$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2ad0d8a8-d27d-3fe6-9e5d-defc92471b52.roa File: 2ad0d8a8-d27d-3fe6-9e5d-defc92471b52.roa (raw, json) Hash identifier: eHECgUqG23aE9uGrUIdql3tMrdrlyawOVjL4wtZXQLQ= Subject key identifier: DF:A9:B0:BE:9E:2E:16:68:01:D1:2B:D7:4A:8C:C1:1A:88:91:91:6C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849E4EFBF8D97689B0715699580 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2ad0d8a8-d27d-3fe6-9e5d-defc92471b52.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 834 IP address blocks: 74.49.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:bf:8d:97:68:9b:07:15:69:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=5b6b43e4-351e-4e59-a6a1-67dcbada4112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c1:f5:d9:ca:06:03:d8:51:b5:20:ae:67:c4: 1b:75:ed:0b:29:cd:94:f6:a9:20:1c:68:2b:c4:a5: f0:28:53:08:d7:56:c5:ca:b0:e7:cb:af:34:d6:e3: b3:04:58:40:47:b3:84:56:3a:51:7c:be:5b:35:96: f0:b5:42:1d:35:a7:fb:5a:21:3e:5e:c4:d2:bc:7c: ea:d6:de:2c:1e:07:2d:db:67:53:17:79:d5:b2:7d: e7:5d:96:19:34:44:b0:96:ca:3e:78:02:90:64:11: 54:1b:31:f7:b6:e7:d5:17:f3:9a:61:4c:9c:69:b5: 3b:3d:05:b0:63:24:5e:34:31:c5:66:6d:11:21:48: f3:e3:d0:4c:95:13:9b:49:d9:ff:ed:fe:43:3e:ef: 73:69:f1:90:cb:7f:7c:2e:5d:95:95:46:70:bb:d1: 22:0e:22:cc:7e:65:c2:be:22:30:0d:55:ee:71:11: da:8e:7c:0f:1f:4b:1f:fa:2c:25:ec:ac:ae:c7:a6: 8d:e6:20:36:29:15:d1:23:1e:27:d6:da:f3:22:97: d8:74:45:0b:33:37:96:33:db:78:b8:ce:49:85:ae: 26:24:c2:f8:ee:4d:ea:b8:3c:58:48:ef:5e:70:bf: a5:da:fe:0e:ae:06:6e:c9:be:27:c5:7c:5b:9f:d7: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A9:B0:BE:9E:2E:16:68:01:D1:2B:D7:4A:8C:C1:1A:88:91:91:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2ad0d8a8-d27d-3fe6-9e5d-defc92471b52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 74.49.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:28:c3:36:d5:93:47:1c:7a:58:50:ad:a1:79:73:57:3b:3c: f4:5d:07:fc:00:a3:5a:5e:08:70:bc:0a:3e:19:0b:9e:7d:8f: 94:6f:16:2c:1a:f2:2b:32:49:7a:88:18:3d:88:cf:ff:7b:26: 67:64:a7:2d:88:4d:15:fb:74:c2:e7:f1:55:e9:57:c1:b7:8c: bf:ab:79:83:96:c3:8d:6b:a8:97:64:8e:ec:08:57:a6:4d:e2: 4e:6b:37:ff:f0:34:55:bf:2a:8b:01:8a:67:2b:be:c9:c8:4b: 80:a5:e0:97:99:dc:c5:40:9f:e6:1c:7c:bd:21:bc:05:e1:e8: 8a:c6:e6:d3:17:85:9e:fd:ad:76:cb:40:55:7f:13:1e:50:24: c7:11:61:07:30:a5:22:a0:aa:ff:95:a7:bf:6f:5b:a1:e6:ec: 80:04:63:39:f9:c5:99:c5:11:c6:e5:74:71:6b:8f:d2:9f:a8: 49:e2:c7:93:23:ca:63:78:e1:5e:d5:ad:6f:0e:d1:7a:54:2c: 4b:59:21:c8:18:16:ce:87:0f:86:91:70:f8:d0:f9:15:9d:dc: 13:58:b5:27:97:0a:e3:79:a5:9d:b4:79:06:f8:b2:3a:2a:3a: b5:0c:9b:2c:57:b7:e0:99:f4:2a:f8:e9:88:5f:e7:69:b4:fb: 4b:02:d7:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk77+Nl2ibBxVplYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk NWI2YjQzZTQtMzUxZS00ZTU5LWE2YTEtNjdkY2JhZGE0MTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcH12coGA9hRtSCuZ8Qbde0LKc2U9qkgHGgr xKXwKFMI11bFyrDny6801uOzBFhAR7OEVjpRfL5bNZbwtUIdNaf7WiE+XsTSvHzq 1t4sHgct22dTF3nVsn3nXZYZNESwlso+eAKQZBFUGzH3tufVF/OaYUycabU7PQWw YyReNDHFZm0RIUjz49BMlRObSdn/7f5DPu9zafGQy398Ll2VlUZwu9EiDiLMfmXC viIwDVXucRHajnwPH0sf+iwl7Kyux6aN5iA2KRXRIx4n1trzIpfYdEULMzeWM9t4 uM5Jha4mJML47k3quDxYSO9ecL+l2v4OrgZuyb4nxXxbn9fceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+psL6eLhZoAdEr10qMwRqIkZFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmFkMGQ4YTgtZDI3ZC0z ZmU2LTllNWQtZGVmYzkyNDcxYjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjHVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYowzbVk0ccelhQraF5c1c7PPRdB/wAo1peCHC8Cj4ZC559j5RvFiwa 8isySXqIGD2Iz/97Jmdkpy2ITRX7dMLn8VXpV8G3jL+reYOWw41rqJdkjuwIV6ZN 4k5rN//wNFW/KosBimcrvsnIS4Cl4JeZ3MVAn+YcfL0hvAXh6IrG5tMXhZ79rXbL QFV/Ex5QJMcRYQcwpSKgqv+Vp79vW6Hm7IAEYzn5xZnFEcbldHFrj9KfqEnix5Mj ymN44V7VrW8O0XpULEtZIcgYFs6HD4aRcPjQ+RWd3BNYtSeXCuN5pZ20eQb4sjoq OrUMmyxXt+CZ9Cr46Yhf52m0+0sC1wM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:38:58 2025 by rpki-client