$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa File: de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa (raw, json) Hash identifier: Fg2z2hZ9OcBEcP9om0ICBDbNsyAnvtVP53oIzwZjO2U= Subject key identifier: 2D:76:2A:51:86:E4:32:7C:CA:2D:A9:29:50:AE:30:83:F1:74:6C:57 Certificate issuer: /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Certificate serial: 010D0C9F4328584973DEE71090EDC05F577694C0 Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 6939 IP address blocks: 74.121.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e7:10:90:ed:c0:5f:57:76:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=9ab06248-5694-4b7e-8699-b2b2a2bb25bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:f6:8f:12:25:7e:94:e6:64:0f:fa:f2:26: 29:5d:fc:44:5b:d9:c4:41:79:66:e1:6c:be:a5:b0: b4:1c:4e:f6:29:d8:ec:79:e4:54:ac:68:d5:61:42: 39:c0:de:19:fa:e3:02:6b:c3:9b:c3:74:f4:38:5a: 71:9d:53:d3:34:0d:73:d4:4c:25:e8:46:f5:5f:1f: 18:be:72:26:a5:aa:67:bd:74:8f:d9:b5:a3:27:1e: 89:ec:16:87:98:b8:c5:9e:ef:1c:10:84:fc:38:6c: 1e:d6:a1:1a:ff:31:b9:b1:bc:10:84:c7:e5:6a:8e: 18:3b:e8:fc:30:db:4e:77:24:8d:c2:5f:74:f5:3e: 67:98:72:7d:19:18:d2:2f:8f:82:72:bb:49:40:ef: fa:3b:fa:9a:db:b3:e0:0f:d0:73:33:72:3c:e1:53: e0:7a:29:46:9e:1b:f5:44:e5:e5:5f:5a:89:6f:7e: 3e:5a:43:07:03:55:8e:d7:09:e6:46:5b:46:21:21: f7:c5:2e:d5:fb:28:2c:fe:95:7f:c7:0f:46:fa:4e: 97:b8:a8:73:6e:02:22:14:9b:68:6c:53:c4:d0:80: 65:d4:cf:77:fa:45:53:c8:96:37:79:ec:f9:81:77: bd:3b:5c:19:d5:f3:10:3c:ff:da:e7:9f:32:bc:6e: d3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:76:2A:51:86:E4:32:7C:CA:2D:A9:29:50:AE:30:83:F1:74:6C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/de7154b1-768a-3c2a-b3cd-e74793a0d8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl X509v3 Authority Key Identifier: keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer sbgp-ipAddrBlock: critical IPv4: 74.121.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:37:c1:48:fd:b9:7a:98:da:e1:c1:6a:ce:91:96:1d:c9:de: 1e:c0:cf:33:d9:f9:c7:ba:96:e8:90:f4:d1:b4:4c:6e:2c:32: 61:df:2c:cd:76:2c:4d:03:7b:1d:35:3e:25:57:d5:ad:59:37: 16:85:a8:b2:0d:d1:c9:0a:10:bc:d2:05:d8:d5:a0:b5:98:5c: c4:1c:17:65:d0:1b:51:ec:ba:10:5d:58:fc:56:4b:6e:6b:13: cc:a8:c2:66:50:7f:7d:d4:b5:83:70:08:b8:3a:11:d2:a2:a6: 94:b8:80:7b:db:9a:bb:35:5e:a6:dc:ba:d0:0f:df:98:f5:72: 69:f9:9a:f8:38:e1:a3:c0:86:aa:a7:77:e7:1f:9d:5d:2c:65: d1:27:fe:c2:d1:73:d6:fd:27:8e:df:dd:ea:25:42:7d:32:8e: 46:85:5e:4e:26:03:53:2d:ef:3c:d2:3d:59:13:7f:bf:0f:86: e6:2e:06:a1:47:a9:ff:8a:bf:26:50:28:a9:2d:ca:57:a3:36: ad:bc:b1:11:d2:08:02:3a:e4:a2:bc:32:96:26:46:f6:1f:ae: dd:1d:66:bd:29:40:e5:dd:b2:10:2e:bb:ad:a9:2d:de:88:22: ec:14:97:4e:08:e7:e1:40:bd:5a:5d:b9:a4:41:b4:92:3c:e2: f0:26:d4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3ucQkO3AX1d2lMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiZTNjYTItNDliZC00NzU4LTgwNTQtNWQxNTU1YTkw YTExMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk OWFiMDYyNDgtNTY5NC00YjdlLTg2OTktYjJiMmEyYmIyNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmz2jxIlfpTmZA/68iYpXfxEW9nEQXlm4Wy+ pbC0HE72KdjseeRUrGjVYUI5wN4Z+uMCa8Obw3T0OFpxnVPTNA1z1Ewl6Eb1Xx8Y vnImpapnvXSP2bWjJx6J7BaHmLjFnu8cEIT8OGwe1qEa/zG5sbwQhMflao4YO+j8 MNtOdySNwl909T5nmHJ9GRjSL4+CcrtJQO/6O/qa27PgD9BzM3I84VPgeilGnhv1 ROXlX1qJb34+WkMHA1WO1wnmRltGISH3xS7V+ygs/pV/xw9G+k6XuKhzbgIiFJto bFPE0IBl1M93+kVTyJY3eez5gXe9O1wZ1fMQPP/a558yvG7TRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC12KlGG5DJ8yi2pKVCuMIPxdGxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJl M2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVhOTBhMTEvZGU3MTU0YjEtNzY4YS0z YzJhLWIzY2QtZTc0NzkzYTBkOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGRiZTNjYTItNDliZC00NzU4LTgw NTQtNWQxNTU1YTkwYTExLzRkYmUzY2EyLTQ5YmQtNDc1OC04MDU0LTVkMTU1NWE5 MGExMS5jcmwwHwYDVR0jBBgwFoAUVc0hzFNA4wPm0ZYQxx0PiWBnDuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1 NTVhOTBhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE03wUj9uXqY2uHBas6Rlh3J3h7AzzPZ+ce6luiQ9NG0TG4sMmHfLM12 LE0Dex01PiVX1a1ZNxaFqLIN0ckKELzSBdjVoLWYXMQcF2XQG1HsuhBdWPxWS25r E8yowmZQf33UtYNwCLg6EdKippS4gHvbmrs1XqbcutAP35j1cmn5mvg44aPAhqqn d+cfnV0sZdEn/sLRc9b9J47f3eolQn0yjkaFXk4mA1Mt7zzSPVkTf78PhuYuBqFH qf+KvyZQKKktylejNq28sRHSCAI65KK8MpYmRvYfrt0dZr0pQOXdshAuu62pLd6I IuwUl04I5+FAvVpduaRBtJI84vAm1FM= -----END CERTIFICATE-----Generated at Fri Apr 11 23:17:46 2025 by rpki-client