$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/90b24d23-f2f9-31e8-bd2c-5665c2883273.roa File: 90b24d23-f2f9-31e8-bd2c-5665c2883273.roa (raw, json) Hash identifier: eDmt+3FQ/IxVRMknehGzCM+Dv+3XDbvK4LlHI2kq2Tw= Subject key identifier: BC:DA:46:51:37:21:30:D1:D8:77:C6:47:C0:E6:A0:B2:D4:0C:61:35 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3F9919BA6E814DBE62640 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/90b24d23-f2f9-31e8-bd2c-5665c2883273.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 74.121.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f9:91:9b:a6:e8:14:db:e6:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=3fd0c1ec-0733-4990-a350-08b6e0545f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4f:7d:46:05:37:63:ae:9b:18:81:9f:69:3f: 21:15:a4:e3:e6:a4:60:45:af:03:76:2a:d4:52:5b: 2d:7c:35:7a:91:70:f7:95:db:9f:9e:11:31:1b:55: 4e:68:f1:75:69:bd:cf:2a:c0:fd:8c:7d:09:6a:8e: 79:86:8c:55:f6:cc:46:1b:f9:dc:70:07:29:8b:f5: 87:7e:ce:20:5c:49:eb:ae:86:3c:40:1f:01:81:f8: 43:53:3d:05:07:7e:03:59:24:fd:a6:9e:97:a6:49: 20:2f:8b:13:c9:be:24:03:15:eb:0d:a8:fc:d5:a2: 41:a1:bc:0e:b2:a5:25:be:1f:b3:c8:89:66:5c:1b: 18:0f:30:1e:3f:bf:77:18:fb:6c:47:df:ad:cb:b0: 76:e6:30:1b:30:29:fc:99:db:49:b0:3f:06:91:77: b0:90:64:22:00:82:bc:ed:f1:55:47:b8:66:09:e7: 84:5a:60:8d:ba:20:bc:da:78:0e:4d:dd:ee:c9:ae: f1:26:95:10:d0:3f:95:5b:e7:7f:72:1a:47:68:2b: f7:d5:05:14:e2:cb:00:d7:4a:d3:d8:9c:4e:87:1e: 74:3a:df:00:3f:c8:29:92:96:f3:60:4a:02:8b:76: b1:0f:1a:35:0b:56:c6:19:41:ed:f2:57:97:bb:45: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DA:46:51:37:21:30:D1:D8:77:C6:47:C0:E6:A0:B2:D4:0C:61:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/90b24d23-f2f9-31e8-bd2c-5665c2883273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 74.121.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:30:56:53:a6:5f:e7:a8:83:dc:eb:b5:8a:a8:16:30:75:1b: d9:de:34:30:1b:d5:03:03:77:64:ae:f4:02:8d:12:dd:b2:b1: 33:84:1d:96:e0:76:b5:cd:69:49:8e:66:75:eb:11:45:0e:94: f0:cc:df:b6:d8:55:09:48:b9:3e:2d:1a:59:12:fe:2a:fe:29: 8e:be:43:67:c8:39:44:d7:7e:2f:e4:af:cb:a2:c7:a6:8c:7e: da:fb:c4:59:c4:af:46:02:52:db:20:73:fc:6d:7e:2b:43:07: 35:95:88:2c:e2:26:b2:18:62:4a:2c:33:d0:b9:53:52:f0:e1: 2d:e4:36:c4:59:2f:3e:99:fc:20:85:65:99:11:0d:70:31:27: e9:95:d7:9a:3b:f9:01:6c:3c:f9:a1:e0:fd:45:d8:96:ee:fd: 38:ec:da:94:95:c6:9f:49:39:fd:16:f7:e4:de:6f:55:46:aa: ba:5e:53:24:5a:a1:70:bc:b4:e0:7b:ef:bf:91:c3:e0:98:b9: 74:88:58:f9:f0:ac:8e:5c:59:7a:fa:17:37:d9:de:5a:8b:a6: 2f:2a:62:75:6c:d7:2c:21:cd:be:69:84:97:e1:9b:47:d5:32: a9:ee:15:b6:ea:2c:66:6d:25:a2:a0:1f:ea:6c:de:06:21:75: 5a:24:d4:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/mRm6boFNvmJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk M2ZkMGMxZWMtMDczMy00OTkwLWEzNTAtMDhiNmUwNTQ1ZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj099RgU3Y66bGIGfaT8hFaTj5qRgRa8DdirU UlstfDV6kXD3ldufnhExG1VOaPF1ab3PKsD9jH0Jao55hoxV9sxGG/nccAcpi/WH fs4gXEnrroY8QB8BgfhDUz0FB34DWST9pp6XpkkgL4sTyb4kAxXrDaj81aJBobwO sqUlvh+zyIlmXBsYDzAeP793GPtsR9+ty7B25jAbMCn8mdtJsD8GkXewkGQiAIK8 7fFVR7hmCeeEWmCNuiC82ngOTd3uya7xJpUQ0D+VW+d/chpHaCv31QUU4ssA10rT 2JxOhx50Ot8AP8gpkpbzYEoCi3axDxo1C1bGGUHt8leXu0U9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzaRlE3ITDR2HfGR8DmoLLUDGE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOTBiMjRkMjMtZjJmOS0z MWU4LWJkMmMtNTY2NWMyODgzMjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnkzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQwVlOmX+eog9zrtYqoFjB1G9neNDAb1QMDd2Su9AKNEt2ysTOEHZbg drXNaUmOZnXrEUUOlPDM37bYVQlIuT4tGlkS/ir+KY6+Q2fIOUTXfi/kr8uix6aM ftr7xFnEr0YCUtsgc/xtfitDBzWViCziJrIYYkosM9C5U1Lw4S3kNsRZLz6Z/CCF ZZkRDXAxJ+mV15o7+QFsPPmh4P1F2Jbu/Tjs2pSVxp9JOf0W9+Teb1VGqrpeUyRa oXC8tOB777+Rw+CYuXSIWPnwrI5cWXr6FzfZ3lqLpi8qYnVs1ywhzb5phJfhm0fV MqnuFbbqLGZtJaKgH+ps3gYhdVok1JQ= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:24 2025 by rpki-client