$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9c2bc2d-ab8c-3873-9cdf-d93a3a3efa3b.roa File: f9c2bc2d-ab8c-3873-9cdf-d93a3a3efa3b.roa (raw, json) Hash identifier: E6p76ofobRPWfGJ5aJP3FBQWl5d78elyZQH2xO5OtmA= Subject key identifier: 23:62:65:93:B8:BE:EB:E5:60:1F:E9:4B:B7:C3:A2:E0:BD:52:91:31 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285848F4AD908F5650184CDC84FEC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9c2bc2d-ab8c-3873-9cdf-d93a3a3efa3b.roa Signing time: Fri 21 Feb 2025 11:33:50 +0000 ROA not before: Fri 21 Feb 2025 11:33:50 +0000 ROA not after: Thu 22 May 2025 10:33:50 +0000 asID: 30036 IP address blocks: 74.84.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:ad:90:8f:56:50:18:4c:dc:84:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Feb 21 11:33:50 2025 GMT Not After : May 22 10:33:50 2025 GMT Subject: CN=d0ba0dac-6f58-41bb-99db-6c4b1bed0b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4b:75:03:2a:47:53:c7:fd:88:3f:a7:bc:10: e1:40:f5:86:46:02:13:3e:d8:38:03:18:de:98:78: 13:b1:79:7d:1d:dc:1c:f8:b8:b5:d4:31:da:62:fe: 08:62:6e:ce:29:f9:1e:c4:ce:8b:9b:9e:0b:6b:3c: 4b:f4:24:fd:2f:01:d9:ec:34:a1:93:b7:78:a0:40: 1d:69:81:9a:1a:5f:57:4c:7b:61:81:cd:40:45:92: 60:80:3e:2a:36:a2:d9:13:15:4d:d7:3e:37:ed:97: 01:0b:44:62:1c:92:e1:27:a6:d7:bc:3f:4f:08:34: ce:61:e2:d2:44:fa:c6:e4:ac:a8:52:1c:9e:66:e6: 3a:8c:fc:e0:68:37:ed:2a:5f:aa:73:40:e5:ad:96: 46:57:af:99:bb:16:55:ee:85:6e:0e:1a:ea:40:da: d1:da:4b:3e:10:f5:ac:eb:b5:2a:7f:44:cd:44:c2: ee:28:ce:b2:0b:ec:99:4c:af:34:0b:38:6a:f7:81: 13:cb:66:93:37:ac:17:b6:c1:cf:b4:29:d1:22:5d: 2d:f4:7a:96:bf:98:d9:e0:2e:1c:f5:29:85:5b:0f: ca:6d:8c:2f:17:a7:99:4e:f7:7e:cc:54:f4:13:8a: 72:7b:fb:44:3d:e7:5a:7e:66:e9:a0:ee:eb:40:57: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:62:65:93:B8:BE:EB:E5:60:1F:E9:4B:B7:C3:A2:E0:BD:52:91:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9c2bc2d-ab8c-3873-9cdf-d93a3a3efa3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 74.84.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:75:a0:2e:15:27:39:6e:d5:9e:c8:ba:3a:33:3a:38:85:26: 86:05:8f:fd:df:66:be:dc:73:ea:02:ae:9d:e7:d4:2c:ff:57: c9:03:34:b8:01:2d:ed:6c:16:e0:fa:bc:51:64:c9:36:10:cf: e4:69:1d:c9:39:9d:91:a1:7d:47:59:56:0e:fb:91:1b:d9:71: 87:fc:e7:a9:e8:40:1d:31:b9:af:08:7a:25:c6:00:52:49:a9: 34:fa:12:e3:9e:84:f4:b9:1e:a7:13:c3:19:80:fc:0e:8c:93: a2:28:3a:65:e1:ee:d9:95:30:ff:4b:9b:b8:ef:1b:84:05:13: 6b:72:a6:db:e9:9d:6a:f4:4b:80:8e:0a:78:d7:eb:65:e1:fe: 9c:ed:56:64:2f:7a:7c:70:f4:34:a3:91:0f:66:0b:b7:92:8c: 23:1c:0b:ce:77:89:d6:f3:cc:dc:11:8e:55:60:f3:f9:73:75: d2:40:c1:5d:08:ef:2e:ba:19:a6:c0:ce:39:8c:b9:97:ae:78: 2f:2d:f3:f9:77:c3:77:70:b3:0a:2f:c3:45:d5:c2:e5:16:dc: 39:50:b1:b6:1a:26:86:c2:6d:f8:36:65:39:cc:65:ee:02:b3: 8d:ea:16:3b:05:eb:ad:51:a9:48:6f:4e:a3:d8:b1:0d:bc:3e: 26:b5:89:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0rZCPVlAYTNyE/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDIyMTExMzM1MFoXDTI1MDUyMjEwMzM1MFowLzEtMCsGA1UEAxMk ZDBiYTBkYWMtNmY1OC00MWJiLTk5ZGItNmM0YjFiZWQwYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEt1AypHU8f9iD+nvBDhQPWGRgITPtg4Axje mHgTsXl9Hdwc+Li11DHaYv4IYm7OKfkexM6Lm54LazxL9CT9LwHZ7DShk7d4oEAd aYGaGl9XTHthgc1ARZJggD4qNqLZExVN1z437ZcBC0RiHJLhJ6bXvD9PCDTOYeLS RPrG5KyoUhyeZuY6jPzgaDftKl+qc0DlrZZGV6+ZuxZV7oVuDhrqQNrR2ks+EPWs 67Uqf0TNRMLuKM6yC+yZTK80Czhq94ETy2aTN6wXtsHPtCnRIl0t9HqWv5jZ4C4c 9SmFWw/KbYwvF6eZTvd+zFT0E4pye/tEPedafmbpoO7rQFcQZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNiZZO4vuvlYB/pS7fDouC9UpExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjljMmJjMmQtYWI4Yy0z ODczLTljZGYtZDkzYTNhM2VmYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlRJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp1oC4VJzlu1Z7IujozOjiFJoYFj/3fZr7cc+oCrp3n1Cz/V8kDNLgB Le1sFuD6vFFkyTYQz+RpHck5nZGhfUdZVg77kRvZcYf856noQB0xua8IeiXGAFJJ qTT6EuOehPS5HqcTwxmA/A6Mk6IoOmXh7tmVMP9Lm7jvG4QFE2typtvpnWr0S4CO CnjX62Xh/pztVmQvenxw9DSjkQ9mC7eSjCMcC853idbzzNwRjlVg8/lzddJAwV0I 7y66GabAzjmMuZeueC8t8/l3w3dwswovw0XVwuUW3DlQsbYaJobCbfg2ZTnMZe4C s43qFjsF661RqUhvTqPYsQ28Pia1iXM= -----END CERTIFICATE-----Generated at Tue Apr 8 23:34:10 2025 by rpki-client