$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa File: f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa (raw, json) Hash identifier: wtVgMe8hcN5JFQN0F4pUm364wG0/w6OCqDRp2xGKxQU= Subject key identifier: 91:20:27:FC:13:F1:57:3E:9C:6A:49:60:74:E3:CB:09:71:20:66:9C Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285849552950E44273331C74BE05F0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 74.126.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:50:e4:42:73:33:1c:74:be:05:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=97b7bfd0-caf1-4353-b89f-e60363dfe49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:70:f1:2e:d2:8c:f7:c1:86:16:0c:b5:77:f9: b2:1a:18:0b:ab:e9:5a:b0:03:2d:62:13:ce:ce:28: 73:ba:ea:76:62:74:5b:3e:2f:23:c0:62:cd:29:42: 27:ff:00:d3:54:34:ab:02:33:b9:af:58:5f:f6:8e: 11:72:b6:71:2a:40:4d:8b:df:aa:e6:a4:92:ce:92: db:e2:2c:e0:eb:80:4d:8b:70:40:ff:65:16:99:e9: b8:e7:21:15:bd:2c:cc:ee:71:b0:b7:65:bb:a1:0c: 77:cb:51:eb:fb:3f:ae:7d:0c:96:c7:35:58:94:2d: 3d:3b:34:5b:13:a3:cf:19:c2:40:f8:0c:4e:01:7f: 5f:2f:f3:32:b9:df:ee:11:88:f1:87:4b:b9:c5:87: 82:31:aa:d0:47:9e:de:e2:39:a6:93:39:f5:39:14: 18:8e:38:17:dd:97:e4:4e:bc:d1:47:b0:10:2c:e3: b5:91:c0:87:69:23:55:64:ee:1c:04:d0:b7:7e:07: 06:5e:67:c3:44:84:c5:7f:5f:66:02:ba:ac:3f:ff: e1:b6:44:36:64:ec:44:e0:e5:7d:3d:ff:8d:35:07: 35:ef:c6:8a:68:49:02:68:da:aa:6f:44:37:cc:e1: d5:60:ef:6e:3d:26:3e:aa:cf:c7:f4:7b:57:48:22: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:20:27:FC:13:F1:57:3E:9C:6A:49:60:74:E3:CB:09:71:20:66:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/f2f5b3c0-92c1-3332-9faf-1a8a9e78d23c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.126.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:52:2b:bb:2c:ce:04:83:45:a2:59:c0:5e:b9:96:87:8d:be: e1:e3:e0:01:55:17:64:37:0e:24:85:af:d9:4b:a6:77:fe:66: bb:49:25:d7:9b:37:1e:32:0b:87:a6:2a:82:be:b8:12:8a:f2: 25:94:f4:e0:91:93:88:06:6b:70:3f:aa:7f:8c:e5:46:62:ad: 48:66:58:d0:88:ec:6a:7e:39:fc:7e:b8:e6:70:81:18:17:2b: 41:73:36:7a:4e:c8:ff:3a:cb:aa:81:ef:f8:19:ca:9a:fe:2c: 12:f5:9f:a2:f5:d0:7f:89:04:5f:df:3b:2f:5f:dd:2c:fd:cb: e9:72:1e:63:53:a7:cc:22:a0:92:8c:40:b5:03:71:11:b1:f6: c7:3d:ca:1f:61:a9:e6:9f:8d:65:b5:14:22:23:72:8a:aa:85: 3c:70:81:2c:bc:b7:b6:13:44:2a:b3:27:a8:80:2e:81:77:ee: 8b:47:9b:85:6e:e6:af:f2:dc:12:3c:18:c8:1f:5b:64:1b:d7: 96:4e:9d:6b:8b:28:f8:d3:e5:50:15:48:01:a6:47:e8:59:78: 0e:6d:13:b7:d6:d2:22:16:c9:58:ba:bf:d6:53:93:19:48:57: 90:5d:6d:d2:da:f6:91:b2:d9:ad:08:e1:80:fe:98:e5:63:cb: ce:06:7d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVDkQnMzHHS+BfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk OTdiN2JmZDAtY2FmMS00MzUzLWI4OWYtZTYwMzYzZGZlNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHDxLtKM98GGFgy1d/myGhgLq+lasAMtYhPO zihzuup2YnRbPi8jwGLNKUIn/wDTVDSrAjO5r1hf9o4RcrZxKkBNi9+q5qSSzpLb 4izg64BNi3BA/2UWmem45yEVvSzM7nGwt2W7oQx3y1Hr+z+ufQyWxzVYlC09OzRb E6PPGcJA+AxOAX9fL/Myud/uEYjxh0u5xYeCMarQR57e4jmmkzn1ORQYjjgX3Zfk TrzRR7AQLOO1kcCHaSNVZO4cBNC3fgcGXmfDRITFf19mArqsP//htkQ2ZOxE4OV9 Pf+NNQc178aKaEkCaNqqb0Q3zOHVYO9uPSY+qs/H9HtXSCI4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEgJ/wT8Vc+nGpJYHTjywlxIGacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZjJmNWIzYzAtOTJjMS0z MzMyLTlmYWYtMWE4YTllNzhkMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNSK7sszgSDRaJZwF65loeNvuHj4AFVF2Q3DiSFr9lLpnf+ZrtJJdeb Nx4yC4emKoK+uBKK8iWU9OCRk4gGa3A/qn+M5UZirUhmWNCI7Gp+Ofx+uOZwgRgX K0FzNnpOyP86y6qB7/gZypr+LBL1n6L10H+JBF/fOy9f3Sz9y+lyHmNTp8wioJKM QLUDcRGx9sc9yh9hqeafjWW1FCIjcoqqhTxwgSy8t7YTRCqzJ6iALoF37otHm4Vu 5q/y3BI8GMgfW2Qb15ZOnWuLKPjT5VAVSAGmR+hZeA5tE7fW0iIWyVi6v9ZTkxlI V5BdbdLa9pGy2a0I4YD+mOVjy84GfSU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:04:55 2025 by rpki-client