$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7c9eab0-c60e-3034-80e2-9b6bf5301319.roa File: e7c9eab0-c60e-3034-80e2-9b6bf5301319.roa (raw, json) Hash identifier: OlKl0nPac2nyWbfZrBcGwVoVRlpuO17hd3bzHh3X2io= Subject key identifier: D1:61:57:23:23:18:BB:EA:AD:29:59:26:89:16:D5:78:D9:B4:03:E2 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F43285848A20D9CEF35ACC00DCDF5BF00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7c9eab0-c60e-3034-80e2-9b6bf5301319.roa Signing time: Wed 22 Jan 2025 21:15:16 +0000 ROA not before: Wed 22 Jan 2025 21:15:16 +0000 ROA not after: Tue 22 Apr 2025 20:15:16 +0000 asID: 15164 IP address blocks: 74.51.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:0d:9c:ef:35:ac:c0:0d:cd:f5:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Jan 22 21:15:16 2025 GMT Not After : Apr 22 20:15:16 2025 GMT Subject: CN=ae61035e-a604-4e34-ba1c-4aead034ec8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:a7:98:69:92:2d:26:d9:12:dc:01:1c:29: 13:56:06:a4:f7:63:b8:2c:b1:a7:0f:67:e3:c8:96: 3b:09:1d:13:25:09:81:31:3b:ff:4d:b3:a9:5a:75: 4d:7e:c0:09:c4:73:49:d4:c0:45:8a:ef:a5:1b:92: 4c:0e:7d:6b:99:6a:61:c0:67:e3:52:4a:32:e0:93: 2d:6b:9a:83:f9:59:0d:54:fa:f6:82:68:a7:48:71: d3:3e:63:7e:96:79:07:13:3d:7f:0e:2a:30:3e:ba: 8c:da:08:3f:a7:b7:48:68:d8:e8:ae:db:41:46:21: 80:de:e7:c0:9a:03:1b:22:9c:95:cb:4c:87:00:82: 2a:d3:9b:09:d0:7b:12:28:fa:3d:59:0b:54:f4:03: 6a:96:69:53:02:bb:5e:0b:be:8c:11:1a:9a:61:86: a1:c2:a3:1a:bc:67:0a:02:3a:38:92:65:5e:e5:a5: 18:41:dc:ac:95:da:bf:e8:d7:aa:f7:e8:59:fa:0c: 46:ff:a2:b2:11:6f:27:63:12:01:a0:2d:6a:22:7b: 81:83:f5:bd:8d:15:75:58:f2:77:80:be:07:b5:01: a6:a1:76:dd:1e:17:05:68:65:3c:ea:3c:f6:30:3f: be:3e:46:f6:2b:3d:f4:48:e3:5a:10:31:a1:a9:ab: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:61:57:23:23:18:BB:EA:AD:29:59:26:89:16:D5:78:D9:B4:03:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e7c9eab0-c60e-3034-80e2-9b6bf5301319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 74.51.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:05:18:7f:3c:d2:05:7b:a0:ad:7f:52:5c:d6:27:e4:06:01: 5b:74:21:e3:53:eb:27:56:9b:19:bc:d4:45:8d:53:a7:28:0c: 78:1e:1a:6e:f6:4d:04:c2:5b:eb:e6:04:67:ec:71:d4:ad:ad: 33:06:6f:5a:72:97:ff:59:e2:35:f1:05:0f:d9:19:86:8f:6e: b7:b0:36:29:9e:f1:8e:3c:64:d4:fd:62:7d:71:2d:29:c6:36: 73:13:b7:16:f1:ae:e5:42:69:18:d4:3a:bd:9d:28:ba:ff:8b: 04:dc:7a:66:b9:41:da:2b:46:bf:85:3f:32:c1:42:1a:cc:5f: 51:9f:e1:c9:a8:c8:e8:ca:0d:78:26:6d:e9:13:b3:48:a5:6c: 13:ae:be:92:3a:3a:c0:45:15:17:80:bf:5e:79:63:3e:b0:2b: 9a:51:c6:0e:f8:70:8b:e2:ee:8b:b8:2c:64:41:9c:73:7e:56: b9:c5:66:96:15:ed:8f:db:4a:98:31:56:fb:53:5e:b7:1b:aa: 9e:30:ca:40:e9:3d:3c:0a:96:55:f7:68:74:25:e4:37:fc:77: 19:01:56:4f:a5:80:39:c3:f3:f3:ac:31:5c:d3:09:75:97:72: b9:83:38:7e:81:af:f0:04:c6:b7:aa:88:c9:c9:6b:7a:82:55: f4:19:7d:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiiDZzvNazADc31vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDEyMjIxMTUxNloXDTI1MDQyMjIwMTUxNlowLzEtMCsGA1UEAxMk YWU2MTAzNWUtYTYwNC00ZTM0LWJhMWMtNGFlYWQwMzRlYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugGnmGmSLSbZEtwBHCkTVgak92O4LLGnD2fj yJY7CR0TJQmBMTv/TbOpWnVNfsAJxHNJ1MBFiu+lG5JMDn1rmWphwGfjUkoy4JMt a5qD+VkNVPr2gminSHHTPmN+lnkHEz1/DiowPrqM2gg/p7dIaNjorttBRiGA3ufA mgMbIpyVy0yHAIIq05sJ0HsSKPo9WQtU9ANqlmlTArteC76MERqaYYahwqMavGcK Ajo4kmVe5aUYQdysldq/6Neq9+hZ+gxG/6KyEW8nYxIBoC1qInuBg/W9jRV1WPJ3 gL4HtQGmoXbdHhcFaGU86jz2MD++Pkb2Kz30SONaEDGhqatQwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFhVyMjGLvqrSlZJokW1XjZtAPiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZTdjOWVhYjAtYzYwZS0z MDM0LTgwZTItOWI2YmY1MzAxMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjPVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoFGH880gV7oK1/UlzWJ+QGAVt0IeNT6ydWmxm81EWNU6coDHgeGm72 TQTCW+vmBGfscdStrTMGb1pyl/9Z4jXxBQ/ZGYaPbrewNime8Y48ZNT9Yn1xLSnG NnMTtxbxruVCaRjUOr2dKLr/iwTcema5QdorRr+FPzLBQhrMX1Gf4cmoyOjKDXgm bekTs0ilbBOuvpI6OsBFFReAv155Yz6wK5pRxg74cIvi7ou4LGRBnHN+VrnFZpYV 7Y/bSpgxVvtTXrcbqp4wykDpPTwKllX3aHQl5Df8dxkBVk+lgDnD8/OsMVzTCXWX crmDOH6Br/AExreqiMnJa3qCVfQZfd0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:16:13 2025 by rpki-client