$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/b0d886b9-49ff-3718-b905-7163e2c9f557.roa File: b0d886b9-49ff-3718-b905-7163e2c9f557.roa (raw, json) Hash identifier: LcFnAdKKoir7kd2KpoNqxK6kJhVpg908qS+RqgsBkXg= Subject key identifier: 52:07:47:9E:28:FA:97:F7:47:42:C4:04:05:CE:97:8A:F9:B3:8E:C4 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584875F05582BBDFB4EE54140680 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/b0d886b9-49ff-3718-b905-7163e2c9f557.roa Signing time: Tue 07 Jan 2025 02:00:39 +0000 ROA not before: Tue 07 Jan 2025 02:00:39 +0000 ROA not after: Mon 07 Apr 2025 01:00:39 +0000 asID: 4540 IP address blocks: 74.221.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:f0:55:82:bb:df:b4:ee:54:14:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jan 7 02:00:39 2025 GMT Not After : Apr 7 01:00:39 2025 GMT Subject: CN=c64ec86e-cb15-4bd8-a935-a9ee73c1a62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b8:1f:55:cf:5a:14:96:cf:e6:dd:f1:c0:21: 02:42:0e:56:86:ba:81:c4:54:ec:c9:d8:d3:e8:73: c7:5b:c8:18:1e:88:81:c4:c1:42:33:72:fc:fe:b5: 32:35:0e:95:b7:2e:5f:0c:d0:01:bd:a5:9c:63:ef: ac:63:a6:b4:33:28:3b:6b:90:c1:8c:85:44:f2:97: 14:74:0c:e7:be:f4:42:7f:cd:9e:63:3d:0e:2c:1b: 0f:b2:b6:84:28:c5:e3:68:11:e8:6e:05:c2:8f:e3: 2e:55:75:25:dc:41:52:37:cb:20:47:00:87:aa:56: dc:96:f4:ef:5c:20:c1:b6:80:da:2d:65:74:a6:f4: 1b:7e:9e:50:b6:eb:b4:e0:ea:c5:d3:42:5d:61:52: 8e:68:eb:db:92:f5:95:d7:6a:0c:b2:28:5c:d5:89: 39:a8:c8:84:0b:8f:7c:c8:b0:d5:ea:f8:6e:d0:52: 98:12:15:9f:79:c6:c8:2a:dd:ad:04:3a:84:1e:1b: f3:40:95:4a:47:52:34:dd:b6:11:51:33:09:ab:d4: 7f:cb:b7:9f:e0:99:76:06:f2:18:bd:52:24:29:f6: 1d:fa:f8:04:d5:d4:91:21:eb:c1:91:d2:bc:0c:98: 6f:fa:96:ed:dc:05:62:00:87:f3:32:52:2e:98:fd: ee:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:07:47:9E:28:FA:97:F7:47:42:C4:04:05:CE:97:8A:F9:B3:8E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/b0d886b9-49ff-3718-b905-7163e2c9f557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.221.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c8:89:8d:67:7a:68:7c:19:f3:69:c7:ee:cb:84:56:6e:4c: 8c:80:d0:32:4b:cc:c6:79:42:1c:a2:53:0c:c5:4c:9b:dd:e3: 17:4c:be:e3:15:98:ab:84:a1:38:30:c8:b9:67:34:21:74:f0: 53:e1:6c:f6:21:5b:9f:b5:41:dd:7f:af:25:d2:44:a4:51:80: ba:49:f0:8c:4f:8e:4c:8a:40:86:96:6c:3e:11:a9:3c:8b:1c: ff:e0:d9:9b:28:f5:d8:37:80:ed:74:79:29:c2:f7:fc:d9:f0: 10:d5:f2:96:8a:9c:50:75:81:bc:ed:72:8b:d5:6b:01:b7:11: 8c:b0:bf:f1:b7:4a:ce:b9:20:05:08:ff:21:c5:87:50:e5:7d: 6f:c2:f7:2d:f2:b3:0f:b5:95:35:8d:ff:8d:39:1f:8c:30:74: de:58:79:8a:36:1a:fb:f5:3d:70:48:9c:60:9f:30:e8:af:7a: 58:c3:94:60:d4:4f:de:f3:f0:c6:38:b3:77:7d:04:45:66:43: d0:6b:b7:28:19:2a:8b:bf:28:3c:9c:79:64:e3:d4:10:91:4e: cb:06:64:03:57:3d:01:38:04:19:78:9a:7a:ee:69:5a:a3:30: 73:0f:f1:cd:e8:9a:dc:2f:4a:07:bf:35:cd:35:b2:13:d6:8a: b4:57:e8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18FWCu9+07lQUBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk YzY0ZWM4NmUtY2IxNS00YmQ4LWE5MzUtYTllZTczYzFhNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbgfVc9aFJbP5t3xwCECQg5WhrqBxFTsydjT 6HPHW8gYHoiBxMFCM3L8/rUyNQ6Vty5fDNABvaWcY++sY6a0Myg7a5DBjIVE8pcU dAznvvRCf82eYz0OLBsPsraEKMXjaBHobgXCj+MuVXUl3EFSN8sgRwCHqlbclvTv XCDBtoDaLWV0pvQbfp5Qtuu04OrF00JdYVKOaOvbkvWV12oMsihc1Yk5qMiEC498 yLDV6vhu0FKYEhWfecbIKt2tBDqEHhvzQJVKR1I03bYRUTMJq9R/y7ef4Jl2BvIY vVIkKfYd+vgE1dSRIevBkdK8DJhv+pbt3AViAIfzMlIumP3uMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIHR54o+pf3R0LEBAXOl4r5s47EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYjBkODg2YjktNDlmZi0z NzE4LWI5MDUtNzE2M2UyYzlmNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSt0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHIiY1nemh8GfNpx+7LhFZuTIyA0DJLzMZ5QhyiUwzFTJvd4xdMvuMV mKuEoTgwyLlnNCF08FPhbPYhW5+1Qd1/ryXSRKRRgLpJ8IxPjkyKQIaWbD4RqTyL HP/g2Zso9dg3gO10eSnC9/zZ8BDV8paKnFB1gbztcovVawG3EYywv/G3Ss65IAUI /yHFh1DlfW/C9y3ysw+1lTWN/405H4wwdN5YeYo2Gvv1PXBInGCfMOiveljDlGDU T97z8MY4s3d9BEVmQ9BrtygZKou/KDyceWTj1BCRTssGZANXPQE4BBl4mnruaVqj MHMP8c3omtwvSge/Nc01shPWirRX6Fg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:26:39 2025 by rpki-client