$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa File: f25b49c9-5690-3892-8366-7d916842509c.roa (raw, json) Hash identifier: Azi4tlvkM4sTml44VZZTcis0W3QmI45DrYkY7FNlGs8= Subject key identifier: DA:25:E0:C8:E8:2D:C8:81:12:36:3D:52:12:27:F6:4E:F3:AC:AA:9B Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285849797440E90CDE405488EA2C00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 398420 IP address blocks: 74.126.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:40:e9:0c:de:40:54:88:ea:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=152a667b-d20d-4c91-8f93-8760b3454e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2a:32:e2:b2:ab:b1:2b:30:8d:12:44:94:88: 9a:06:fc:d1:ec:a4:e8:88:00:5e:bc:81:46:c2:bb: b2:df:2d:c3:d9:62:cd:2b:05:40:7d:20:7b:b4:93: 5a:c4:89:b6:db:03:be:ff:93:cf:15:54:29:c7:41: 6e:83:3f:78:9f:12:c4:9d:1c:e1:55:4a:8c:b4:1c: cc:8b:bb:99:b4:ba:51:a7:08:35:f5:36:7a:1d:0d: a8:23:32:c0:e6:11:ed:f3:ca:79:1e:b4:d1:d6:1a: 3b:f0:c1:cf:e7:a3:7b:50:79:cf:e4:80:02:61:0b: a3:f4:18:62:be:19:f9:16:8f:e0:82:74:bf:2a:47: 03:1e:d5:c1:23:7f:7a:e3:b9:c2:54:75:10:44:30: f9:9e:6c:aa:2e:0e:11:df:7c:33:63:bf:01:8d:d5: f4:44:2f:0e:24:83:ab:ca:2f:97:ad:4d:ae:68:ec: 28:2b:75:f8:8a:d8:b4:e1:96:82:61:53:f7:90:75: b0:51:ff:1f:da:36:16:8f:f0:a0:50:bc:2d:37:5d: 57:39:f9:90:48:aa:44:98:13:59:b8:ac:37:59:1a: b5:a3:8a:f5:70:4c:0b:37:fd:79:5c:71:7e:b2:9c: d4:ab:7f:53:df:e1:47:da:10:7d:b4:33:41:6c:d0: f4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:25:E0:C8:E8:2D:C8:81:12:36:3D:52:12:27:F6:4E:F3:AC:AA:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f25b49c9-5690-3892-8366-7d916842509c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:58:3a:19:d5:ec:fe:bf:51:14:72:96:e1:73:6a:a6:27:7c: 1a:23:37:8b:fe:ff:29:fe:85:5d:98:cb:ea:74:fd:c8:ba:d0: c1:53:ec:3c:3f:7f:22:32:da:3d:09:0f:3c:fa:67:e2:fb:44: fa:95:9d:b7:23:f2:61:59:6f:cb:d8:3a:02:2f:61:8d:f9:d2: 3d:a1:47:58:85:c5:c3:25:d2:d3:24:19:ce:e9:cc:a0:e7:38: d1:30:e6:f4:e2:d1:be:ab:ba:64:a9:9f:35:20:b2:4e:78:97: be:32:05:fe:2a:94:cd:c8:cd:e5:be:2f:00:15:fb:54:7a:72: fa:55:7a:8a:b7:12:83:6c:59:40:c2:f6:88:a5:d4:1c:45:70: 79:e2:55:a1:3d:11:8e:3d:22:43:c9:29:9c:ba:f4:37:f2:78: b3:b8:8e:17:98:a6:66:43:6b:53:01:e3:d4:1a:b2:78:be:02: 95:a7:fa:ef:eb:51:d8:43:95:2c:17:b4:02:cb:4f:0b:95:c2: cd:1b:1d:a1:de:60:23:9a:27:51:94:f2:ce:97:ba:20:a0:66: e1:a4:b4:7a:7c:81:6a:1b:19:63:39:d7:9d:9b:b1:bc:6e:c3: 3a:2a:24:20:5d:cc:96:6e:d9:08:96:ba:db:43:4b:63:6c:a5: 63:9b:42:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEDpDN5AVIjqLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk MTUyYTY2N2ItZDIwZC00YzkxLThmOTMtODc2MGIzNDU0ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkioy4rKrsSswjRJElIiaBvzR7KToiABevIFG wruy3y3D2WLNKwVAfSB7tJNaxIm22wO+/5PPFVQpx0Fugz94nxLEnRzhVUqMtBzM i7uZtLpRpwg19TZ6HQ2oIzLA5hHt88p5HrTR1ho78MHP56N7UHnP5IACYQuj9Bhi vhn5Fo/ggnS/KkcDHtXBI39647nCVHUQRDD5nmyqLg4R33wzY78BjdX0RC8OJIOr yi+XrU2uaOwoK3X4iti04ZaCYVP3kHWwUf8f2jYWj/CgULwtN11XOfmQSKpEmBNZ uKw3WRq1o4r1cEwLN/15XHF+spzUq39T3+FH2hB9tDNBbND00wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNol4MjoLciBEjY9UhIn9k7zrKqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjI1YjQ5YzktNTY5MC0z ODkyLTgzNjYtN2Q5MTY4NDI1MDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpYOhnV7P6/URRyluFzaqYnfBojN4v+/yn+hV2Yy+p0/ci60MFT7Dw/ fyIy2j0JDzz6Z+L7RPqVnbcj8mFZb8vYOgIvYY350j2hR1iFxcMl0tMkGc7pzKDn ONEw5vTi0b6rumSpnzUgsk54l74yBf4qlM3IzeW+LwAV+1R6cvpVeoq3EoNsWUDC 9oil1BxFcHniVaE9EY49IkPJKZy69DfyeLO4jheYpmZDa1MB49Qasni+ApWn+u/r UdhDlSwXtALLTwuVws0bHaHeYCOaJ1GU8s6XuiCgZuGktHp8gWobGWM5152bsbxu wzoqJCBdzJZu2QiWuttDS2NspWObQik= -----END CERTIFICATE-----Generated at Sat Apr 12 00:30:23 2025 by rpki-client