$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa File: 2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa (raw, json) Hash identifier: 1fEij8tbkCdNa7HC0VYoza1lONCCze/SrzpHFj/T0xk= Subject key identifier: 6A:25:2C:B9:DD:36:79:B7:6D:71:AB:E5:82:57:06:28:E0:2F:04:2E Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285849797445945B0DB79560538BD0 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 398420 IP address blocks: 74.115.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:45:94:5b:0d:b7:95:60:53:8b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=da6554f5-c8ce-495b-992d-03ea7cdf59e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:15:85:17:72:ab:0a:89:e3:7a:40:e4:ab:8f: 35:b1:88:fe:13:72:2a:13:c2:cf:68:64:69:52:91: 2b:a7:ee:f8:bc:cb:b9:ea:13:7c:8e:75:47:1e:41: b1:2c:91:84:d6:3a:05:10:74:58:b8:b9:40:89:2a: 10:71:af:27:52:46:51:59:33:15:d0:94:0b:da:aa: e3:da:8d:a1:ae:4e:4f:e7:bc:63:d5:84:e4:04:f9: ba:cb:47:11:66:c7:a4:e6:50:a6:89:21:f3:81:b6: 84:94:ba:bc:e0:2a:69:53:ed:e0:d4:26:04:24:de: 35:b3:d2:cb:bb:d6:84:0c:0d:72:eb:49:88:68:bd: 33:85:5d:fc:35:e7:5a:22:26:a2:f6:0d:1f:66:90: 51:e5:f9:e4:c5:1d:8d:eb:da:72:dd:55:53:e9:d2: 62:80:c0:49:9e:a6:11:71:a2:7b:04:f5:77:79:b6: 47:02:e5:68:0f:12:bd:84:bd:8c:20:8d:c8:c9:8c: d7:23:4a:22:34:af:fc:d0:1c:b8:fd:22:fb:19:f6: 51:79:8f:10:91:2f:c8:e2:3a:46:5e:93:11:8b:45: 4a:98:9e:75:8b:74:a2:75:80:8b:70:c5:50:b0:7a: 80:65:c0:37:c9:67:a5:3d:1f:78:9d:45:9c:be:7d: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:25:2C:B9:DD:36:79:B7:6D:71:AB:E5:82:57:06:28:E0:2F:04:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2949bc21-8b88-36a3-80f6-7d862b2f0c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.115.80.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f0:2f:80:2a:9c:c4:19:95:b4:31:79:3a:34:95:6f:a7:29: eb:04:20:a2:6a:0c:8c:ef:c4:1d:dd:a4:b2:07:d2:4e:5c:39: bb:28:1e:25:f6:0f:6c:1c:92:a7:6a:d6:4b:c9:c0:9b:ee:bc: a4:3f:ba:10:ca:c3:68:8b:43:48:0b:c4:8f:48:83:7c:22:17: b4:63:c5:4a:c6:11:4b:2e:af:a6:a0:1d:44:dc:2d:87:4c:e6: a6:6a:f0:bb:1d:39:7f:d3:2a:59:78:2d:6b:7b:86:ec:a8:de: e4:ab:95:a6:36:a6:27:29:9c:23:c1:9d:af:6a:43:1f:c5:11: e4:f9:bb:98:2f:5d:4c:da:a9:6a:42:11:93:40:3d:b8:10:d6: 0c:15:ae:36:7c:65:70:85:35:18:54:62:fd:a4:6f:c9:6e:ec: a3:17:3d:03:c5:47:2d:36:f7:63:e1:2c:99:82:7b:3b:a2:6d: be:86:fe:2a:1f:97:d1:48:fc:e8:3d:50:9e:ab:90:a6:57:df: 18:7d:06:af:40:32:f8:39:33:20:96:e5:6a:c0:1a:2f:eb:88: 97:74:93:03:9e:44:08:fc:3e:7c:1d:25:dc:2d:21:d5:8c:01: 96:14:02:5b:80:1b:d6:e1:bd:c4:0c:db:d3:f3:22:ef:43:a8: 92:cb:99:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEWUWw23lWBTi9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk ZGE2NTU0ZjUtYzhjZS00OTViLTk5MmQtMDNlYTdjZGY1OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BWFF3KrConjekDkq481sYj+E3IqE8LPaGRp UpErp+74vMu56hN8jnVHHkGxLJGE1joFEHRYuLlAiSoQca8nUkZRWTMV0JQL2qrj 2o2hrk5P57xj1YTkBPm6y0cRZsek5lCmiSHzgbaElLq84CppU+3g1CYEJN41s9LL u9aEDA1y60mIaL0zhV38NedaIiai9g0fZpBR5fnkxR2N69py3VVT6dJigMBJnqYR caJ7BPV3ebZHAuVoDxK9hL2MII3IyYzXI0oiNK/80By4/SL7GfZReY8QkS/I4jpG XpMRi0VKmJ51i3SidYCLcMVQsHqAZcA3yWelPR94nUWcvn1FJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGolLLndNnm3bXGr5YJXBijgLwQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjk0OWJjMjEtOGI4OC0z NmEzLTgwZjYtN2Q4NjJiMmYwYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHwL4AqnMQZlbQxeTo0lW+nKesEIKJqDIzvxB3dpLIH0k5cObsoHiX2 D2wckqdq1kvJwJvuvKQ/uhDKw2iLQ0gLxI9Ig3wiF7RjxUrGEUsur6agHUTcLYdM 5qZq8LsdOX/TKll4LWt7huyo3uSrlaY2picpnCPBna9qQx/FEeT5u5gvXUzaqWpC EZNAPbgQ1gwVrjZ8ZXCFNRhUYv2kb8lu7KMXPQPFRy0292PhLJmCezuibb6G/iof l9FI/Og9UJ6rkKZX3xh9Bq9AMvg5MyCW5WrAGi/riJd0kwOeRAj8PnwdJdwtIdWM AZYUAluAG9bhvcQM29PzIu9DqJLLmf8= -----END CERTIFICATE-----Generated at Fri Apr 11 21:53:17 2025 by rpki-client