$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa File: de9a14da-eb21-3df9-88a3-a094282ec012.roa (raw, json) Hash identifier: d+osz5pxk+O1O/x2i+CkqfZWeTRZHckcin4kMh1yBbE= Subject key identifier: 26:DF:D8:E0:EB:A4:20:33:5B:BF:D8:7D:12:DA:4C:74:1D:44:F4:29 Certificate issuer: /CN=d7a960e2-9fa8-4b77-8609-5ee424f44087 Certificate serial: 010D0C9F432858486AC5976FDB3B5C3BEAF53680 Authority key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa Signing time: Fri 03 Jan 2025 02:00:40 +0000 ROA not before: Fri 03 Jan 2025 02:00:40 +0000 ROA not after: Thu 03 Apr 2025 01:00:40 +0000 asID: 19318 IP address blocks: 74.50.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:c5:97:6f:db:3b:5c:3b:ea:f5:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087 Validity Not Before: Jan 3 02:00:40 2025 GMT Not After : Apr 3 01:00:40 2025 GMT Subject: CN=218b2f3f-d2df-4bb5-ae2d-948803a2dcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:12:6a:f0:64:db:16:b2:25:c0:a1:17:02: f8:ad:b9:31:c3:bf:3a:4c:4b:70:db:51:89:8f:c3: 20:a2:11:de:65:6a:08:de:ce:21:ad:11:77:2f:04: 35:06:61:8c:79:23:d8:62:c8:02:50:2c:ff:76:90: 20:0c:4a:27:1b:75:e1:29:58:ad:d4:8a:76:40:b4: 5d:c8:d6:be:2b:29:eb:87:92:f8:7f:39:6e:bd:d7: e7:1c:2c:98:94:88:71:46:d6:e8:89:c9:bc:35:e4: c7:65:2f:fd:5e:b2:08:37:f2:96:aa:8a:07:a7:a5: c9:fc:f9:ea:0e:30:83:4c:4e:2b:42:1c:ce:16:04: 8f:1d:fa:57:32:a3:4a:a6:16:01:c1:cc:c6:bf:a3: aa:77:41:f8:87:97:7d:af:63:ea:a4:56:37:ec:29: 1f:32:26:5a:02:ed:2c:eb:62:32:ff:b9:d9:11:04: b1:dc:a4:91:9e:33:0b:d5:4b:92:78:40:60:e1:dc: 53:fc:10:ef:16:dd:e5:c5:d7:99:48:9b:fb:ca:68: e3:00:27:4c:b8:cb:7b:18:4d:86:79:ee:c9:13:a6: 5d:66:87:0b:4f:59:d6:19:45:0a:11:02:6b:b3:aa: c1:08:c0:07:43:3b:ff:e7:cf:4b:d3:eb:4b:d5:51: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:DF:D8:E0:EB:A4:20:33:5B:BF:D8:7D:12:DA:4C:74:1D:44:F4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/de9a14da-eb21-3df9-88a3-a094282ec012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl X509v3 Authority Key Identifier: keyid:A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer sbgp-ipAddrBlock: critical IPv4: 74.50.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f9:47:1f:4e:22:fb:10:84:d4:56:41:92:6a:2b:d7:a5:47: a0:56:ae:38:2d:11:60:05:b6:8f:f0:3d:a7:fc:f0:56:f9:77: bf:cd:b2:08:d2:a0:95:f0:85:0e:4b:8a:8e:33:79:57:b6:bc: af:3f:e2:29:d2:c6:6e:44:5a:0e:37:d3:35:16:f5:38:ac:76: 5f:cf:02:39:0b:e1:8b:74:35:6d:d0:23:7a:27:54:18:b6:40: 84:99:b8:1a:40:52:94:93:93:27:b5:73:33:44:39:be:8d:e0: eb:ed:f7:9f:e5:6f:80:8a:ad:bb:33:ad:0c:fe:b6:5f:4b:74: 13:23:a6:0a:38:72:89:00:b5:f5:5b:42:2e:bd:36:91:ee:d6: d2:a3:13:93:f6:3e:03:e2:fe:fa:1d:39:cf:d6:0b:a0:aa:88: 1f:62:2f:c0:66:71:48:cd:10:f2:2a:8c:ec:f1:66:83:89:1e: 94:77:dc:18:24:12:50:31:dd:09:09:0b:e4:9b:e8:8d:2b:d8: 19:b2:1d:72:e3:01:4e:eb:19:8e:c7:54:a1:25:21:14:70:ee: 0a:58:ae:ca:3d:8f:d4:5b:4f:b8:db:4e:0e:04:2b:50:52:b4: ef:71:e4:dd:0d:7c:53:ef:38:fb:20:30:77:55:75:bc:00:28: 9d:66:de:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhqxZdv2ztcO+r1NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdhOTYwZTItOWZhOC00Yjc3LTg2MDktNWVlNDI0ZjQ0 MDg3MB4XDTI1MDEwMzAyMDA0MFoXDTI1MDQwMzAxMDA0MFowLzEtMCsGA1UEAxMk MjE4YjJmM2YtZDJkZi00YmI1LWFlMmQtOTQ4ODAzYTJkY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy0SavBk2xayJcChFwL4rbkxw786TEtw21GJ j8MgohHeZWoI3s4hrRF3LwQ1BmGMeSPYYsgCUCz/dpAgDEonG3XhKVit1Ip2QLRd yNa+Kynrh5L4fzluvdfnHCyYlIhxRtboicm8NeTHZS/9XrIIN/KWqooHp6XJ/Pnq DjCDTE4rQhzOFgSPHfpXMqNKphYBwczGv6Oqd0H4h5d9r2PqpFY37CkfMiZaAu0s 62Iy/7nZEQSx3KSRnjML1UuSeEBg4dxT/BDvFt3lxdeZSJv7ymjjACdMuMt7GE2G ee7JE6ZdZocLT1nWGUUKEQJrs6rBCMAHQzv/589L0+tL1VFSEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbf2ODrpCAzW7/YfRLaTHQdRPQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2E5 NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0MjRmNDQwODcvZGU5YTE0ZGEtZWIyMS0z ZGY5LTg4YTMtYTA5NDI4MmVjMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdhOTYwZTItOWZhOC00Yjc3LTg2 MDktNWVlNDI0ZjQ0MDg3L2Q3YTk2MGUyLTlmYTgtNGI3Ny04NjA5LTVlZTQyNGY0 NDA4Ny5jcmwwHwYDVR0jBBgwFoAUoqbvy0Q6lIUzBRslzIGoSn40Wx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2E5NjBlMi05ZmE4LTRiNzctODYwOS01ZWU0 MjRmNDQwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB35Rx9OIvsQhNRWQZJqK9elR6BWrjgtEWAFto/wPaf88Fb5d7/NsgjS oJXwhQ5Lio4zeVe2vK8/4inSxm5EWg430zUW9Tisdl/PAjkL4Yt0NW3QI3onVBi2 QISZuBpAUpSTkye1czNEOb6N4Ovt95/lb4CKrbszrQz+tl9LdBMjpgo4cokAtfVb Qi69NpHu1tKjE5P2PgPi/vodOc/WC6CqiB9iL8BmcUjNEPIqjOzxZoOJHpR33Bgk ElAx3QkJC+Sb6I0r2BmyHXLjAU7rGY7HVKElIRRw7gpYrso9j9RbT7jbTg4EK1BS tO9x5N0NfFPvOPsgMHdVdbwAKJ1m3hM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:09 2025 by rpki-client