$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/993d9d72-3c3c-31ce-9b14-05be7e6d2f80.roa File: 993d9d72-3c3c-31ce-9b14-05be7e6d2f80.roa (raw, json) Hash identifier: dMKcsy5cIlUN+ClNu3jH/33OfPa4Uo5BDJAsrZCZiEQ= Subject key identifier: 6D:BC:3B:EA:B3:FF:EC:B3:02:D3:D0:02:FC:28:D1:20:0D:A7:39:D3 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848E2D1BC53D9B08DA5D5F3187A Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/993d9d72-3c3c-31ce-9b14-05be7e6d2f80.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 11351 IP address blocks: 74.74.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:bc:53:d9:b0:8d:a5:d5:f3:18:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=b194b8f0-89a5-4c9c-8cfa-4e4f93b08c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:25:3e:a5:2a:af:85:c4:0c:ce:f1:08:07: 08:a2:af:42:9d:0e:33:a5:7e:66:3e:79:cc:4f:bb: 40:20:65:94:26:10:53:7f:88:a3:44:9a:ef:86:3d: fc:8a:ed:34:c4:cb:ac:90:43:cd:64:49:e7:5b:fc: 08:57:ab:8f:fc:05:ad:56:2e:65:87:e5:88:6d:6e: 41:3e:bc:4e:29:17:b9:17:41:b7:e9:79:59:bc:46: a5:d2:a3:91:39:ac:74:7f:68:e5:de:d9:9e:65:56: 39:5f:11:37:10:b3:c8:1b:c8:d5:48:71:36:df:a3: c2:07:f0:ca:45:31:b6:b7:3c:ce:78:05:09:da:4d: 6e:66:db:3a:cb:6f:14:0f:56:6f:cd:9a:fc:1b:96: 6d:44:53:c1:b7:ae:6c:38:0e:ff:2b:e6:f3:fb:be: 5a:db:2e:2a:3a:e3:a5:c1:97:c5:cc:24:eb:97:ca: 45:06:65:b5:b5:a1:b4:71:89:eb:fe:b3:97:77:aa: f0:c8:02:5a:ee:2b:cb:d2:3c:14:e6:34:36:63:a9: 87:62:9e:a6:25:25:8b:3b:08:4a:76:c3:b9:47:b7: ad:1b:4f:b2:e1:20:97:54:ff:25:18:46:45:f1:2a: 6a:5d:ea:7e:89:7d:6c:87:40:99:42:b7:e4:02:87: cd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BC:3B:EA:B3:FF:EC:B3:02:D3:D0:02:FC:28:D1:20:0D:A7:39:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/993d9d72-3c3c-31ce-9b14-05be7e6d2f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 74.74.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4f:3d:3e:22:e6:e1:30:92:1d:c8:cc:bd:ad:44:e9:e1:fa: 9d:70:4a:a1:41:a1:20:4b:8f:82:87:53:aa:56:ab:7c:e3:55: 1b:8c:48:03:71:0c:0f:cb:15:d9:3a:6b:16:1c:50:33:a8:ce: c1:62:e5:13:c7:74:30:ee:60:b9:4f:de:0c:30:e7:24:5f:de: d0:ea:97:08:6b:87:e5:f4:5f:63:cc:66:60:52:0f:50:00:37: 3b:65:8d:08:c1:0b:ab:00:f8:93:f8:db:d7:52:ef:a4:be:fc: 33:70:2f:34:0f:35:d7:37:e0:ff:b1:17:4e:77:61:6a:cf:67: b8:fa:26:b5:5e:91:4e:25:9c:77:14:15:4d:a5:b9:03:5f:03: 61:ed:bc:1c:fb:a6:62:36:60:7c:eb:0a:26:52:40:7e:16:89: dd:47:24:52:b3:ed:9a:b9:cf:b0:d7:ec:12:5a:b0:d1:3e:c9: db:45:02:1b:6f:af:f2:da:1b:d2:57:c7:a4:98:ee:9a:b3:5f: 89:27:10:90:c5:21:0f:6f:c6:86:35:12:ce:73:41:6e:55:cf: ff:3f:ff:03:2d:7c:24:90:80:bf:88:bb:31:e7:eb:20:9b:68: 55:b9:16:49:04:c1:a4:8a:6c:99:77:ba:96:20:e6:16:4e:c4: 44:8b:54:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0bxT2bCNpdXzGHowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YjE5NGI4ZjAtODlhNS00YzljLThjZmEtNGU0ZjkzYjA4YzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+0lPqUqr4XEDM7xCAcIoq9CnQ4zpX5mPnnM T7tAIGWUJhBTf4ijRJrvhj38iu00xMuskEPNZEnnW/wIV6uP/AWtVi5lh+WIbW5B PrxOKRe5F0G36XlZvEal0qOROax0f2jl3tmeZVY5XxE3ELPIG8jVSHE236PCB/DK RTG2tzzOeAUJ2k1uZts6y28UD1ZvzZr8G5ZtRFPBt65sOA7/K+bz+75a2y4qOuOl wZfFzCTrl8pFBmW1taG0cYnr/rOXd6rwyAJa7ivL0jwU5jQ2Y6mHYp6mJSWLOwhK dsO5R7etG0+y4SCXVP8lGEZF8SpqXep+iX1sh0CZQrfkAofN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG28O+qz/+yzAtPQAvwo0SANpznTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTkzZDlkNzItM2MzYy0z MWNlLTliMTQtMDViZTdlNmQyZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSkqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJPPT4i5uEwkh3IzL2tROnh+p1wSqFBoSBLj4KHU6pWq3zjVRuMSANx DA/LFdk6axYcUDOozsFi5RPHdDDuYLlP3gww5yRf3tDqlwhrh+X0X2PMZmBSD1AA NztljQjBC6sA+JP429dS76S+/DNwLzQPNdc34P+xF053YWrPZ7j6JrVekU4lnHcU FU2luQNfA2HtvBz7pmI2YHzrCiZSQH4Wid1HJFKz7Zq5z7DX7BJasNE+ydtFAhtv r/LaG9JXx6SY7pqzX4knEJDFIQ9vxoY1Es5zQW5Vz/8//wMtfCSQgL+IuzHn6yCb aFW5FkkEwaSKbJl3upYg5hZOxESLVCk= -----END CERTIFICATE-----Generated at Sat Apr 5 20:56:29 2025 by rpki-client