$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa File: 3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa (raw, json) Hash identifier: Qkq22HDOuv9YzzhnWCqRBK2mUSvArcNH8gsNhSh5m3w= Subject key identifier: C1:CF:86:AC:D0:8E:A8:ED:DA:AC:02:9D:B8:A9:0B:3B:C9:00:53:FA Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F432858491AA6C8B7B4F2CC17E18C5680 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 7106 IP address blocks: 74.126.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:c8:b7:b4:f2:cc:17:e1:8c:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=ff0ed482-433b-4683-a62c-d29e79a9c3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:9b:8a:3e:77:54:ec:2c:61:8e:a2:33:a2: 8f:8b:a8:51:d0:f7:c5:ca:0c:3a:62:84:5e:af:ba: a3:19:56:ae:ae:08:1b:03:dc:e4:86:c8:96:89:83: 59:65:d7:88:cb:9a:61:58:a9:4b:da:c3:45:fd:17: 41:c2:bf:45:c5:8f:ea:f7:62:48:64:af:dd:2d:33: a7:0e:9c:03:ee:34:ea:f1:4f:f1:ce:d7:f4:2c:1b: 79:6e:0a:df:1d:cb:78:9a:b3:4a:db:47:af:5c:7b: a2:33:93:3e:77:dc:c2:4f:ff:23:d8:f4:8b:75:eb: 2d:e6:a1:c0:48:71:9e:a5:2a:18:d4:fa:c1:46:d5: d1:a9:6e:97:54:b3:0b:99:b8:a6:83:26:94:5c:dc: 28:b9:01:07:5e:c6:e5:04:29:b8:ea:22:b0:26:86: 67:ff:a6:62:c5:95:e8:cb:59:39:51:69:44:31:7e: b3:ba:5f:62:35:fc:89:5d:45:dd:cd:e7:8d:da:95: a6:af:5b:64:d1:e6:e9:f8:51:79:b4:7b:cd:53:e5: cf:5f:eb:8e:85:3f:77:64:3b:c8:a4:43:f9:e6:5c: 2f:e6:a9:eb:b3:30:28:ba:5d:77:49:2f:01:48:5e: 06:ad:a6:e1:6a:15:9b:4b:88:71:bb:4d:79:68:7b: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CF:86:AC:D0:8E:A8:ED:DA:AC:02:9D:B8:A9:0B:3B:C9:00:53:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ca6fe09-b994-3cb6-b2e7-73c0803d1900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 74.126.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c4:98:f3:f2:51:83:bd:c9:0e:e3:fc:dc:e6:48:8d:a3:01: 95:61:59:af:d3:69:61:53:91:43:2f:c3:5d:97:4f:97:f8:5b: 8d:6b:7a:71:e3:1c:66:97:91:e2:0f:7a:8c:f1:a8:ef:10:d0: 9a:40:29:54:1b:4c:23:d5:20:56:29:21:f9:49:ff:51:07:ec: 7e:d2:47:50:9e:3c:5a:ef:ad:b6:d5:5f:d2:43:f7:e0:0e:8d: 06:64:0e:db:62:e2:13:69:c2:47:58:69:f5:1b:45:f5:0d:c1: 8e:38:6a:ef:7d:14:7b:a7:e8:89:df:b7:47:01:b5:3a:68:57: d4:c1:3e:7a:26:e9:c6:b8:4c:c3:f7:89:06:d5:06:7a:a7:d4: ce:7e:e0:a0:4a:30:88:52:e4:f2:88:8d:71:18:f2:a4:1c:aa: 41:f2:a1:91:3a:29:06:76:71:81:3a:c7:48:ed:ec:f5:cf:7d: 0a:f4:31:ef:aa:8c:1a:7c:cb:15:1a:86:68:f2:71:13:a5:74: ba:5b:c3:1e:7f:81:83:0f:44:09:de:ca:56:ca:43:de:67:58: ff:9b:f2:df:e8:84:ef:dd:66:cb:86:56:95:2c:e0:a2:5d:7c: 29:fb:9d:7e:60:63:1f:b0:c6:97:74:d5:00:aa:1f:7c:28:78: c2:e5:3c:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapsi3tPLMF+GMVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZmYwZWQ0ODItNDMzYi00NjgzLWE2MmMtZDI5ZTc5YTljM2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSqbij53VOwsYY6iM6KPi6hR0PfFygw6YoRe r7qjGVaurggbA9zkhsiWiYNZZdeIy5phWKlL2sNF/RdBwr9FxY/q92JIZK/dLTOn DpwD7jTq8U/xztf0LBt5bgrfHct4mrNK20evXHuiM5M+d9zCT/8j2PSLdest5qHA SHGepSoY1PrBRtXRqW6XVLMLmbimgyaUXNwouQEHXsblBCm46iKwJoZn/6ZixZXo y1k5UWlEMX6zul9iNfyJXUXdzeeN2pWmr1tk0ebp+FF5tHvNU+XPX+uOhT93ZDvI pEP55lwv5qnrszAoul13SS8BSF4GrabhahWbS4hxu015aHtIzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHPhqzQjqjt2qwCnbipCzvJAFP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvM2NhNmZlMDktYjk5NC0z Y2I2LWIyZTctNzNjMDgwM2QxOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPEmPPyUYO9yQ7j/NzmSI2jAZVhWa/TaWFTkUMvw12XT5f4W41renHj HGaXkeIPeozxqO8Q0JpAKVQbTCPVIFYpIflJ/1EH7H7SR1CePFrvrbbVX9JD9+AO jQZkDtti4hNpwkdYafUbRfUNwY44au99FHun6Inft0cBtTpoV9TBPnom6ca4TMP3 iQbVBnqn1M5+4KBKMIhS5PKIjXEY8qQcqkHyoZE6KQZ2cYE6x0jt7PXPfQr0Me+q jBp8yxUahmjycROldLpbwx5/gYMPRAneylbKQ95nWP+b8t/ohO/dZsuGVpUs4KJd fCn7nX5gYx+wxpd01QCqH3woeMLlPOE= -----END CERTIFICATE-----Generated at Fri Apr 4 19:51:41 2025 by rpki-client