$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/423f463f-bd67-3650-ac0c-a2c0a834c6e6.roa File: 423f463f-bd67-3650-ac0c-a2c0a834c6e6.roa (raw, json) Hash identifier: JKmjYRJvaANCzpN4OtL4iZdLCywNkH26lGsXLopU+A8= Subject key identifier: C8:98:E9:EB:99:5E:69:35:C5:09:3B:AD:68:8F:F1:2D:44:12:DC:D4 Certificate issuer: /CN=b3f5323f-8bea-48c6-aa03-949255dd1997 Certificate serial: 010D0C9F432858497F09A495683985D54D484900 Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/423f463f-bd67-3650-ac0c-a2c0a834c6e6.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 46474 IP address blocks: 74.205.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a4:95:68:39:85:d5:4d:48:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=68ca3178-4dd6-417f-862c-106ca3126639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:7a:27:24:b0:7c:e5:21:17:90:fb:76:97: 63:8f:ad:a7:12:f7:8a:06:ca:e6:8b:7f:a0:ba:c3: 5a:e4:81:c6:39:8d:82:27:48:5a:c8:ef:88:8c:72: 93:b6:16:a0:7a:a2:a5:72:be:0c:e9:0f:13:47:4f: 17:05:17:fc:06:12:ce:4c:b0:e4:6e:8d:66:37:1d: b2:87:5c:8b:1d:cc:d2:ed:26:92:02:08:ac:c5:7c: 0e:ba:7c:b5:43:3d:28:3d:08:df:19:38:80:23:bf: 55:78:21:3a:ff:6b:32:f1:86:7f:a9:24:ae:78:90: a7:86:fe:d1:a7:a2:99:31:fc:88:a6:59:fe:dd:35: 70:b2:ec:e1:7a:5e:7c:1e:10:a9:61:e7:97:51:86: 83:8c:a4:6e:92:fc:6c:dd:69:ee:48:e5:d0:ec:0c: e1:b1:a6:1a:e6:2a:9d:c3:44:9e:65:4b:32:5c:a5: d4:fd:20:62:0b:c2:ae:92:6b:58:5b:58:af:56:d2: cd:1e:48:38:91:97:0f:ca:87:38:6c:d0:33:2c:76: a3:b3:05:d3:42:fd:7c:b2:6b:14:a0:37:b9:1f:99: ba:14:f8:a1:4c:f6:5c:68:40:1e:30:2c:03:a0:b6: 2b:f3:00:27:28:fa:cf:82:00:ba:01:31:78:90:f8: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:98:E9:EB:99:5E:69:35:C5:09:3B:AD:68:8F:F1:2D:44:12:DC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/423f463f-bd67-3650-ac0c-a2c0a834c6e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl X509v3 Authority Key Identifier: keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer sbgp-ipAddrBlock: critical IPv4: 74.205.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ab:02:bd:5c:9b:c3:f1:0a:b5:ab:04:5e:5b:66:fe:ae:2d: ac:98:0a:3f:d7:66:9a:4a:e4:db:0e:3b:38:36:a1:f8:9d:93: 42:9e:60:b2:1a:6f:8b:fe:79:82:cd:5f:4a:64:97:5a:4a:0d: 63:aa:b2:66:6a:5c:b9:d5:2a:5b:a5:74:bc:b8:7d:75:59:20: 8b:12:db:f2:94:eb:ce:23:6b:71:3c:d6:96:06:89:d6:19:f6: 86:1f:b7:3d:31:f2:b8:3e:99:50:4e:de:5b:23:0f:c3:04:99: e0:6d:4a:21:b1:4a:c4:4f:d4:b2:b4:48:5f:62:51:00:18:be: 23:70:e2:08:f0:ed:ad:82:5a:62:62:7e:cb:44:72:70:ea:00: eb:15:6d:e4:94:67:ee:e1:db:e0:75:43:d4:24:5c:98:f4:6b: 54:34:3b:c7:bb:20:7a:6e:20:4f:a8:78:a1:ad:f4:e8:7b:a7: 1f:ee:26:4b:a4:15:ab:9c:a6:3a:cf:51:65:9c:b5:d6:84:fa: fc:bd:7c:22:1c:25:cb:44:10:2b:6f:be:75:8d:cc:b1:53:78: a9:47:04:b2:91:c0:68:2a:e4:0f:a9:c2:95:5c:e9:3c:5b:91: 3e:39:95:5b:9c:91:d6:0a:13:53:bd:d1:98:e2:7a:ac:00:fc: 5a:ba:3d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CaSVaDmF1U1ISQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNmNTMyM2YtOGJlYS00OGM2LWFhMDMtOTQ5MjU1ZGQx OTk3MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk NjhjYTMxNzgtNGRkNi00MTdmLTg2MmMtMTA2Y2EzMTI2NjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonV6JySwfOUhF5D7dpdjj62nEveKBsrmi3+g usNa5IHGOY2CJ0hayO+IjHKTthageqKlcr4M6Q8TR08XBRf8BhLOTLDkbo1mNx2y h1yLHczS7SaSAgisxXwOuny1Qz0oPQjfGTiAI79VeCE6/2sy8YZ/qSSueJCnhv7R p6KZMfyIpln+3TVwsuzhel58HhCpYeeXUYaDjKRukvxs3WnuSOXQ7AzhsaYa5iqd w0SeZUsyXKXU/SBiC8KukmtYW1ivVtLNHkg4kZcPyoc4bNAzLHajswXTQv18smsU oDe5H5m6FPihTPZcaEAeMCwDoLYr8wAnKPrPggC6ATF4kPgxDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiY6euZXmk1xQk7rWiP8S1EEtzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1 MzIzZi04YmVhLTQ4YzYtYWEwMy05NDkyNTVkZDE5OTcvNDIzZjQ2M2YtYmQ2Ny0z NjUwLWFjMGMtYTJjMGE4MzRjNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjNmNTMyM2YtOGJlYS00OGM2LWFh MDMtOTQ5MjU1ZGQxOTk3L2IzZjUzMjNmLThiZWEtNDhjNi1hYTAzLTk0OTI1NWRk MTk5Ny5jcmwwHwYDVR0jBBgwFoAUU4ELix9UHi+CHErdwD5wsGKV7F0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iM2Y1MzIzZi04YmVhLTQ4YzYtYWEwMy05NDky NTVkZDE5OTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASs3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGirAr1cm8PxCrWrBF5bZv6uLayYCj/XZppK5NsOOzg2ofidk0KeYLIa b4v+eYLNX0pkl1pKDWOqsmZqXLnVKluldLy4fXVZIIsS2/KU684ja3E81pYGidYZ 9oYftz0x8rg+mVBO3lsjD8MEmeBtSiGxSsRP1LK0SF9iUQAYviNw4gjw7a2CWmJi fstEcnDqAOsVbeSUZ+7h2+B1Q9QkXJj0a1Q0O8e7IHpuIE+oeKGt9Oh7px/uJkuk FaucpjrPUWWctdaE+vy9fCIcJctEECtvvnWNzLFTeKlHBLKRwGgq5A+pwpVc6Txb kT45lVuckdYKE1O90ZjieqwA/Fq6PQk= -----END CERTIFICATE-----Generated at Sat Apr 19 11:00:31 2025 by rpki-client