$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa File: ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa (raw, json) Hash identifier: iNfAJV1XoSK1v3NL+1nNeqYMlOM6zNinvrbg/jAqRHg= Subject key identifier: 2B:E2:45:3B:99:7A:0D:F1:B0:54:16:0D:17:19:A8:38:0E:78:BE:B0 Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc Certificate serial: 010D0C9F4328584849456EA88B871944DBF40640 Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 14543 IP address blocks: 74.207.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:6e:a8:8b:87:19:44:db:f4:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=bcee8bc4-c549-48de-b1f8-72a54560a1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f2:ca:d9:b7:93:ff:89:dd:5f:f4:57:3d:7f: 44:46:ef:82:6a:96:36:32:51:e1:ff:ec:40:af:54: 7d:22:92:bb:4b:d0:e8:19:62:c7:54:a7:5f:81:5d: 04:29:15:87:aa:e0:de:d5:5e:98:aa:72:eb:ed:66: 5e:9d:0a:68:4b:3f:13:01:72:05:f1:40:c7:60:5c: 1c:1c:94:77:b6:a9:80:95:f8:52:6d:8c:31:c1:fa: eb:c7:fd:a7:36:5d:49:6f:98:1d:ba:5f:fe:08:4b: 72:c6:18:ec:77:39:40:31:6a:98:01:ea:46:d1:81: ab:95:0c:6a:a3:75:4a:46:e0:ef:70:87:27:f6:94: c2:73:54:d9:d4:46:ca:6a:58:f4:da:09:73:24:ed: d5:1c:04:0a:8c:8f:69:f5:12:54:4e:7b:6a:f8:6a: e3:05:15:d2:e5:01:92:a2:39:57:d4:2c:53:57:bf: 47:36:e9:67:60:be:ac:e5:cc:36:1f:e9:61:50:57: 7a:50:df:65:50:bb:6e:87:0e:12:ac:6a:e7:63:1c: 0c:8c:ea:91:a6:e1:64:0e:4b:ed:8b:ba:a8:91:f4: 79:2b:ce:bf:68:12:1d:12:c1:fb:86:84:00:0b:93: 6b:f7:22:00:c4:be:47:06:5b:3e:fe:ae:69:73:bf: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E2:45:3B:99:7A:0D:F1:B0:54:16:0D:17:19:A8:38:0E:78:BE:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/ed6a384e-f72d-3094-bafb-9b2a825cfdb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl X509v3 Authority Key Identifier: keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer sbgp-ipAddrBlock: critical IPv4: 74.207.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:56:23:d8:21:e9:88:02:e6:fb:d9:20:4e:a2:c1:f0:e5:39: 9c:48:ea:8b:58:b4:4e:7c:32:55:61:4f:45:09:12:18:da:cb: 96:cc:c4:7b:f7:61:78:1a:4d:d0:3f:b7:a4:1c:b3:a1:ab:bf: 57:b9:7b:40:af:a0:b1:02:97:2c:27:38:91:70:a6:9f:1e:41: 7f:8b:8b:f5:23:12:f8:30:b3:ad:15:e1:d2:7c:7b:67:cb:5d: 85:c6:78:e5:89:88:72:49:ef:60:94:c2:67:ee:f7:5f:79:c1: e8:df:c0:1a:88:65:66:c3:e7:11:18:3a:e3:bf:9b:e4:82:1a: 76:26:08:f7:fb:a9:4e:54:a9:b2:d5:7b:9a:e2:24:91:c7:bc: b1:80:43:17:87:6e:0b:f7:ca:4f:a2:bd:27:fd:25:fa:12:8d: a2:30:6a:fe:9e:84:4c:0c:ca:c2:b0:da:84:c1:cf:d5:93:1e: 8f:ff:a8:a9:3c:6d:6b:a9:7e:38:d6:ce:15:f9:90:ea:57:00: df:fc:a8:37:f4:94:f2:e3:68:9c:cc:0c:76:ce:ae:e4:07:a1: 4b:ce:56:b8:b0:a4:b5:7e:b4:ed:aa:00:f5:d0:70:9a:c7:4d: 9e:06:96:dd:d3:21:f8:f9:48:72:f4:ae:c3:7d:0f:9e:62:f8: bf:97:25:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRW6oi4cZRNv0BkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3 NWNjMB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk YmNlZThiYzQtYzU0OS00OGRlLWIxZjgtNzJhNTQ1NjBhMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPLK2beT/4ndX/RXPX9ERu+CapY2MlHh/+xA r1R9IpK7S9DoGWLHVKdfgV0EKRWHquDe1V6YqnLr7WZenQpoSz8TAXIF8UDHYFwc HJR3tqmAlfhSbYwxwfrrx/2nNl1Jb5gdul/+CEtyxhjsdzlAMWqYAepG0YGrlQxq o3VKRuDvcIcn9pTCc1TZ1EbKalj02glzJO3VHAQKjI9p9RJUTntq+GrjBRXS5QGS ojlX1CxTV79HNulnYL6s5cw2H+lhUFd6UN9lULtuhw4SrGrnYxwMjOqRpuFkDkvt i7qokfR5K86/aBIdEsH7hoQAC5Nr9yIAxL5HBls+/q5pc7/MpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCviRTuZeg3xsFQWDRcZqDgOeL6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1 NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvZWQ2YTM4NGUtZjcyZC0z MDk0LWJhZmItOWIyYTgyNWNmZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4 NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSs+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJWI9gh6YgC5vvZIE6iwfDlOZxI6otYtE58MlVhT0UJEhjay5bMxHv3 YXgaTdA/t6Qcs6Grv1e5e0CvoLEClywnOJFwpp8eQX+Li/UjEvgws60V4dJ8e2fL XYXGeOWJiHJJ72CUwmfu9195wejfwBqIZWbD5xEYOuO/m+SCGnYmCPf7qU5UqbLV e5riJJHHvLGAQxeHbgv3yk+ivSf9JfoSjaIwav6ehEwMysKw2oTBz9WTHo//qKk8 bWupfjjWzhX5kOpXAN/8qDf0lPLjaJzMDHbOruQHoUvOVriwpLV+tO2qAPXQcJrH TZ4Glt3TIfj5SHL0rsN9D55i+L+XJZE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:09:56 2025 by rpki-client