$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f4e4fd5-348a-3ef3-b5ee-c7cafb127952.roa File: 6f4e4fd5-348a-3ef3-b5ee-c7cafb127952.roa (raw, json) Hash identifier: emoBGYoHYGUOfHbm7Pblgq+DKhu0zI+Tkn8tUdwC14g= Subject key identifier: C3:54:84:57:24:C5:FD:C8:31:B9:CA:AA:EA:3C:54:7E:D0:6A:B8:27 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858494039540EE15CA741D3305D40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f4e4fd5-348a-3ef3-b5ee-c7cafb127952.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 399156 IP address blocks: 204.74.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:54:0e:e1:5c:a7:41:d3:30:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=cfa82f85-63a4-4155-9a1e-6616d704eaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2e:dd:a6:e6:a8:1f:d8:e5:fc:30:3b:33:98: 8a:70:aa:48:77:6a:a6:ca:ae:c9:80:dc:c6:0c:40: d0:49:80:e4:54:a9:00:f3:e2:5c:7b:20:f6:ed:36: ef:a4:b4:6d:14:79:00:e3:42:21:06:60:06:9d:66: b0:87:26:a1:49:91:1b:19:55:a2:7e:82:9b:55:97: f4:24:f7:2d:aa:96:68:79:5e:91:e0:25:75:91:16: 1c:a4:cd:cb:14:b5:dd:9e:c1:76:aa:bf:3a:5b:d2: bb:10:e9:14:44:cb:28:ee:71:82:48:03:06:7e:e3: 94:b5:5d:30:b0:02:28:7c:6f:2a:1e:9a:1e:d0:f8: 47:6d:5b:78:a2:ad:e6:50:52:a2:e2:10:42:c2:05: 1c:a9:02:b1:b4:c9:fe:e4:c6:57:00:c6:81:01:1e: 11:03:e0:4f:bc:25:61:ee:52:55:4a:6e:8a:12:15: 8b:5e:69:df:01:6f:24:14:2d:1f:0c:24:72:28:df: 78:84:60:96:de:55:3f:f6:7f:e5:35:38:42:6b:f5: 1d:5a:f9:14:b7:92:0c:9c:56:fe:eb:e2:6c:2a:40: 84:3c:ad:56:79:83:3d:95:9a:cb:1b:81:59:f0:f5: ee:0c:d8:16:21:d3:6a:bc:e0:cd:27:02:af:d9:9f: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:54:84:57:24:C5:FD:C8:31:B9:CA:AA:EA:3C:54:7E:D0:6A:B8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f4e4fd5-348a-3ef3-b5ee-c7cafb127952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0c:3d:b7:7b:ef:53:71:9b:75:26:51:80:d0:7f:97:0b:cf: dd:36:ae:40:e2:d9:e4:48:da:33:a9:a6:1e:a1:b0:3e:b4:d6: da:bc:25:83:dd:0d:62:25:ce:8c:ac:b8:24:23:85:2a:25:6b: e8:9c:cd:fa:04:3a:6e:56:af:fe:d7:f1:21:88:5b:45:d1:45: 26:fb:46:9d:48:34:90:83:73:05:0d:94:8d:98:dc:1a:3d:18: 8f:f6:af:a5:c6:67:45:37:f8:5e:cd:2b:1a:a1:82:18:a7:44: 2b:08:38:25:c1:9c:80:19:0c:16:66:bc:d7:a1:a3:46:42:a0: 84:4e:17:06:e6:25:fc:1c:63:90:ab:79:19:14:d4:43:d3:0c: 86:a5:99:bb:f2:19:85:8f:9c:e8:e9:6d:f2:ba:cd:c3:15:96: 13:5e:c5:dc:d8:7e:fb:33:08:c9:a9:1d:96:d2:a2:8b:29:9b: 03:ed:ce:02:8b:42:89:a4:f6:10:c9:e6:43:eb:ee:e5:43:3c: 32:be:61:58:98:5d:e5:9a:9b:2c:bc:94:b4:fd:a2:be:97:1b: 21:22:fc:3d:10:e0:4e:e8:a5:5a:4b:d3:06:06:4d:ee:35:91: 9f:25:c6:5e:13:10:39:86:af:1b:5e:dd:bd:8a:44:21:65:e9: f7:28:0a:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOVQO4VynQdMwXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk Y2ZhODJmODUtNjNhNC00MTU1LTlhMWUtNjYxNmQ3MDRlYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS7dpuaoH9jl/DA7M5iKcKpId2qmyq7JgNzG DEDQSYDkVKkA8+JceyD27TbvpLRtFHkA40IhBmAGnWawhyahSZEbGVWifoKbVZf0 JPctqpZoeV6R4CV1kRYcpM3LFLXdnsF2qr86W9K7EOkURMso7nGCSAMGfuOUtV0w sAIofG8qHpoe0PhHbVt4oq3mUFKi4hBCwgUcqQKxtMn+5MZXAMaBAR4RA+BPvCVh 7lJVSm6KEhWLXmnfAW8kFC0fDCRyKN94hGCW3lU/9n/lNThCa/UdWvkUt5IMnFb+ 6+JsKkCEPK1WeYM9lZrLG4FZ8PXuDNgWIdNqvODNJwKv2Z9DXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNUhFckxf3IMbnKquo8VH7QargnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNmY0ZTRmZDUtMzQ4YS0z ZWYzLWI1ZWUtYzdjYWZiMTI3OTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcMPbd771Nxm3UmUYDQf5cLz902rkDi2eRI2jOpph6hsD601tq8JYPd DWIlzoysuCQjhSola+iczfoEOm5Wr/7X8SGIW0XRRSb7Rp1INJCDcwUNlI2Y3Bo9 GI/2r6XGZ0U3+F7NKxqhghinRCsIOCXBnIAZDBZmvNeho0ZCoIROFwbmJfwcY5Cr eRkU1EPTDIalmbvyGYWPnOjpbfK6zcMVlhNexdzYfvszCMmpHZbSoospmwPtzgKL Qomk9hDJ5kPr7uVDPDK+YViYXeWamyy8lLT9or6XGyEi/D0Q4E7opVpL0wYGTe41 kZ8lxl4TEDmGrxte3b2KRCFl6fcoCgM= -----END CERTIFICATE-----Generated at Mon Apr 7 13:07:03 2025 by rpki-client