$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa File: bdf6a7d1-a324-35af-8414-d2ae101242c2.roa (raw, json) Hash identifier: W/ONhlZvPMsqDEMHN0Eo+3zUCHFGsBLlpPbH+nGZgiY= Subject key identifier: F0:6D:DF:2A:98:6A:81:E7:57:26:1B:24:04:10:08:6F:5C:D5:7B:BD Certificate issuer: /CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Certificate serial: 010D0C9F43285848E59BCC90F55326F2D0130180 Authority key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 19528 IP address blocks: 74.209.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cc:90:f5:53:26:f2:d0:13:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=2ac98acf-6e6d-4304-a19f-c0fbf62f4544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a4:ac:62:ad:fd:1e:db:58:e7:3b:e8:0a:e1: 07:0b:c3:6f:22:e9:3b:75:d1:00:10:ef:1c:c8:22: de:4d:43:da:fe:89:bb:6d:a2:c3:1f:63:08:1c:e2: 54:1f:ee:ab:2f:ca:cb:0b:5e:ab:e9:e9:38:ee:d4: 50:d4:f4:02:0c:d5:17:71:26:88:73:3a:2c:4a:58: e9:65:d2:ad:b1:30:9a:34:25:13:d5:db:24:2f:4d: 54:b1:69:7d:bf:2d:e5:4c:52:68:14:5e:23:4b:6c: b4:37:b6:8f:50:11:be:87:fe:74:eb:da:b8:54:11: a2:72:3c:c8:a0:a2:51:8c:2b:72:2d:83:0b:4b:3d: 45:16:3a:58:ba:7d:48:0b:13:38:4b:5c:00:14:56: d9:f7:3e:ff:87:54:5e:7f:0f:41:5a:42:9b:85:97: 2f:2b:4d:41:1a:60:95:bc:dc:16:6c:08:64:da:08: 81:65:f9:23:34:41:d8:69:06:4d:02:8a:67:17:b7: 81:20:38:c1:a3:3d:bb:f3:39:c0:c5:6a:eb:64:eb: 27:c6:03:88:0d:45:c5:c6:b6:69:b3:42:25:2f:46: 62:b1:37:29:5a:82:12:3a:20:9b:a1:0a:c2:a6:b4: 97:98:41:e1:93:22:25:bf:9a:d8:a2:33:0f:40:3d: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6D:DF:2A:98:6A:81:E7:57:26:1B:24:04:10:08:6F:5C:D5:7B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/bdf6a7d1-a324-35af-8414-d2ae101242c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.crl X509v3 Authority Key Identifier: keyid:EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer sbgp-ipAddrBlock: critical IPv4: 74.209.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:96:30:3b:e8:29:b2:93:ad:9b:b1:e6:13:df:88:0d:64:98: 39:0d:ae:50:52:0e:4c:f0:25:18:f0:9c:58:a6:ee:b1:c2:30: 04:86:bf:66:65:60:02:85:1c:b1:c7:45:41:8d:6a:fb:42:20: db:74:9e:1e:91:6f:65:fb:c6:88:e1:f7:7a:3b:3c:b3:ad:ef: f2:ac:51:a4:71:03:e6:a2:91:4e:d1:3f:c1:0f:34:b7:18:9e: 1b:0f:33:26:f0:a0:73:37:03:ab:bf:27:ef:e7:2d:03:f1:08: ee:48:c0:68:33:7b:73:aa:80:94:d1:2c:80:3d:d3:18:02:05: 9a:11:fa:51:05:04:60:42:40:37:3d:5e:59:16:77:d8:41:e3: fd:ed:0f:29:ef:5a:d3:02:eb:69:05:e4:62:99:c3:df:e9:97: 9f:1c:07:4e:2e:d6:f8:be:4b:59:d8:a5:d3:e7:3f:34:ba:ac: a4:aa:70:a0:3a:e4:77:17:a9:2e:4a:d4:30:b9:7f:b6:0b:1e: 34:3a:0c:59:97:6f:d6:88:81:32:11:c9:eb:a8:ba:25:57:0c: 81:05:56:60:dc:dc:4e:fc:c7:31:72:cd:4b:4f:ef:9a:fe:b2: e9:c5:64:3d:f8:66:dd:6f:df:6d:c0:ac:43:6b:9f:e0:e5:86: 36:74:11:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8yQ9VMm8tATAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRi MWMzMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MmFjOThhY2YtNmU2ZC00MzA0LWExOWYtYzBmYmY2MmY0NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKSsYq39HttY5zvoCuEHC8NvIuk7ddEAEO8c yCLeTUPa/om7baLDH2MIHOJUH+6rL8rLC16r6ek47tRQ1PQCDNUXcSaIczosSljp ZdKtsTCaNCUT1dskL01UsWl9vy3lTFJoFF4jS2y0N7aPUBG+h/5069q4VBGicjzI oKJRjCtyLYMLSz1FFjpYun1ICxM4S1wAFFbZ9z7/h1Refw9BWkKbhZcvK01BGmCV vNwWbAhk2giBZfkjNEHYaQZNAopnF7eBIDjBoz278znAxWrrZOsnxgOIDUXFxrZp s0IlL0ZisTcpWoISOiCboQrCprSXmEHhkyIlv5rYojMPQD01fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBt3yqYaoHnVyYbJAQQCG9c1Xu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3 MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvYmRmNmE3ZDEtYTMyNC0z NWFmLTg0MTQtZDJhZTEwMTI0MmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWJiNzM5YjgtYTBlZC00NDQ5LThj NjItOTlmZjZiOTRiMWMzL2ViYjczOWI4LWEwZWQtNDQ0OS04YzYyLTk5ZmY2Yjk0 YjFjMy5jcmwwHwYDVR0jBBgwFoAU7v5t+7BVA7zaswGakREDwudU22MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZm NmI5NGIxYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBStGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2WMDvoKbKTrZux5hPfiA1kmDkNrlBSDkzwJRjwnFim7rHCMASGv2Zl YAKFHLHHRUGNavtCINt0nh6Rb2X7xojh93o7PLOt7/KsUaRxA+aikU7RP8EPNLcY nhsPMybwoHM3A6u/J+/nLQPxCO5IwGgze3OqgJTRLIA90xgCBZoR+lEFBGBCQDc9 XlkWd9hB4/3tDynvWtMC62kF5GKZw9/pl58cB04u1vi+S1nYpdPnPzS6rKSqcKA6 5HcXqS5K1DC5f7YLHjQ6DFmXb9aIgTIRyeuouiVXDIEFVmDc3E78xzFyzUtP75r+ sunFZD34Zt1v323ArENrn+DlhjZ0ETc= -----END CERTIFICATE-----Generated at Fri Apr 11 21:52:09 2025 by rpki-client