$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/995012a3-c676-30f0-97ac-6854a908a622.roa File: 995012a3-c676-30f0-97ac-6854a908a622.roa (raw, json) Hash identifier: sRdfP2SaVve10jvScBpsILFYLL2GJ84fQLwKAyn+Elw= Subject key identifier: 16:16:B4:D5:26:F2:0B:F0:D2:DD:29:69:D1:42:FA:51:5F:44:F6:B4 Certificate issuer: /CN=6ad8d02c-4049-4deb-a840-4229a7010c02 Certificate serial: 010D0C9F43285849446939596C6739D6D695ECC8 Authority key identifier: 74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/995012a3-c676-30f0-97ac-6854a908a622.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 395544 IP address blocks: 74.85.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:39:59:6c:67:39:d6:d6:95:ec:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad8d02c-4049-4deb-a840-4229a7010c02 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=5bd6d232-e823-463e-9b77-af2b54df3d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:be:fe:bb:21:bb:80:3a:f4:e5:0f:6a:2d: 44:96:13:32:9a:39:57:44:71:a3:e6:d1:62:4c:d5: 62:c9:2e:9a:1e:c3:b8:df:ae:6a:25:aa:49:62:74: f4:ed:43:bc:f6:a4:6b:d0:84:8c:71:32:49:e1:e8: c4:a5:03:60:d6:9c:24:b6:5e:03:ab:9e:c9:6e:f6: 94:6e:5e:28:8f:f5:f8:76:d9:9a:80:4c:0c:f0:8d: 76:d7:3d:d8:85:65:a4:7f:af:d1:23:0f:97:91:4e: 99:fd:f0:b2:37:a7:19:d2:c0:bd:13:33:d1:57:22: dc:bf:ce:07:6a:9c:f5:50:89:5e:fe:0a:42:a7:e1: 2a:59:16:f0:aa:02:82:2e:d4:29:2b:37:e8:99:a5: e9:ad:1d:c2:b1:fc:98:8b:6c:0b:75:86:dd:a1:d1: 8a:eb:90:c5:33:d8:e3:72:84:bd:e3:4a:b2:ad:01: f4:c2:7b:e8:d6:e2:20:54:6e:ab:bc:36:23:eb:a3: 6c:fa:2f:e1:31:58:bd:d7:47:44:ee:2f:58:48:15: 5c:92:97:03:45:31:3c:be:28:7b:ee:24:16:6f:aa: d2:98:a5:2a:c3:2b:d8:b5:57:bf:c1:fd:8a:c3:76: b3:51:17:d5:8d:ae:00:3f:6d:14:d3:42:fa:5c:78: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:16:B4:D5:26:F2:0B:F0:D2:DD:29:69:D1:42:FA:51:5F:44:F6:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/995012a3-c676-30f0-97ac-6854a908a622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02/6ad8d02c-4049-4deb-a840-4229a7010c02.crl X509v3 Authority Key Identifier: keyid:74:FA:33:B5:F8:35:EA:5B:08:76:10:04:99:61:B8:67:68:6D:51:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6ad8d02c-4049-4deb-a840-4229a7010c02.cer sbgp-ipAddrBlock: critical IPv4: 74.85.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:d7:6b:f3:a8:ce:25:14:3d:77:50:75:52:ec:8b:05:28:d4: 1f:e3:5b:4e:c5:ad:7e:38:b8:ef:80:e3:74:c1:4f:40:fa:d7: 05:56:26:01:77:3f:69:80:7b:c1:2e:4c:10:16:f3:98:85:8d: 62:f4:71:2f:58:e1:fa:d4:7e:18:33:c2:f2:a0:17:56:c6:c1: c5:d3:72:ba:21:11:cb:c1:70:6c:b8:2d:f7:4e:59:6a:35:d3: 03:6b:6a:3e:97:7a:3e:06:9f:0a:20:1e:d4:86:92:69:34:c8: dd:2f:be:d8:02:56:f9:ce:43:b0:3f:1c:49:d0:75:93:0a:df: fe:33:6d:ae:01:81:6a:ed:76:ee:f6:00:4d:0e:d6:13:36:fb: b0:94:a9:76:45:53:a2:f8:2d:84:c2:9d:68:64:51:4a:3d:74: 19:ec:b5:9b:2b:7c:9d:01:0f:37:b8:24:52:25:61:78:ad:0f: 88:6c:f9:40:2c:c7:0f:55:d1:90:70:19:31:40:12:66:76:87: 83:09:8f:eb:b4:eb:a7:aa:71:d2:f8:f1:1d:64:56:13:25:d3: 32:b0:4c:14:ca:5a:86:15:00:77:5c:5f:38:80:03:08:ec:19: a2:86:87:37:06:49:99:cc:da:7d:f3:19:3d:ef:1d:42:82:ac: 2d:e1:f1:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTlZbGc51taV7MgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFkOGQwMmMtNDA0OS00ZGViLWE4NDAtNDIyOWE3MDEw YzAyMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NWJkNmQyMzItZTgyMy00NjNlLTliNzctYWYyYjU0ZGYzZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhS+/rshu4A69OUPai1ElhMymjlXRHGj5tFi TNViyS6aHsO4365qJapJYnT07UO89qRr0ISMcTJJ4ejEpQNg1pwktl4Dq57JbvaU bl4oj/X4dtmagEwM8I121z3YhWWkf6/RIw+XkU6Z/fCyN6cZ0sC9EzPRVyLcv84H apz1UIle/gpCp+EqWRbwqgKCLtQpKzfomaXprR3CsfyYi2wLdYbdodGK65DFM9jj coS940qyrQH0wnvo1uIgVG6rvDYj66Ns+i/hMVi910dE7i9YSBVckpcDRTE8vih7 7iQWb6rSmKUqwyvYtVe/wf2Kw3azURfVja4AP20U00L6XHirSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYWtNUm8gvw0t0padFC+lFfRPa0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YWQ4 ZDAyYy00MDQ5LTRkZWItYTg0MC00MjI5YTcwMTBjMDIvOTk1MDEyYTMtYzY3Ni0z MGYwLTk3YWMtNjg1NGE5MDhhNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmFkOGQwMmMtNDA0OS00ZGViLWE4 NDAtNDIyOWE3MDEwYzAyLzZhZDhkMDJjLTQwNDktNGRlYi1hODQwLTQyMjlhNzAx MGMwMi5jcmwwHwYDVR0jBBgwFoAUdPoztfg16lsIdhAEmWG4Z2htUdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YWQ4ZDAyYy00MDQ5LTRkZWItYTg0MC00MjI5 YTcwMTBjMDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvXa/OoziUUPXdQdVLsiwUo1B/jW07FrX44uO+A43TBT0D61wVWJgF3 P2mAe8EuTBAW85iFjWL0cS9Y4frUfhgzwvKgF1bGwcXTcrohEcvBcGy4LfdOWWo1 0wNraj6Xej4GnwogHtSGkmk0yN0vvtgCVvnOQ7A/HEnQdZMK3/4zba4BgWrtdu72 AE0O1hM2+7CUqXZFU6L4LYTCnWhkUUo9dBnstZsrfJ0BDze4JFIlYXitD4hs+UAs xw9V0ZBwGTFAEmZ2h4MJj+u066eqcdL48R1kVhMl0zKwTBTKWoYVAHdcXziAAwjs GaKGhzcGSZnM2n3zGT3vHUKCrC3h8fo= -----END CERTIFICATE-----Generated at Sat Apr 12 15:36:36 2025 by rpki-client