$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/6dfabb17-4437-3c66-996a-7acc0579861a.roa File: 6dfabb17-4437-3c66-996a-7acc0579861a.roa (raw, json) Hash identifier: oyVK3neaA+j/mYcAscS28uu8Mrkyltb0TVNh5NYcgJA= Subject key identifier: AC:1A:6C:55:1C:2C:70:08:A6:60:39:10:0F:DE:05:73:B0:27:D5:13 Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Certificate serial: 010D0C9F43285849218404A236B9479CB1EABE00 Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/6dfabb17-4437-3c66-996a-7acc0579861a.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 74.200.119.0/24 maxlen: 24 74.200.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:04:a2:36:b9:47:9c:b1:ea:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=adfa3601-482b-4b3f-9067-6d9214fe0fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4d:58:7f:fa:0b:d5:fd:21:41:85:f0:9e:57: e3:99:eb:f7:f4:1d:16:55:20:bf:95:a1:00:76:ed: 36:7c:e1:00:cb:06:4e:c0:18:8c:ae:f1:b4:dd:96: 86:a0:b3:4a:9d:31:d7:89:f2:6e:5f:23:53:7a:60: cf:1f:6e:1f:d9:22:47:b6:50:b5:13:1f:6a:bd:0a: 07:21:7c:35:4d:24:07:33:c2:87:f8:c3:c6:17:7f: 73:9d:04:9a:ff:88:44:d2:db:d1:f6:92:03:2f:c4: 61:13:d0:4a:3e:d5:f3:3d:7b:54:a0:d3:e9:a3:48: ca:b3:26:ad:bf:bc:31:81:57:50:0e:03:fd:9f:b2: 9f:4d:8c:9e:b4:45:6e:74:5d:c3:e8:10:18:5d:b3: ee:8b:0c:67:9b:5c:ec:67:94:e3:ed:94:22:3e:9d: fe:3c:c6:cd:5c:f3:b9:30:88:5d:c0:09:8e:9a:c1: 77:56:1d:05:5f:60:ac:1d:ff:08:67:f0:20:92:7e: 39:3b:1b:12:f1:f5:a5:3b:6a:5d:63:19:51:fb:1f: f8:d3:5f:0c:1d:97:5e:31:eb:26:31:9a:fc:4a:2e: d1:f1:7e:9b:4f:6d:7d:8b:af:ea:3a:4b:b5:55:3a: a6:fe:2a:ff:46:98:a6:2e:8e:b2:22:9a:f4:ac:69: c4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1A:6C:55:1C:2C:70:08:A6:60:39:10:0F:DE:05:73:B0:27:D5:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/6dfabb17-4437-3c66-996a-7acc0579861a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl X509v3 Authority Key Identifier: keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer sbgp-ipAddrBlock: critical IPv4: 74.200.119.0-74.200.120.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8b:86:25:2d:89:65:85:2b:bc:8b:bc:0c:e7:cc:95:ec:c0: 12:13:b1:87:08:f5:0a:66:3c:3f:d7:64:02:d4:c3:70:fe:8a: eb:65:59:d2:8d:34:60:63:97:08:a9:0d:12:da:3f:fb:fb:f1: f7:38:df:c7:7e:4e:7a:2c:e0:2e:b4:bc:b2:62:af:83:5c:11: ea:ee:63:d8:fb:99:fc:44:ed:b3:4a:65:25:9e:1c:de:8c:d1: c7:d0:37:34:b5:55:e1:a4:cc:4a:19:b7:57:71:26:38:a4:26: f8:87:d8:8e:ce:2b:3a:74:17:f2:00:3d:d4:73:62:12:c1:dd: 94:23:61:42:ac:00:f8:cf:86:da:08:1f:ce:d8:11:b3:d4:5a: 79:c4:e7:1b:96:38:94:2c:ec:ff:9f:1c:65:d1:6f:87:05:31: fb:b1:b7:a0:5c:63:92:17:44:5d:28:4b:f1:ab:f0:05:07:56: e8:ef:51:2c:c3:48:b4:76:24:2d:f7:fc:8d:fb:ff:30:93:05: 25:ea:4f:63:50:65:38:dc:51:d2:86:59:02:02:3e:d7:f9:2a: 7c:e4:75:eb:74:e6:57:0b:2a:d8:a7:d4:28:bd:75:d4:0e:7e: f4:ac:72:6f:9b:6f:ec:fc:7f:13:f1:b8:a3:a8:74:55:41:02: 7c:d5:04:ed -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkhhASiNrlHnLHqvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1 OWZkMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YWRmYTM2MDEtNDgyYi00YjNmLTkwNjctNmQ5MjE0ZmUwZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk1Yf/oL1f0hQYXwnlfjmev39B0WVSC/laEA du02fOEAywZOwBiMrvG03ZaGoLNKnTHXifJuXyNTemDPH24f2SJHtlC1Ex9qvQoH IXw1TSQHM8KH+MPGF39znQSa/4hE0tvR9pIDL8RhE9BKPtXzPXtUoNPpo0jKsyat v7wxgVdQDgP9n7KfTYyetEVudF3D6BAYXbPuiwxnm1zsZ5Tj7ZQiPp3+PMbNXPO5 MIhdwAmOmsF3Vh0FX2CsHf8IZ/Agkn45OxsS8fWlO2pdYxlR+x/4018MHZdeMesm MZr8Si7R8X6bT219i6/qOku1VTqm/ir/RpimLo6yIpr0rGnElQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKwabFUcLHAIpmA5EA/eBXOwJ9UTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFj NGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvNmRmYWJiMTctNDQzNy0z YzY2LTk5NmEtN2FjYzA1Nzk4NjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxYzRkMjAtNWI1Yi00MDczLTgz YjctNTI5YTgyYzE1OWZkL2RmMWM0ZDIwLTViNWItNDA3My04M2I3LTUyOWE4MmMx NTlmZC5jcmwwHwYDVR0jBBgwFoAUNrw0KynM+RarIlemQ3NzemhZ61cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01Mjlh ODJjMTU5ZmQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABKyHcD BABKyHgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAKouGJS2JZYUrvIu8DOfMlezAEhOxhwj1CmY8P9dkAtTD cP6K62VZ0o00YGOXCKkNEto/+/vx9zjfx35OeizgLrS8smKvg1wR6u5j2PuZ/ETt s0plJZ4c3ozRx9A3NLVV4aTMShm3V3EmOKQm+IfYjs4rOnQX8gA91HNiEsHdlCNh QqwA+M+G2ggfztgRs9RaecTnG5Y4lCzs/58cZdFvhwUx+7G3oFxjkhdEXShL8avw BQdW6O9RLMNItHYkLff8jfv/MJMFJepPY1BlONxR0oZZAgI+1/kqfOR163TmVwsq 2KfUKL111A5+9Kxyb5tv7Px/E/G4o6h0VUECfNUE7Q== -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:43 2025 by rpki-client