$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e2e7cb9-a9ad-36b4-a31c-bbc25597e302.roa File: 9e2e7cb9-a9ad-36b4-a31c-bbc25597e302.roa (raw, json) Hash identifier: S0CCn/wz1rkpZ2nTJ7fIGwEn/yHsTl8cNA2iF/0ktTQ= Subject key identifier: E1:37:66:94:34:D5:7B:8F:75:B1:C0:90:45:1B:72:36:26:BC:1B:1F Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A99647A0DBD56F3FFE325800 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e2e7cb9-a9ad-36b4-a31c-bbc25597e302.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397225 IP address blocks: 204.74.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:47:a0:db:d5:6f:3f:fe:32:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=4e3ea989-1d8f-49d9-baae-498c23c76cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f2:ca:2d:11:3c:5a:2c:80:00:8e:49:b4:b2: ed:71:49:b2:2d:be:93:a0:85:25:13:9b:20:12:c6: 35:03:ef:09:0d:51:50:d5:33:2c:44:5e:ad:80:af: 16:5a:21:cd:96:08:d4:5a:4a:6d:94:4f:68:c5:91: 02:ed:69:eb:4c:43:84:10:64:46:51:c7:6d:96:32: a6:22:54:f5:f7:a9:93:40:a6:14:b9:2e:f9:d1:38: db:14:90:3d:d8:db:f8:46:51:c3:58:72:ee:88:f0: c6:83:21:d7:b4:3e:a3:75:2e:e5:2a:0d:52:9d:19: e8:72:4c:05:f4:aa:0d:97:c3:84:7e:65:df:5a:ea: 79:50:88:fc:69:40:5e:c0:43:60:8a:49:dd:1b:61: 7c:68:b3:08:f9:13:c8:76:41:e4:f1:14:bd:da:4c: c5:db:9c:b5:95:6e:8a:ba:24:ed:b5:7f:d6:7e:5f: bb:11:45:33:12:0b:8c:29:0d:7e:43:47:d8:ca:92: 0c:f6:23:b3:11:01:a3:40:da:01:fb:b4:c8:00:ea: 03:b9:94:19:5e:98:11:c8:35:4f:81:f3:0d:cc:d6: 4e:1b:79:07:a4:fc:ba:5f:ec:7b:8b:4b:09:a9:8d: 79:4d:7d:b3:5f:48:4b:fb:e6:27:fb:53:92:9b:c9: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:37:66:94:34:D5:7B:8F:75:B1:C0:90:45:1B:72:36:26:BC:1B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e2e7cb9-a9ad-36b4-a31c-bbc25597e302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c1:f7:27:16:60:93:01:64:a6:98:8a:09:c3:78:b2:e0:5c: 65:95:b5:50:31:2d:46:44:dd:c8:5a:8a:20:be:37:22:f7:7f: 84:da:a5:7d:01:ae:1e:87:f3:47:12:f6:47:ab:78:0d:48:f1: 56:05:93:1c:da:f7:96:66:9b:42:3c:c2:5f:37:a3:28:70:a0: bb:73:fa:c1:92:85:84:a7:56:e0:09:1f:80:9d:fe:79:ea:14: ac:16:87:ae:b6:27:de:63:b3:33:b1:94:eb:bb:66:38:01:04: dc:eb:41:2f:a4:60:3f:fc:1b:c4:bf:99:50:82:36:08:93:72: b4:88:4a:0f:d4:d4:bc:27:15:ac:74:56:b9:40:5c:5c:3f:b1: 62:73:c9:6b:f6:c0:ae:cb:b3:b2:73:39:79:27:95:e6:21:11: ab:06:a6:9f:0b:b8:9e:85:d2:61:a0:3d:3b:c8:cf:01:df:cd: 43:a4:fe:a7:fa:08:e4:51:3a:c0:6b:28:1c:f0:88:e6:35:63: 04:69:ba:14:c3:b0:c7:23:56:7b:0b:7b:09:59:56:71:c8:69: a9:11:e4:4e:d4:b0:d0:61:66:c4:e0:9f:88:9c:f1:b1:5d:a8: 74:2c:6e:ae:a3:2a:59:f1:92:fe:f5:a7:57:be:3a:69:ef:2d: 50:ad:cb:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkeg29VvP/4yWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGUzZWE5ODktMWQ4Zi00OWQ5LWJhYWUtNDk4YzIzYzc2Y2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivLKLRE8WiyAAI5JtLLtcUmyLb6ToIUlE5sg EsY1A+8JDVFQ1TMsRF6tgK8WWiHNlgjUWkptlE9oxZEC7WnrTEOEEGRGUcdtljKm IlT196mTQKYUuS750TjbFJA92Nv4RlHDWHLuiPDGgyHXtD6jdS7lKg1SnRnockwF 9KoNl8OEfmXfWup5UIj8aUBewENgikndG2F8aLMI+RPIdkHk8RS92kzF25y1lW6K uiTttX/Wfl+7EUUzEguMKQ1+Q0fYypIM9iOzEQGjQNoB+7TIAOoDuZQZXpgRyDVP gfMNzNZOG3kHpPy6X+x7i0sJqY15TX2zX0hL++Yn+1OSm8n6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE3ZpQ01XuPdbHAkEUbcjYmvBsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWUyZTdjYjktYTlhZC0z NmI0LWEzMWMtYmJjMjU1OTdlMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvB9ycWYJMBZKaYignDeLLgXGWVtVAxLUZE3chaiiC+NyL3f4TapX0B rh6H80cS9kereA1I8VYFkxza95Zmm0I8wl83oyhwoLtz+sGShYSnVuAJH4Cd/nnq FKwWh662J95jszOxlOu7ZjgBBNzrQS+kYD/8G8S/mVCCNgiTcrSISg/U1LwnFax0 VrlAXFw/sWJzyWv2wK7Ls7JzOXknleYhEasGpp8LuJ6F0mGgPTvIzwHfzUOk/qf6 CORROsBrKBzwiOY1YwRpuhTDsMcjVnsLewlZVnHIaakR5E7UsNBhZsTgn4ic8bFd qHQsbq6jKlnxkv71p1e+OmnvLVCty6Y= -----END CERTIFICATE-----Generated at Sun Apr 6 07:17:36 2025 by rpki-client