$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa File: bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa (raw, json) Hash identifier: o56UHt/lDIvZxS1RKFd+/7qnfqwU/L+Z7f8mXva0fBk= Subject key identifier: 52:F3:4D:57:51:FB:6A:C7:9F:CE:F1:84:20:B8:50:4D:89:7B:3D:B9 Certificate issuer: /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Certificate serial: 010D0C9F43285848E59BCCC502965F49C2108280 Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 19528 IP address blocks: 74.209.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cc:c5:02:96:5f:49:c2:10:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=aa57956e-1eea-47a5-9971-057eba2258ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:5a:f1:af:18:42:71:78:12:50:99:1f:a7: b2:58:b9:db:02:93:83:43:44:6d:04:09:00:c5:7b: 6a:26:fb:1a:d4:1d:32:04:46:2d:ba:71:d2:12:e9: 9f:aa:d9:b6:02:cf:d0:25:d0:d3:80:08:22:fa:ea: f3:b1:de:cf:d1:f8:dd:04:b7:a6:60:04:9a:b0:f7: db:3b:12:62:34:dc:32:be:fa:b8:90:a5:85:e5:47: 96:1d:22:c3:e4:e7:62:bc:57:d0:53:0e:43:d6:35: 51:ec:cd:7c:c5:d7:10:a2:25:ee:5a:88:4a:0c:18: f0:01:c8:37:5a:ef:93:d7:af:e7:77:20:08:24:39: 22:83:eb:70:67:83:fe:3f:e1:96:f7:c1:cc:a2:e3: 20:cd:e4:3d:db:21:23:3e:8f:12:47:56:6f:57:68: c1:40:03:36:c0:1e:61:1f:6b:2d:f4:15:3a:f5:ed: c7:17:f6:87:df:1b:4e:dc:8d:11:51:05:85:19:6b: 88:0a:f0:fc:57:db:3b:4b:96:f8:cc:43:57:14:ce: dc:35:79:5a:a6:9e:5b:46:1a:c9:ca:f2:db:74:28: c2:40:37:ed:51:17:c9:49:09:26:1f:26:07:d5:c9: 5a:3a:ea:47:10:96:98:f9:e9:ee:fc:3c:0f:0b:af: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F3:4D:57:51:FB:6A:C7:9F:CE:F1:84:20:B8:50:4D:89:7B:3D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bca6eedb-e25c-3d30-a562-4ee94c5202c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl X509v3 Authority Key Identifier: keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer sbgp-ipAddrBlock: critical IPv4: 74.209.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5e:71:dd:f3:9c:1d:56:38:26:5d:6e:5c:71:14:5e:ac:4e: ce:63:9a:8a:0e:46:8c:3a:1a:dd:13:9d:62:ce:f9:3d:f0:09: a3:b1:48:53:d9:38:18:1c:4c:2a:17:66:dd:60:f1:c0:8f:0c: 03:99:44:b7:62:88:61:96:29:56:b1:73:d0:b8:e2:ab:98:35: b5:3f:a6:74:ac:cb:b3:24:f5:bd:cd:0d:3a:2d:b3:e3:17:9d: 9d:4c:4a:6b:ca:ab:de:84:ea:46:7e:9f:3f:c9:4a:f0:dc:38: 48:f6:b4:e5:5b:b1:81:77:72:7e:5d:1d:86:d4:20:f1:09:e8: 4c:5f:75:be:48:c0:9c:a8:7a:b6:63:88:78:28:0a:86:2e:f5: 41:8c:fe:a4:a8:cc:bd:66:0b:df:52:97:8c:97:15:13:28:25: fb:79:9a:b5:1f:f4:37:b4:8f:cf:ca:d8:30:f7:ea:ae:36:2b: 6a:da:32:03:b7:5e:b9:97:7e:41:89:f8:61:16:d3:fc:1f:fd: 1b:01:44:c1:72:2b:7e:97:d0:be:81:ed:71:11:47:c9:94:34: cf:74:9f:2a:9f:1c:30:1b:89:e5:f6:01:c3:18:62:77:d7:33: ec:83:77:e3:d9:88:62:fd:84:94:f2:98:3b:c1:9f:c4:88:3f: e2:e3:a8:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8zFApZfScIQgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRi MWMzMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YWE1Nzk1NmUtMWVlYS00N2E1LTk5NzEtMDU3ZWJhMjI1OGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogFa8a8YQnF4ElCZH6eyWLnbApODQ0RtBAkA xXtqJvsa1B0yBEYtunHSEumfqtm2As/QJdDTgAgi+urzsd7P0fjdBLemYASasPfb OxJiNNwyvvq4kKWF5UeWHSLD5OdivFfQUw5D1jVR7M18xdcQoiXuWohKDBjwAcg3 Wu+T16/ndyAIJDkig+twZ4P+P+GW98HMouMgzeQ92yEjPo8SR1ZvV2jBQAM2wB5h H2st9BU69e3HF/aH3xtO3I0RUQWFGWuICvD8V9s7S5b4zENXFM7cNXlapp5bRhrJ yvLbdCjCQDftURfJSQkmHyYH1claOupHEJaY+enu/DwPC6+GswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLzTVdR+2rHn87xhCC4UE2Jez25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3 MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvYmNhNmVlZGItZTI1Yy0z ZDMwLWE1NjItNGVlOTRjNTIwMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWJiNzM5YjgtYTBlZC00NDQ5LThj NjItOTlmZjZiOTRiMWMzL2ViYjczOWI4LWEwZWQtNDQ0OS04YzYyLTk5ZmY2Yjk0 YjFjMy5jcmwwHwYDVR0jBBgwFoAU7v5t+7BVA7zaswGakREDwudU22MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZm NmI5NGIxYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBStG+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVecd3znB1WOCZdblxxFF6sTs5jmooORow6Gt0TnWLO+T3wCaOxSFPZ OBgcTCoXZt1g8cCPDAOZRLdiiGGWKVaxc9C44quYNbU/pnSsy7Mk9b3NDTots+MX nZ1MSmvKq96E6kZ+nz/JSvDcOEj2tOVbsYF3cn5dHYbUIPEJ6Exfdb5IwJyoerZj iHgoCoYu9UGM/qSozL1mC99Sl4yXFRMoJft5mrUf9De0j8/K2DD36q42K2raMgO3 XrmXfkGJ+GEW0/wf/RsBRMFyK36X0L6B7XERR8mUNM90nyqfHDAbieX2AcMYYnfX M+yDd+PZiGL9hJTymDvBn8SIP+LjqMY= -----END CERTIFICATE-----Generated at Fri Apr 11 23:42:59 2025 by rpki-client