$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67c7b419-f6ed-3adb-96a6-49a7f9439c7a.roa File: 67c7b419-f6ed-3adb-96a6-49a7f9439c7a.roa (raw, json) Hash identifier: QqAdxomvjSh8H1emtROlImC3ueaqc8Duh8YbBLTkJSI= Subject key identifier: B0:CF:9E:54:80:90:71:B9:1F:44:64:3E:D6:D3:33:52:67:64:EA:F3 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20F1A9F5A2F70692563940 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67c7b419-f6ed-3adb-96a6-49a7f9439c7a.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397217 IP address blocks: 204.74.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:f1:a9:f5:a2:f7:06:92:56:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=d2535a6e-f32d-430c-8395-0674a8d4df28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:73:2a:36:bf:83:da:63:9b:e7:1a:c4:fb: 54:a6:bd:14:6b:14:c2:25:4b:1b:60:f2:82:57:e1: 18:24:64:19:80:6a:c3:9a:c8:44:44:31:5f:78:cd: de:3d:78:c4:e2:f0:a9:c6:22:34:05:17:1f:fc:05: ee:7b:2f:9c:b8:ea:1d:2f:97:5a:9d:28:30:bd:76: aa:9f:8c:15:ab:5f:fb:0b:5f:a7:86:3e:9b:fd:34: 65:2e:5c:79:d0:67:dc:c8:8e:63:13:a4:bc:9f:52: 12:2f:53:d9:00:96:64:7b:9f:63:fe:91:f3:18:c9: 24:17:1c:d5:70:cb:3f:26:59:fe:c2:6a:03:55:5b: 62:54:90:bc:cf:f7:0d:a2:15:6b:72:32:bd:65:28: 1e:71:90:73:ad:aa:0a:b4:62:d9:37:23:5c:a4:3c: ea:df:40:f2:c2:9b:49:1b:01:15:96:36:b8:46:e3: b2:0f:ac:b9:c1:46:21:0e:eb:58:d7:b1:48:b6:f2: ef:11:d9:a6:c5:de:03:2b:28:b6:ae:79:a4:e4:a9: 97:c5:70:15:50:81:6d:e3:5d:bb:48:f7:f2:51:b2: 1f:2f:c4:bf:76:20:a8:2d:f7:da:af:fb:bb:82:97: e5:65:ae:4e:26:32:bb:a1:34:fd:d1:97:c5:a2:8e: 7b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CF:9E:54:80:90:71:B9:1F:44:64:3E:D6:D3:33:52:67:64:EA:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/67c7b419-f6ed-3adb-96a6-49a7f9439c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:27:85:60:76:34:90:4c:55:53:2b:30:98:b0:b3:db:0f:10: 8a:37:38:2c:ef:d4:14:50:62:bc:7a:9d:d7:5e:77:b0:b2:8c: 37:8f:f9:0a:52:5b:03:57:45:e1:02:7b:74:4f:0a:65:99:67: 6e:a3:a0:1c:55:ce:f7:8e:59:75:80:a7:75:48:4e:9f:00:e3: e7:19:b2:91:5d:b0:d8:5b:0a:ed:06:4a:e9:ba:37:09:21:5a: 68:4b:12:42:11:98:1c:82:46:cc:c5:b7:76:1a:da:7a:e6:8f: 6e:94:d1:34:61:00:a1:62:84:82:48:46:0f:7a:32:b8:c2:48: c5:8c:5b:09:32:a0:21:26:fd:14:94:c0:a3:4c:9b:a6:a9:76: ee:08:55:6c:da:3f:7d:f4:b9:bf:f3:9a:a7:5e:90:d9:eb:39: 03:f2:84:7c:20:78:37:c1:07:8a:ea:40:df:6a:33:ba:ff:f8: fe:ab:ad:2e:c0:e4:2a:53:30:ef:64:a1:d8:10:9e:05:04:8c: 01:e8:29:c4:c1:80:d5:74:20:20:03:84:5e:cc:01:95:f7:20: c0:69:1c:21:5c:d7:39:38:b7:e1:eb:a3:4c:41:db:4d:6b:68: 21:ca:de:ad:13:9e:41:86:46:63:e8:a6:2e:af:99:77:9b:84: a0:e6:b1:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IPGp9aL3BpJWOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk ZDI1MzVhNmUtZjMyZC00MzBjLTgzOTUtMDY3NGE4ZDRkZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OtzKja/g9pjm+caxPtUpr0UaxTCJUsbYPKC V+EYJGQZgGrDmshERDFfeM3ePXjE4vCpxiI0BRcf/AXuey+cuOodL5danSgwvXaq n4wVq1/7C1+nhj6b/TRlLlx50GfcyI5jE6S8n1ISL1PZAJZke59j/pHzGMkkFxzV cMs/Jln+wmoDVVtiVJC8z/cNohVrcjK9ZSgecZBzraoKtGLZNyNcpDzq30DywptJ GwEVlja4RuOyD6y5wUYhDutY17FItvLvEdmmxd4DKyi2rnmk5KmXxXAVUIFt4127 SPfyUbIfL8S/diCoLffar/u7gpflZa5OJjK7oTT90ZfFoo572wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDPnlSAkHG5H0RkPtbTM1JnZOrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjdjN2I0MTktZjZlZC0z YWRiLTk2YTYtNDlhN2Y5NDM5YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEnhWB2NJBMVVMrMJiws9sPEIo3OCzv1BRQYrx6ndded7CyjDeP+QpS WwNXReECe3RPCmWZZ26joBxVzveOWXWAp3VITp8A4+cZspFdsNhbCu0GSum6Nwkh WmhLEkIRmByCRszFt3Ya2nrmj26U0TRhAKFihIJIRg96MrjCSMWMWwkyoCEm/RSU wKNMm6apdu4IVWzaP330ub/zmqdekNnrOQPyhHwgeDfBB4rqQN9qM7r/+P6rrS7A 5CpTMO9kodgQngUEjAHoKcTBgNV0ICADhF7MAZX3IMBpHCFc1zk4t+Hro0xB201r aCHK3q0TnkGGRmPopi6vmXebhKDmsTQ= -----END CERTIFICATE-----Generated at Sun Apr 6 19:07:48 2025 by rpki-client