$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa File: 1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa (raw, json) Hash identifier: FYMUrbdZGz5BEdnB95XWo3oFuSIBNK+yv9g1j/7pWfA= Subject key identifier: F0:A7:B4:B6:21:12:94:74:C7:C6:D5:77:D5:E2:26:95:A0:D6:7F:85 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858485B6B0305A77706B5F7E27B40 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 4213 IP address blocks: 74.222.131.0/24 maxlen: 24 74.222.136.0/24 maxlen: 24 74.222.140.0/24 maxlen: 24 74.222.142.0/24 maxlen: 24 74.222.147.0/24 maxlen: 24 74.222.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6b:03:05:a7:77:06:b5:f7:e2:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=e81804ff-1f6b-40ec-9e23-a94cdd1fa6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:d5:53:42:ff:49:0e:e1:c0:f6:0f:0f:eb: 57:02:2b:d3:9e:59:69:4d:5a:c9:d2:1e:b7:75:84: 23:d7:59:49:5e:33:96:87:e3:87:71:be:40:63:21: 0f:a3:99:36:06:7e:79:f1:04:26:06:e3:44:e9:7d: f9:2c:83:3c:b7:0e:16:69:06:90:d4:a1:13:82:6d: fc:2c:bd:2b:ff:41:31:72:75:61:82:0e:cf:22:42: 37:0e:46:35:e3:a6:7e:8b:2e:b4:ff:df:cd:7b:d9: a7:be:cc:9b:c6:6b:92:d5:e8:47:15:e6:21:ab:38: 28:c0:41:52:a2:cb:8e:1b:c6:dd:fd:57:c8:dd:95: 62:68:ef:11:70:7f:20:d7:5b:4a:61:81:7e:12:f3: 78:25:2b:5d:c8:4e:d3:8a:09:84:5e:e5:1e:2f:50: f0:c7:28:2c:24:7f:3e:41:42:96:fc:03:f7:aa:58: ac:4c:38:0c:42:fa:27:68:30:ca:87:6b:fb:d2:26: d9:54:f2:b0:a2:19:a0:55:2c:ec:f7:b9:d3:45:36: ba:17:3d:f9:05:8c:8d:65:74:f2:7e:2c:69:14:ba: f7:36:10:40:dd:f1:66:86:9c:48:31:c6:0c:fa:f9: af:ae:bd:fb:d0:08:09:94:6b:ac:f7:cd:89:b3:8e: 8d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A7:B4:B6:21:12:94:74:C7:C6:D5:77:D5:E2:26:95:A0:D6:7F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c1e785a-0cb9-3c4c-b477-19bcb0b81eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.131.0/24 74.222.136.0/24 74.222.140.0/24 74.222.142.0/24 74.222.147.0/24 74.222.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:90:82:6d:32:fa:39:17:82:13:16:e4:27:80:59:ab:8c:ae: 9d:76:65:07:0f:2e:b1:68:88:e0:d4:52:db:1b:75:3d:79:60: 9b:6f:23:1c:44:82:6a:eb:b7:e6:af:e2:5a:38:a9:00:20:32: 76:c7:28:c2:6d:9e:09:8b:25:48:d3:fc:fa:04:38:05:17:25: 34:51:ba:26:ef:55:d0:2c:e5:14:41:2a:0e:1f:b1:eb:ea:c5: 9f:d0:32:92:99:49:e1:ee:0d:24:0d:83:42:46:bd:51:7a:3c: 25:8e:71:4a:d9:b0:17:66:16:e7:25:f3:bf:5f:1e:d0:55:02: 6a:db:75:3c:50:7d:d5:c1:73:68:5a:55:68:40:1c:03:de:0d: 18:0b:3d:6d:fd:a7:e6:36:d8:4e:d8:ac:7c:01:81:09:c6:08: 5c:55:0b:0b:e6:fe:44:41:92:2f:97:b8:17:4a:17:6e:61:0a: 50:cc:2e:da:26:69:3e:1c:b7:c6:97:78:a8:f5:6e:9e:2f:30: 0e:74:db:86:34:1c:ad:c9:63:5a:58:7a:b4:be:4b:d4:22:9f: 03:57:92:4c:b0:c2:19:ce:03:1a:bc:bd:e1:2e:09:4a:cb:2e: c5:27:96:e4:3e:cf:b5:69:f7:b5:48:c0:db:ab:dd:09:76:25: 7d:69:c3:72 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEhbawMFp3cGtffie0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk ZTgxODA0ZmYtMWY2Yi00MGVjLTllMjMtYTk0Y2RkMWZhNmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3rVU0L/SQ7hwPYPD+tXAivTnllpTVrJ0h63 dYQj11lJXjOWh+OHcb5AYyEPo5k2Bn558QQmBuNE6X35LIM8tw4WaQaQ1KETgm38 LL0r/0ExcnVhgg7PIkI3DkY146Z+iy60/9/Ne9mnvsybxmuS1ehHFeYhqzgowEFS osuOG8bd/VfI3ZViaO8RcH8g11tKYYF+EvN4JStdyE7TigmEXuUeL1DwxygsJH8+ QUKW/AP3qlisTDgMQvonaDDKh2v70ibZVPKwohmgVSzs97nTRTa6Fz35BYyNZXTy fixpFLr3NhBA3fFmhpxIMcYM+vmvrr370AgJlGus982Js46NwQIDAQABo4IDczCC A28wHQYDVR0OBBYEFPCntLYhEpR0x8bVd9XiJpWg1n+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMWMxZTc4NWEtMGNiOS0z YzRjLWI0NzctMTliY2IwYjgxZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQASt6DAwQA St6IAwQASt6MAwQASt6OAwQASt6TAwQBSt6oMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJuQgm0y+jkXghMW 5CeAWauMrp12ZQcPLrFoiODUUtsbdT15YJtvIxxEgmrrt+av4lo4qQAgMnbHKMJt ngmLJUjT/PoEOAUXJTRRuibvVdAs5RRBKg4fsevqxZ/QMpKZSeHuDSQNg0JGvVF6 PCWOcUrZsBdmFucl879fHtBVAmrbdTxQfdXBc2haVWhAHAPeDRgLPW39p+Y22E7Y rHwBgQnGCFxVCwvm/kRBki+XuBdKF25hClDMLtomaT4ct8aXeKj1bp4vMA5024Y0 HK3JY1pYerS+S9QinwNXkkywwhnOAxq8veEuCUrLLsUnluQ+z7Vp97VIwNur3Ql2 JX1pw3I= -----END CERTIFICATE-----Generated at Fri Mar 14 13:41:14 2025 by rpki-client