$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a8c179e6-120f-33b1-ab10-2558c39ad7aa.roa File: a8c179e6-120f-33b1-ab10-2558c39ad7aa.roa (raw, json) Hash identifier: X0KNu+OAe3LAZx14LZD34U7Wr9e1BV+HV7J0i9ajLrk= Subject key identifier: 57:4A:8C:30:EE:81:DD:F2:9A:B9:37:0F:CF:D7:EB:79:AC:CD:9A:92 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584974E8D32A0A43DC7889024A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a8c179e6-120f-33b1-ab10-2558c39ad7aa.roa Signing time: Tue 08 Apr 2025 09:56:42 +0000 ROA not before: Tue 08 Apr 2025 09:56:42 +0000 ROA not after: Mon 07 Jul 2025 09:56:42 +0000 asID: 19905 IP address blocks: 74.84.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:74:e8:d3:2a:0a:43:dc:78:89:02:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 8 09:56:42 2025 GMT Not After : Jul 7 09:56:42 2025 GMT Subject: CN=d4d30093-9d59-448e-a993-8f4660f46374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:19:ce:cf:92:eb:c3:cc:8f:5d:6b:46:95:74: e0:51:6e:35:34:72:ed:b5:b8:10:6c:f8:0c:c6:49: 70:28:4c:0a:1f:85:d6:4a:ae:33:66:92:17:63:0b: 35:73:40:80:96:75:3a:b1:1c:aa:a5:08:72:1a:44: 64:da:b3:ff:5e:08:de:69:ee:af:7d:9f:af:76:d0: 10:45:42:7e:cf:57:60:fa:b5:71:24:ff:c5:3e:21: d5:d6:ba:cf:4d:67:2c:7b:0e:35:5a:fc:12:f3:f4: 0c:8a:94:01:37:c5:99:cf:d1:72:b5:ac:a0:4b:68: 57:4b:57:b7:3b:bb:f3:e9:90:03:80:79:10:5e:c1: 26:d1:45:a8:96:3d:fa:bb:60:1b:4c:12:41:f2:72: 10:15:b9:2d:9b:a0:b3:9a:9c:90:27:22:83:ed:ce: db:fc:ea:7d:0b:f8:f2:36:19:ba:f1:09:7d:9c:61: 27:04:3d:58:be:fd:a6:43:fb:83:37:46:ec:97:5b: 4a:cf:01:ea:73:f8:e0:6e:7f:38:51:de:b2:da:61: 3e:34:09:1b:07:45:b8:10:11:c6:71:a9:fe:75:10: 36:8a:b3:e8:54:48:37:8a:14:f8:60:4d:11:f1:bb: 1a:31:6e:ad:7b:ef:56:4e:0d:91:85:b4:fe:87:2d: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:8C:30:EE:81:DD:F2:9A:B9:37:0F:CF:D7:EB:79:AC:CD:9A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a8c179e6-120f-33b1-ab10-2558c39ad7aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a7:a1:6e:04:a6:2d:40:e9:e5:7f:14:a2:47:62:a4:cb:fa: a7:80:c2:38:21:87:6b:c5:76:dd:d2:76:a6:c2:8c:ad:c3:de: 19:d2:cb:19:a8:b6:e0:49:4d:46:c4:a2:44:ac:a4:b6:65:20: 4b:84:60:fe:0d:c6:b9:c2:fd:17:33:34:c3:2c:3b:e8:d6:9d: b5:0b:3a:c0:70:a2:b3:48:c6:09:7a:71:78:12:34:ed:f9:8c: 31:78:f2:35:5c:48:aa:38:0a:16:4d:1b:f2:0e:66:5f:99:0a: c5:af:06:b7:b2:0b:68:85:99:d2:2a:f1:73:f3:b0:e5:81:22: 68:ce:c6:31:80:1a:3f:50:2c:2d:57:79:e1:a3:56:90:93:0e: 7f:56:3e:62:04:db:d9:90:02:6e:be:8f:7c:09:49:cd:8d:3f: 5d:e3:96:01:af:dd:81:f6:57:9e:e0:1a:60:1d:0a:58:8e:41: 1b:2c:5c:75:79:5b:a6:1d:1d:45:de:70:1e:27:b2:18:0a:61: c8:b3:d2:43:8a:66:19:c4:1b:fd:3c:d2:71:42:b9:51:b1:27: 8a:23:2d:ee:bb:32:61:5b:64:3f:3a:eb:d8:77:7f:3a:1f:63: f7:46:d3:70:22:40:2e:ac:c7:7a:e2:be:d1:71:e4:9c:69:bd: d3:6f:ef:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl06NMqCkPceIkCSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDQwODA5NTY0MloXDTI1MDcwNzA5NTY0MlowLzEtMCsGA1UEAxMk ZDRkMzAwOTMtOWQ1OS00NDhlLWE5OTMtOGY0NjYwZjQ2Mzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBnOz5Lrw8yPXWtGlXTgUW41NHLttbgQbPgM xklwKEwKH4XWSq4zZpIXYws1c0CAlnU6sRyqpQhyGkRk2rP/Xgjeae6vfZ+vdtAQ RUJ+z1dg+rVxJP/FPiHV1rrPTWcsew41WvwS8/QMipQBN8WZz9FytaygS2hXS1e3 O7vz6ZADgHkQXsEm0UWolj36u2AbTBJB8nIQFbktm6CzmpyQJyKD7c7b/Op9C/jy Nhm68Ql9nGEnBD1Yvv2mQ/uDN0bsl1tKzwHqc/jgbn84Ud6y2mE+NAkbB0W4EBHG can+dRA2irPoVEg3ihT4YE0R8bsaMW6te+9WTg2RhbT+hy1UuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdKjDDugd3ymrk3D8/X63mszZqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYThjMTc5ZTYtMTIwZi0z M2IxLWFiMTAtMjU1OGMzOWFkN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCnoW4Epi1A6eV/FKJHYqTL+qeAwjghh2vFdt3SdqbCjK3D3hnSyxmo tuBJTUbEokSspLZlIEuEYP4NxrnC/RczNMMsO+jWnbULOsBworNIxgl6cXgSNO35 jDF48jVcSKo4ChZNG/IOZl+ZCsWvBreyC2iFmdIq8XPzsOWBImjOxjGAGj9QLC1X eeGjVpCTDn9WPmIE29mQAm6+j3wJSc2NP13jlgGv3YH2V57gGmAdCliOQRssXHV5 W6YdHUXecB4nshgKYciz0kOKZhnEG/080nFCuVGxJ4ojLe67MmFbZD8669h3fzof Y/dG03AiQC6sx3rivtFx5JxpvdNv79s= -----END CERTIFICATE-----Generated at Sun Apr 13 03:25:47 2025 by rpki-client