$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4030d52a-55da-3e67-afd4-4fd5f3ba0868.roa File: 4030d52a-55da-3e67-afd4-4fd5f3ba0868.roa (raw, json) Hash identifier: YCcaRyj1ralnIRe7Eu5q3mkbx7RtEKX47XsxC5sfOD8= Subject key identifier: B2:8C:9D:A3:95:72:6D:BB:6E:CC:AE:9D:2F:35:C0:E5:CA:DD:2D:F4 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996436984A5D0E761A60B60 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4030d52a-55da-3e67-afd4-4fd5f3ba0868.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397217 IP address blocks: 204.74.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:43:69:84:a5:d0:e7:61:a6:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=f654bc2e-dc82-4c10-96ff-bd9eb191eace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a6:86:a0:53:9d:30:43:57:16:53:68:6c:19: 57:a5:0f:00:a0:98:0a:89:eb:5d:02:8b:ba:e0:ea: e9:91:c4:23:74:b5:e3:13:25:98:85:76:8a:3f:7d: e3:ef:6a:a0:89:bd:97:c7:04:6f:8c:e0:0a:af:5a: 81:b4:d0:8a:d8:6f:c4:18:ad:0e:38:56:c1:c2:e1: 67:cc:4d:eb:de:65:18:68:ed:df:e4:52:63:be:02: c8:de:69:8b:40:76:c2:fa:0e:ec:60:d4:dc:95:13: f5:7f:60:aa:ca:3d:9b:a3:06:2e:78:81:7f:07:f4: 8e:ff:88:8d:7b:8e:dc:4e:ab:1c:8d:ea:5f:79:9c: 65:93:c9:c0:10:4b:5b:a7:25:cf:ba:ab:f0:dc:92: ac:db:1c:9a:d1:c7:13:0e:35:97:18:14:10:6a:71: 90:4f:f7:af:d1:16:d4:21:51:20:55:0b:69:69:d3: c1:61:65:38:aa:a6:e3:f4:80:ac:41:d6:9a:41:11: f9:22:01:7f:db:9e:1f:5d:04:58:2b:a5:9d:af:90: c5:67:55:95:20:c5:62:97:5a:4c:c7:48:ce:f2:3d: 18:74:7a:80:06:c1:5e:55:fc:fb:71:da:0a:30:7f: 59:ae:a1:d4:28:eb:59:06:b4:4f:2c:90:8f:24:96: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:9D:A3:95:72:6D:BB:6E:CC:AE:9D:2F:35:C0:E5:CA:DD:2D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4030d52a-55da-3e67-afd4-4fd5f3ba0868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:80:0f:78:c4:8c:b4:04:ce:38:a4:86:f2:7a:7c:1f:e3:24: 50:1e:41:2e:09:08:13:ca:84:1e:29:58:40:f5:3e:dd:ba:b9: 63:cf:8d:9f:15:fa:5e:3a:d7:4c:9f:2f:06:12:1d:4d:1f:1e: 40:12:94:e9:b1:75:7c:72:a1:64:90:b6:ce:1c:6e:65:7f:85: a7:d8:43:b9:2d:20:89:1f:6a:e8:90:bd:5e:74:33:c2:94:df: 39:7e:6c:0d:c1:d5:ff:08:58:c2:99:05:c4:01:8c:a6:6c:9a: d7:43:f2:19:03:bb:b3:4d:71:8e:de:3a:a7:4b:ec:ea:1b:56: 73:8e:32:f2:53:11:c5:64:41:92:3c:be:a1:92:44:b4:1e:ce: 47:07:f7:78:eb:8e:03:7d:ed:79:93:ca:de:86:84:8b:41:09: 2c:6b:ed:c4:28:5b:f8:95:60:04:ee:d3:c7:32:d9:15:93:c7: 78:10:ed:a8:7b:a0:ce:f5:d2:70:15:bf:d9:b7:6a:72:f2:e3: c6:12:e8:9d:de:f6:e8:f3:61:bc:ec:60:cb:2f:17:ac:82:12: 3a:00:42:72:71:c1:da:df:45:ed:2a:31:49:3c:97:a5:c1:a1: cb:27:8a:cf:2c:cd:40:08:65:f1:68:71:b0:23:d5:3f:32:74: 80:18:5f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkNphKXQ52GmC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjY1NGJjMmUtZGM4Mi00YzEwLTk2ZmYtYmQ5ZWIxOTFlYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKaGoFOdMENXFlNobBlXpQ8AoJgKietdAou6 4OrpkcQjdLXjEyWYhXaKP33j72qgib2XxwRvjOAKr1qBtNCK2G/EGK0OOFbBwuFn zE3r3mUYaO3f5FJjvgLI3mmLQHbC+g7sYNTclRP1f2Cqyj2bowYueIF/B/SO/4iN e47cTqscjepfeZxlk8nAEEtbpyXPuqvw3JKs2xya0ccTDjWXGBQQanGQT/ev0RbU IVEgVQtpadPBYWU4qqbj9ICsQdaaQRH5IgF/254fXQRYK6Wdr5DFZ1WVIMVil1pM x0jO8j0YdHqABsFeVfz7cdoKMH9ZrqHUKOtZBrRPLJCPJJYpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKMnaOVcm27bsyunS81wOXK3S30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDAzMGQ1MmEtNTVkYS0z ZTY3LWFmZDQtNGZkNWYzYmEwODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKAD3jEjLQEzjikhvJ6fB/jJFAeQS4JCBPKhB4pWED1Pt26uWPPjZ8V +l4610yfLwYSHU0fHkASlOmxdXxyoWSQts4cbmV/hafYQ7ktIIkfauiQvV50M8KU 3zl+bA3B1f8IWMKZBcQBjKZsmtdD8hkDu7NNcY7eOqdL7OobVnOOMvJTEcVkQZI8 vqGSRLQezkcH93jrjgN97XmTyt6GhItBCSxr7cQoW/iVYATu08cy2RWTx3gQ7ah7 oM710nAVv9m3anLy48YS6J3e9ujzYbzsYMsvF6yCEjoAQnJxwdrfRe0qMUk8l6XB ocsnis8szUAIZfFocbAj1T8ydIAYX+4= -----END CERTIFICATE-----Generated at Sun Apr 6 19:10:40 2025 by rpki-client