$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa File: 17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa (raw, json) Hash identifier: KjCr3B3pNnxXlPjYqJ85wygD6nJuW5Jtpy/h8ihva5k= Subject key identifier: B1:1D:56:37:9F:36:2F:3A:B7:54:D5:AC:3F:B7:15:F0:91:CC:8B:E8 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285849552950F59CBEA5961E901EA0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 74.221.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:50:f5:9c:be:a5:96:1e:90:1e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=389acf43-d525-4016-b016-07ffc3df2745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:57:07:fe:3e:b8:11:9e:5a:24:3c:34:18:73: 05:9e:c3:ee:a0:c8:54:7a:3a:ec:39:c9:5a:39:14: a8:42:0d:5c:31:b6:98:be:f3:86:7a:28:76:43:dc: 40:34:a8:ed:e4:bf:ef:24:7c:8f:29:8a:5b:a0:55: 1b:df:f2:2b:6e:39:a0:d1:70:a4:e7:4a:e1:70:a6: a6:1a:ec:d4:91:9d:c8:fc:92:6f:0c:84:7b:35:6d: e1:af:64:65:13:28:01:f8:8c:0d:34:b1:29:3f:05: f4:6b:c5:98:df:a4:52:e5:fe:ff:85:ff:4b:53:70: 3c:50:fd:c4:89:1c:ad:bc:83:35:4b:25:61:8f:49: fd:25:68:98:e1:1c:d1:6f:fe:5d:29:3d:25:ff:21: 7f:4c:77:30:d8:f0:d7:2f:df:1e:9c:5c:60:e5:76: 82:f0:35:c1:91:df:24:5f:13:41:41:05:bd:5c:d7: e4:43:ca:63:04:7f:79:30:92:ca:a9:66:5b:14:41: d7:17:05:ae:3a:51:0c:0f:ad:1f:f3:c5:f1:22:7d: 7e:7a:57:86:75:cd:4e:c0:30:28:8c:91:6d:cb:97: c2:21:dd:71:a0:4f:7f:8e:72:b0:41:ca:05:f8:b0: ae:5f:63:01:63:a6:7f:c9:16:0c:67:12:95:2a:06: 0e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1D:56:37:9F:36:2F:3A:B7:54:D5:AC:3F:B7:15:F0:91:CC:8B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/17ffddb4-f9f8-380b-a246-0aaa5b4c00f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.221.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:63:50:e0:1b:bc:00:22:32:71:3d:a4:ef:41:e5:2f:3c:7e: b1:d1:84:ba:58:fd:44:4e:de:96:11:0e:4b:ff:ac:cd:5f:b9: b0:78:43:ea:25:d1:52:95:78:17:bf:7a:45:8b:76:19:4e:31: 1b:79:0d:e1:57:b4:a0:f5:62:dd:19:e9:89:06:ff:f9:0c:af: aa:ab:34:3c:ce:5f:95:c3:41:3d:81:4a:39:91:e0:03:ec:71: 63:e9:dc:92:e6:05:a7:fe:1a:85:f3:a5:3c:fb:90:16:12:1c: 22:77:33:08:4e:64:dd:f5:4b:73:ea:c9:95:a1:2b:d9:7a:20: 05:3c:b0:26:71:8a:4c:73:69:cf:fd:6d:a6:99:b5:e0:ed:2d: 39:fc:87:ad:96:b5:ae:b5:62:fd:ea:71:e6:bc:17:24:38:96: 37:c4:aa:fc:62:f6:cc:d3:f6:8b:9c:52:5b:64:20:bc:ed:c2: 99:90:f0:34:54:e9:fc:78:f1:d7:bc:9f:41:6c:53:0a:3e:54: 99:9c:da:35:28:12:ad:4b:8e:fc:54:58:47:72:e3:79:33:53: 0e:95:b0:80:b3:9f:c7:02:55:17:98:df:2e:46:d1:68:bd:35: 4a:50:71:2f:de:cb:f0:24:4c:c4:9c:3f:76:70:dc:4d:36:6a: 62:bf:e3:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVD1nL6llh6QHqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk Mzg5YWNmNDMtZDUyNS00MDE2LWIwMTYtMDdmZmMzZGYyNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFcH/j64EZ5aJDw0GHMFnsPuoMhUejrsOcla ORSoQg1cMbaYvvOGeih2Q9xANKjt5L/vJHyPKYpboFUb3/Irbjmg0XCk50rhcKam GuzUkZ3I/JJvDIR7NW3hr2RlEygB+IwNNLEpPwX0a8WY36RS5f7/hf9LU3A8UP3E iRytvIM1SyVhj0n9JWiY4RzRb/5dKT0l/yF/THcw2PDXL98enFxg5XaC8DXBkd8k XxNBQQW9XNfkQ8pjBH95MJLKqWZbFEHXFwWuOlEMD60f88XxIn1+eleGdc1OwDAo jJFty5fCId1xoE9/jnKwQcoF+LCuX2MBY6Z/yRYMZxKVKgYOiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEdVjefNi86t1TVrD+3FfCRzIvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMTdmZmRkYjQtZjlmOC0z ODBiLWEyNDYtMGFhYTViNGMwMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZjUOAbvAAiMnE9pO9B5S88frHRhLpY/URO3pYRDkv/rM1fubB4Q+ol 0VKVeBe/ekWLdhlOMRt5DeFXtKD1Yt0Z6YkG//kMr6qrNDzOX5XDQT2BSjmR4APs cWPp3JLmBaf+GoXzpTz7kBYSHCJ3MwhOZN31S3PqyZWhK9l6IAU8sCZxikxzac/9 baaZteDtLTn8h62Wta61Yv3qcea8FyQ4ljfEqvxi9szT9oucUltkILztwpmQ8DRU 6fx48de8n0FsUwo+VJmc2jUoEq1LjvxUWEdy43kzUw6VsICzn8cCVReY3y5G0Wi9 NUpQcS/ey/AkTMScP3Zw3E02amK/44I= -----END CERTIFICATE-----Generated at Fri Apr 11 21:03:14 2025 by rpki-client