$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6fcfa37-8a57-30e7-bb7d-6f81d733e97d.roa File: c6fcfa37-8a57-30e7-bb7d-6f81d733e97d.roa (raw, json) Hash identifier: /4zFwikcHSWZQAPS7GxGlEAg8BzCIqGwwgpv7Q2ZLLI= Subject key identifier: 76:77:FC:FB:5D:76:D9:54:37:9B:52:49:2D:8F:F4:06:57:12:47:8F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584824FA8120C2B7AC9371015B80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6fcfa37-8a57-30e7-bb7d-6f81d733e97d.roa Signing time: Mon 09 Dec 2024 02:00:40 +0000 ROA not before: Mon 09 Dec 2024 02:00:40 +0000 ROA not after: Sun 09 Mar 2025 02:00:40 +0000 asID: 834 IP address blocks: 74.49.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:fa:81:20:c2:b7:ac:93:71:01:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Dec 9 02:00:40 2024 GMT Not After : Mar 9 02:00:40 2025 GMT Subject: CN=0a251aa4-916c-4901-88de-02c9b92210b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b9:c4:4a:b7:b2:77:df:3e:08:39:d7:a6:94: 76:bd:0a:0f:9f:84:35:ea:9c:d6:ed:13:ac:d7:1c: 59:3e:c2:d5:e7:2f:f9:96:a8:2b:0c:e9:01:f2:5a: 85:c9:3b:04:7a:82:98:74:0b:9f:a6:fd:d2:e0:7a: 63:2b:22:bf:80:d4:22:b4:39:94:52:6e:9f:90:07: 5a:ff:52:0d:e3:6e:35:ea:ff:6a:7c:3a:22:4e:54: 58:d5:24:c8:a1:52:a4:c3:f8:75:ca:66:ff:f7:79: 75:70:46:f5:4a:11:db:9b:03:f8:81:73:2b:ed:02: 08:aa:33:33:69:2d:92:7e:21:01:ce:39:1e:24:af: 02:0c:2f:33:bf:98:af:11:a5:90:73:2c:9f:12:86: 73:79:cb:ce:c3:04:32:44:2b:61:04:87:04:39:46: c4:94:3b:40:f7:35:16:c0:51:aa:46:f8:b2:a9:f1: 00:8c:42:7d:b0:5d:ea:2d:b2:e8:4d:a1:f0:25:44: 6b:de:3f:cb:e3:1f:ec:ae:2e:85:86:2a:b8:35:bb: 0d:46:f8:bc:50:14:cd:78:44:69:c4:99:a5:c8:1e: 43:3c:1b:48:07:06:26:76:b4:9c:b7:66:ac:fd:ee: 98:91:bb:f3:3f:9d:d1:3e:36:aa:70:d3:59:b2:ba: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:77:FC:FB:5D:76:D9:54:37:9B:52:49:2D:8F:F4:06:57:12:47:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6fcfa37-8a57-30e7-bb7d-6f81d733e97d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 74.49.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:44:c2:5a:f6:1f:a1:98:a1:ca:f0:5f:e3:4c:ba:27:02:fb: 98:ea:7f:18:e2:09:65:53:a5:3b:60:9a:f2:6b:50:e8:64:f4: fc:9d:8c:5f:77:f8:e0:a4:04:76:c6:0a:d7:d1:1d:13:93:4d: c1:7d:09:7b:bb:70:59:b9:42:a5:46:ea:e5:06:d4:4d:cb:48: 22:de:15:9e:93:7e:6f:32:56:0e:67:98:c0:ef:4c:83:a7:c9: 63:75:24:77:f5:15:a0:8a:15:03:57:b1:15:9b:29:b2:ef:53: ef:43:d1:91:53:c3:87:7b:87:35:31:ff:0a:2d:d7:a8:f0:6f: 27:f7:1c:34:e7:c7:b1:81:3b:27:18:a6:82:e8:00:a0:8a:22: 6d:2e:30:07:83:44:46:63:e6:ff:aa:ae:8f:0f:1f:b1:7a:09: 56:95:c9:51:38:e3:a1:d1:31:4f:44:67:76:7a:8e:f2:e4:09: a0:25:4c:9d:7a:05:18:fe:31:e1:c2:30:55:22:5b:f9:b2:f5: 4f:81:99:8e:07:3a:34:d0:db:f5:d0:81:79:c6:15:28:75:86: a1:be:54:f2:a3:07:5c:21:8d:2c:2d:6a:49:75:b4:7b:02:69: 4c:08:91:cf:2e:23:ff:52:9e:7a:f5:0f:d1:ce:6c:72:f2:54: 86:14:a2:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgk+oEgwresk3EBW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI0MTIwOTAyMDA0MFoXDTI1MDMwOTAyMDA0MFowLzEtMCsGA1UEAxMk MGEyNTFhYTQtOTE2Yy00OTAxLTg4ZGUtMDJjOWI5MjIxMGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7nESreyd98+CDnXppR2vQoPn4Q16pzW7ROs 1xxZPsLV5y/5lqgrDOkB8lqFyTsEeoKYdAufpv3S4HpjKyK/gNQitDmUUm6fkAda /1IN42416v9qfDoiTlRY1STIoVKkw/h1ymb/93l1cEb1ShHbmwP4gXMr7QIIqjMz aS2SfiEBzjkeJK8CDC8zv5ivEaWQcyyfEoZzecvOwwQyRCthBIcEOUbElDtA9zUW wFGqRviyqfEAjEJ9sF3qLbLoTaHwJURr3j/L4x/sri6Fhiq4NbsNRvi8UBTNeERp xJmlyB5DPBtIBwYmdrSct2as/e6YkbvzP53RPjaqcNNZsrpS2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZ3/PtddtlUN5tSSS2P9AZXEkePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzZmY2ZhMzctOGE1Ny0z MGU3LWJiN2QtNmY4MWQ3MzNlOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFEwlr2H6GYocrwX+NMuicC+5jqfxjiCWVTpTtgmvJrUOhk9PydjF93 +OCkBHbGCtfRHROTTcF9CXu7cFm5QqVG6uUG1E3LSCLeFZ6Tfm8yVg5nmMDvTIOn yWN1JHf1FaCKFQNXsRWbKbLvU+9D0ZFTw4d7hzUx/wot16jwbyf3HDTnx7GBOycY poLoAKCKIm0uMAeDREZj5v+qro8PH7F6CVaVyVE446HRMU9EZ3Z6jvLkCaAlTJ16 BRj+MeHCMFUiW/my9U+BmY4HOjTQ2/XQgXnGFSh1hqG+VPKjB1whjSwtakl1tHsC aUwIkc8uI/9Snnr1D9HObHLyVIYUoiI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:43 2025 by rpki-client