvV8sI3OAA9xh3IXWK/HW MIF/kZxvLloAKHG55aIb0zZp2HqFgHzxcGVv+K6tpWPRpKu4OtRhzTtx8Tc1J5tg KqKzPZHlcOdX8yvOcpD6ebvsaeOmv94= -----END CERTIFICATE-----Generated at Sun Apr 6 04:50:52 2025 by rpki-client