$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa File: fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa (raw, json) Hash identifier: DxxeQcaEAlrQG44q+iEjp0DIPTr2wXeUu9kkHTsPfSY= Subject key identifier: D0:84:DC:BD:8B:76:A6:09:AE:89:6A:AE:68:23:87:F3:EF:BC:51:E5 Certificate issuer: /CN=f32917d5-115d-4c33-8f66-98c515f1b37c Certificate serial: 010D0C9F43285848E16BD5BC331F32DB5334E600 Authority key identifier: 01:79:97:13:A4:AF:34:C1:2F:78:52:A4:C0:C3:D8:50:AF:2A:D5:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 14556 IP address blocks: 74.114.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d5:bc:33:1f:32:db:53:34:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32917d5-115d-4c33-8f66-98c515f1b37c Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=66d06449-0069-4639-aa5c-7e1cf2d38089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:70:c7:89:c9:ab:be:70:5f:02:a6:a5:9a:fc: a1:47:d2:66:de:f8:80:bc:50:d2:2d:24:62:3b:29: 31:dc:ec:99:b1:e4:85:95:76:a2:18:38:6c:a8:28: de:06:f1:76:fc:49:25:08:65:e2:e0:62:bd:2f:76: 63:cb:71:a3:95:e4:74:bb:fc:17:7e:e6:b7:85:32: fb:6c:4f:0e:12:28:75:3d:a6:a7:99:5e:ce:89:bd: 42:64:85:56:6c:f6:57:16:da:a2:d5:a4:6f:2f:9a: 09:b3:0f:27:80:d0:5a:24:12:65:08:55:bb:18:37: 68:2b:51:28:d1:2d:15:ce:41:27:58:b7:27:a9:39: e5:d7:c7:05:f8:37:f6:92:c7:8a:71:c6:84:d4:31: e3:24:fd:39:b9:31:85:c2:f8:48:63:ea:2e:f7:c7: 26:1c:27:35:76:c2:fa:8b:a9:fc:3d:39:dd:e4:b8: 60:20:ed:2d:69:f2:1f:b9:41:c3:be:6d:8b:c1:9d: 87:e8:bd:7a:78:99:80:a6:03:5f:39:53:54:24:b8: 67:fc:d5:58:e4:3e:f4:6a:85:f1:49:e4:a7:ad:2a: 5d:6e:5c:6f:81:70:e0:da:af:67:38:10:a2:ac:d2: 16:d0:92:f1:5c:ae:ec:ef:97:28:70:b9:1b:4e:d3: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:84:DC:BD:8B:76:A6:09:AE:89:6A:AE:68:23:87:F3:EF:BC:51:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/fec3b062-b9c9-39cf-96e7-4fe27e9416e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c/f32917d5-115d-4c33-8f66-98c515f1b37c.crl X509v3 Authority Key Identifier: keyid:01:79:97:13:A4:AF:34:C1:2F:78:52:A4:C0:C3:D8:50:AF:2A:D5:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32917d5-115d-4c33-8f66-98c515f1b37c.cer sbgp-ipAddrBlock: critical IPv4: 74.114.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2d:ff:0b:49:6d:e2:d9:c3:80:f4:80:0e:f1:1c:92:dd:ae: 10:75:1a:ea:7b:92:18:7b:4b:e3:dc:fa:62:e2:42:51:2a:c8: 30:27:3f:1c:6e:1f:f0:10:da:47:09:64:3b:0d:c4:6c:e5:59: 42:81:9a:7d:ba:73:03:44:ed:9b:0a:6a:36:e0:48:4c:c5:a5: bc:f4:5a:a1:e7:2b:34:1d:45:05:1b:4b:04:d0:70:06:fb:17: 2e:f0:1a:31:b0:5e:27:8f:d7:c2:bb:d1:57:8e:6d:0d:a3:d0: 70:25:7f:fc:95:4b:a7:73:3f:5e:ba:43:c5:98:ac:9e:29:ec: de:5f:ca:f1:65:7b:1d:99:81:06:02:85:02:86:30:08:1b:10: 02:72:88:94:53:3b:00:5a:73:7c:d1:53:79:66:d6:2d:47:43: 7b:f3:86:7a:a2:8a:95:da:24:6c:1f:62:b2:e4:71:5f:9d:1d: 02:7c:45:12:29:76:9d:0b:b3:ce:02:37:b7:69:59:0f:83:86: 42:bb:c5:06:fc:51:70:87:a7:c1:b2:dc:84:44:27:20:51:68: ad:97:87:ad:7c:df:dc:36:c8:17:dc:6c:69:70:75:56:30:c9: 43:46:75:cc:25:f5:bc:36:d7:54:fc:60:a1:dd:b8:c6:df:de: fc:7e:cd:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9W8Mx8y21M05gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyOTE3ZDUtMTE1ZC00YzMzLThmNjYtOThjNTE1ZjFi MzdjMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NjZkMDY0NDktMDA2OS00NjM5LWFhNWMtN2UxY2YyZDM4MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXDHicmrvnBfAqalmvyhR9Jm3viAvFDSLSRi Oykx3OyZseSFlXaiGDhsqCjeBvF2/EklCGXi4GK9L3Zjy3GjleR0u/wXfua3hTL7 bE8OEih1PaanmV7Oib1CZIVWbPZXFtqi1aRvL5oJsw8ngNBaJBJlCFW7GDdoK1Eo 0S0VzkEnWLcnqTnl18cF+Df2kseKccaE1DHjJP05uTGFwvhIY+ou98cmHCc1dsL6 i6n8PTnd5LhgIO0tafIfuUHDvm2LwZ2H6L16eJmApgNfOVNUJLhn/NVY5D70aoXx SeSnrSpdblxvgXDg2q9nOBCirNIW0JLxXK7s75cocLkbTtOyRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCE3L2LdqYJrolqrmgjh/PvvFHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI5 MTdkNS0xMTVkLTRjMzMtOGY2Ni05OGM1MTVmMWIzN2MvZmVjM2IwNjItYjljOS0z OWNmLTk2ZTctNGZlMjdlOTQxNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjMyOTE3ZDUtMTE1ZC00YzMzLThm NjYtOThjNTE1ZjFiMzdjL2YzMjkxN2Q1LTExNWQtNGMzMy04ZjY2LTk4YzUxNWYx YjM3Yy5jcmwwHwYDVR0jBBgwFoAUAXmXE6SvNMEveFKkwMPYUK8q1aIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI5MTdkNS0xMTVkLTRjMzMtOGY2Ni05OGM1 MTVmMWIzN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIst/wtJbeLZw4D0gA7xHJLdrhB1Gup7khh7S+Pc+mLiQlEqyDAnPxxu H/AQ2kcJZDsNxGzlWUKBmn26cwNE7ZsKajbgSEzFpbz0WqHnKzQdRQUbSwTQcAb7 Fy7wGjGwXieP18K70VeObQ2j0HAlf/yVS6dzP166Q8WYrJ4p7N5fyvFlex2ZgQYC hQKGMAgbEAJyiJRTOwBac3zRU3lm1i1HQ3vzhnqiipXaJGwfYrLkcV+dHQJ8RRIp dp0Ls84CN7dpWQ+DhkK7xQb8UXCHp8Gy3IREJyBRaK2Xh61839w2yBfcbGlwdVYw yUNGdcwl9bw211T8YKHduMbf3vx+zck= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:37 2025 by rpki-client