$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/945146cc-65ed-36a2-ae21-a4c8ad11e413.roa File: 945146cc-65ed-36a2-ae21-a4c8ad11e413.roa (raw, json) Hash identifier: AtzEfPhsRze0orLRHZNa0c8ncKlTxYTMjLljUHknV4s= Subject key identifier: 95:C1:AA:14:A6:00:CF:F9:EA:FF:7C:AA:AD:A9:97:4F:EE:FC:C9:BB Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F43285849F9DFD9EBA718CACE8D4D5B40 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/945146cc-65ed-36a2-ae21-a4c8ad11e413.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 15290 IP address blocks: 74.216.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:d9:eb:a7:18:ca:ce:8d:4d:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=68a48087-6580-425a-8ce8-226d1bb47378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e0:0a:4c:dd:7d:6f:f0:12:41:ba:de:57:83: 22:8e:92:f3:99:3c:d8:a7:a2:0c:ff:c9:37:ce:7a: ce:55:5b:88:c0:62:6b:53:1a:88:71:73:13:d8:68: 5d:0e:cf:3b:f4:24:cb:36:c9:49:b5:eb:bf:31:7b: 32:21:2d:f9:2c:38:94:a1:d4:a8:3a:5e:80:af:d4: c9:28:2c:3f:d1:fb:41:68:c9:b0:4b:d2:c6:3a:4d: 8b:fc:d5:fa:c9:3e:e5:38:be:f8:26:30:64:ab:0b: 47:c5:b7:56:ce:1b:49:27:27:c3:c2:4b:3c:54:41: 6a:e8:40:80:af:90:42:58:15:fa:e8:8e:9e:31:cd: f7:45:96:18:f2:6b:f0:10:0b:45:d2:e1:d8:26:f9: 69:e9:df:5e:64:af:8c:ff:c8:df:45:87:4a:07:44: c1:b9:5c:76:ed:6e:9e:08:86:f1:1f:6a:6c:a5:6c: 74:aa:2f:21:cd:6f:b3:fb:db:85:68:b9:75:4e:d7: b4:07:4a:8f:a8:c5:2a:c1:4c:4a:9a:8d:e6:a4:80: 94:c3:d5:c9:dc:ee:74:69:d1:5d:6d:1d:1f:9e:da: 34:a9:db:ac:ab:7b:2a:59:5e:e9:48:ee:5e:5d:f9: b5:cf:5a:0a:78:db:15:ae:84:4e:d1:5c:70:1e:dc: 5d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C1:AA:14:A6:00:CF:F9:EA:FF:7C:AA:AD:A9:97:4F:EE:FC:C9:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/945146cc-65ed-36a2-ae21-a4c8ad11e413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 74.216.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d1:10:93:4b:5c:ee:7b:07:ed:83:c4:f2:75:e1:31:29:6f: 39:e7:30:dc:77:06:ae:8f:33:80:5a:80:ef:33:f6:26:82:ce: d9:72:0e:29:aa:82:a1:84:bc:0f:88:9e:17:5e:f6:5e:7e:52: a7:eb:88:99:52:41:a0:7b:ab:c5:b6:7d:bc:31:d7:d4:52:12: 36:4c:4b:13:94:35:03:39:68:6c:18:56:ba:b5:f6:33:1b:29: 8a:d2:1e:e8:f0:3a:c5:87:ce:44:69:89:12:3d:15:be:be:ad: 28:51:fe:0b:3e:9c:f4:13:40:43:72:00:40:b8:b7:bd:ce:cb: 58:8a:59:3c:e4:07:55:dc:74:3c:73:c3:b2:b1:a2:fc:7e:a0: 6f:00:50:71:80:fb:ef:08:ba:90:50:5b:ca:c4:59:d6:57:59: 1b:e6:db:11:f7:57:49:91:95:76:13:72:02:50:79:e8:14:a2: 3e:07:c9:d9:9f:82:18:24:8a:6a:5b:31:32:64:31:15:d2:87: c0:67:2d:6c:1f:c3:9b:18:35:14:86:1d:39:d3:95:5d:29:44: 40:59:2e:69:e8:be:b4:cc:92:4f:e9:30:52:4c:a8:ee:8c:d4: 1b:4b:e7:94:af:c4:a2:2f:5f:1b:f5:3c:d9:a0:5a:c7:3c:f0: f5:07:c2:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539nrpxjKzo1NW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NjhhNDgwODctNjU4MC00MjVhLThjZTgtMjI2ZDFiYjQ3Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+AKTN19b/ASQbreV4MijpLzmTzYp6IM/8k3 znrOVVuIwGJrUxqIcXMT2GhdDs879CTLNslJteu/MXsyIS35LDiUodSoOl6Ar9TJ KCw/0ftBaMmwS9LGOk2L/NX6yT7lOL74JjBkqwtHxbdWzhtJJyfDwks8VEFq6ECA r5BCWBX66I6eMc33RZYY8mvwEAtF0uHYJvlp6d9eZK+M/8jfRYdKB0TBuVx27W6e CIbxH2pspWx0qi8hzW+z+9uFaLl1Tte0B0qPqMUqwUxKmo3mpICUw9XJ3O50adFd bR0fnto0qdusq3sqWV7pSO5eXfm1z1oKeNsVroRO0VxwHtxdlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXBqhSmAM/56v98qq2pl0/u/Mm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvOTQ1MTQ2Y2MtNjVlZC0z NmEyLWFlMjEtYTRjOGFkMTFlNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASthvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7REJNLXO57B+2DxPJ14TEpbznnMNx3Bq6PM4BagO8z9iaCztlyDimq gqGEvA+Inhde9l5+UqfriJlSQaB7q8W2fbwx19RSEjZMSxOUNQM5aGwYVrq19jMb KYrSHujwOsWHzkRpiRI9Fb6+rShR/gs+nPQTQENyAEC4t73Oy1iKWTzkB1XcdDxz w7Kxovx+oG8AUHGA++8IupBQW8rEWdZXWRvm2xH3V0mRlXYTcgJQeegUoj4Hydmf ghgkimpbMTJkMRXSh8BnLWwfw5sYNRSGHTnTlV0pREBZLmnovrTMkk/pMFJMqO6M 1BtL55SvxKIvXxv1PNmgWsc88PUHwjA= -----END CERTIFICATE-----Generated at Fri Jun 6 18:28:59 2025 by rpki-client