$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa File: 8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa (raw, json) Hash identifier: /QXs52NQRrO1rPKMdeeR8I7QwgVf+uy5GdMx8WlDnCc= Subject key identifier: A9:F2:80:69:D4:22:56:D1:E6:3A:E7:33:B0:A8:86:02:60:12:70:18 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3FF64E61CB48764137E14 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 74.121.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:ff:64:e6:1c:b4:87:64:13:7e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=9de29968-313f-4b4d-993b-a38f05683b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:61:6d:cd:57:0c:48:59:2c:62:bd:4b:da: f7:e4:b5:22:d8:3f:9e:f7:d9:38:e6:21:2d:fc:ec: 63:b3:a5:81:17:5a:f6:ac:4e:6b:71:22:33:b9:ad: 24:5f:31:1a:0a:74:24:29:13:e4:8c:b7:a4:30:01: 1d:d3:fe:f5:e4:54:da:ea:6c:04:c7:92:8c:82:c5: 8c:81:86:f1:33:8a:1f:e1:4d:60:f7:ea:fd:f9:4b: dc:b6:05:d8:26:bf:37:57:e6:ce:55:12:84:0b:55: 26:a3:30:5a:28:9f:63:94:ac:fb:61:f1:36:6d:25: 4e:6e:20:aa:e8:e2:6c:c8:59:03:e2:19:c9:d4:3e: 07:f8:a5:21:41:78:0b:4e:59:30:b8:51:6d:af:1c: 57:92:e4:42:fc:eb:7e:01:56:91:9e:e6:5e:fb:65: aa:c0:72:db:21:22:8b:63:79:92:26:5c:8d:be:f9: 7b:d4:21:07:d7:fe:e7:27:69:0c:44:d2:9c:47:7d: 43:08:cf:bb:9a:ab:7b:4f:4a:02:bc:3f:75:6e:04: aa:f0:62:81:d3:3a:cc:66:fa:67:d7:5b:21:ca:39: 08:48:9f:5c:b2:1b:c4:53:f5:76:ff:9b:05:9c:b8: 30:b9:13:40:b1:c1:70:60:4c:d4:7b:5e:33:0f:17: 9d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:80:69:D4:22:56:D1:E6:3A:E7:33:B0:A8:86:02:60:12:70:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 74.121.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:46:89:aa:4c:29:d9:e9:97:bb:62:73:a1:1f:09:cf:64:af: d2:65:a0:a0:ff:53:a6:99:56:d7:1c:16:b4:32:92:36:dc:5e: ba:8b:9a:d3:c5:81:6d:8d:69:3a:32:ea:1e:2f:27:90:f7:4a: 1f:95:2c:7e:46:c2:1f:ee:f4:ae:aa:a4:bc:d3:8a:a6:b4:92: 31:9f:29:2b:12:65:61:5c:19:c4:1a:b6:f7:18:05:ad:e0:09: e4:77:eb:2a:24:72:da:d1:49:d2:90:9c:76:a6:7c:e5:7a:d7: 23:68:4f:8c:65:b3:5f:5c:c0:d6:44:a9:a6:65:3e:d6:9c:f2: b4:5c:ff:7a:6c:ab:ed:fe:17:b5:e6:22:f9:82:06:43:c9:c7: ef:64:8e:5f:53:a0:8c:4a:2b:e3:a8:77:8f:27:52:9a:03:30: 79:40:e3:57:e8:8a:58:55:95:d4:42:2d:b6:b4:85:bd:90:e0: 80:ac:81:ed:4c:b9:37:cc:3f:a5:58:3d:af:98:e2:2a:48:61: c7:30:70:e7:79:ab:2e:b4:a5:cf:48:bb:f9:71:bc:f7:b3:d9: e5:56:b0:8f:41:d6:9e:82:0f:83:19:b2:30:62:42:fb:7b:65: df:4a:cf:15:2d:d6:07:1a:06:3d:16:82:2d:06:d4:27:7e:f3: a0:24:f7:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/9k5hy0h2QTfhQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OWRlMjk5NjgtMzEzZi00YjRkLTk5M2ItYTM4ZjA1NjgzYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eFhbc1XDEhZLGK9S9r35LUi2D+e99k45iEt /Oxjs6WBF1r2rE5rcSIzua0kXzEaCnQkKRPkjLekMAEd0/715FTa6mwEx5KMgsWM gYbxM4of4U1g9+r9+UvctgXYJr83V+bOVRKEC1UmozBaKJ9jlKz7YfE2bSVObiCq 6OJsyFkD4hnJ1D4H+KUhQXgLTlkwuFFtrxxXkuRC/Ot+AVaRnuZe+2WqwHLbISKL Y3mSJlyNvvl71CEH1/7nJ2kMRNKcR31DCM+7mqt7T0oCvD91bgSq8GKB0zrMZvpn 11shyjkISJ9cshvEU/V2/5sFnLgwuRNAscFwYEzUe14zDxed7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnygGnUIlbR5jrnM7CohgJgEnAYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOGM5M2M5YzMtZDhiYy0z NmFjLThhNzQtNmRmOGU2OWY2OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnk1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFGiapMKdnpl7tic6EfCc9kr9JloKD/U6aZVtccFrQykjbcXrqLmtPF gW2NaToy6h4vJ5D3Sh+VLH5Gwh/u9K6qpLzTiqa0kjGfKSsSZWFcGcQatvcYBa3g CeR36yokctrRSdKQnHamfOV61yNoT4xls19cwNZEqaZlPtac8rRc/3psq+3+F7Xm IvmCBkPJx+9kjl9ToIxKK+Ood48nUpoDMHlA41foilhVldRCLba0hb2Q4ICsge1M uTfMP6VYPa+Y4ipIYccwcOd5qy60pc9Iu/lxvPez2eVWsI9B1p6CD4MZsjBiQvt7 Zd9KzxUt1gcaBj0Wgi0G1Cd+86Ak90Y= -----END CERTIFICATE-----Generated at Sat Apr 5 11:02:23 2025 by rpki-client