$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd598aca-3a06-30ad-a16d-3ecb122e7131.roa File: cd598aca-3a06-30ad-a16d-3ecb122e7131.roa (raw, json) Hash identifier: +SjNbH2X17hezsIp9B8rrXcQVGgCDjLnVAT5SO+TviQ= Subject key identifier: 51:BF:69:01:65:C1:F3:BA:30:56:90:D9:2C:4B:43:A7:62:09:DE:0B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848E59BB9AF0771ED741C34E6B8 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd598aca-3a06-30ad-a16d-3ecb122e7131.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 7922 IP address blocks: 74.49.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b9:af:07:71:ed:74:1c:34:e6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=01e6de96-34ec-4e36-adf5-7336b43a7266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:23:d9:f5:d3:e7:b0:76:1a:c8:28:c6:23:6f: 7b:a5:7f:fa:3b:9f:52:82:b6:b3:6c:1f:3b:40:80: 90:3d:ad:a2:95:55:68:17:ca:e8:94:de:da:66:63: bc:79:41:9c:f2:03:0c:5e:d9:f1:7d:31:96:a1:f7: 24:34:55:22:f1:b3:08:10:29:33:55:c5:1f:29:11: 19:1e:ea:99:2d:6e:53:b0:27:b5:5b:76:f5:fb:08: 79:99:23:5a:8e:e5:95:32:3e:87:7a:cb:c0:32:ce: 01:7e:80:c2:73:69:a2:ce:a9:c7:23:99:ec:9e:b9: c6:26:02:29:48:e8:2c:e9:72:81:4f:51:12:55:1b: 05:cd:ab:96:c1:a1:43:3a:d9:7d:48:0d:20:cd:41: a5:28:88:ac:31:b2:57:b8:58:b7:2a:c2:3d:e5:32: 9c:15:01:86:7f:36:d2:db:93:ec:49:ee:02:29:d7: e2:b8:bd:a6:6a:81:f0:af:55:93:86:5b:33:68:96: a2:ee:7b:3f:2f:bc:56:69:78:22:5f:b1:46:df:8f: 86:6f:6b:28:77:9c:6e:1d:45:ce:55:13:55:23:2a: c4:fb:f2:ba:18:a0:d9:9c:a2:14:53:8a:5d:aa:6e: 9c:0e:e5:fb:af:51:62:51:24:b8:ef:78:cb:86:db: ec:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BF:69:01:65:C1:F3:BA:30:56:90:D9:2C:4B:43:A7:62:09:DE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cd598aca-3a06-30ad-a16d-3ecb122e7131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 74.49.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8a:d1:be:c1:e2:6a:d9:2b:90:bd:51:0d:73:d5:91:09:73: ff:b5:e7:7e:02:86:79:1b:c0:13:4d:ed:12:65:08:bb:68:0c: 33:53:bc:92:95:4d:46:05:74:5e:c9:a2:f1:1e:3a:60:b3:8f: ff:81:da:7f:6d:6d:ed:99:85:d9:b1:fe:cc:b2:03:78:a1:5f: d7:74:b1:08:22:61:09:d5:04:3e:3d:78:d3:e1:5e:0d:82:6e: c4:c5:cf:c5:f8:cf:f3:d0:96:6c:29:c7:81:1a:ea:49:c1:61: 25:b6:48:62:17:db:d4:18:c8:82:76:d4:66:51:5b:f8:b0:17: 2e:64:1e:04:5a:7d:ad:35:b4:09:d7:70:85:cb:da:d4:5c:ce: b4:aa:23:9e:cb:c6:8b:83:2e:21:1f:66:15:99:ba:a6:25:5b: 66:48:53:22:f5:f1:53:da:19:2f:1a:ff:20:b2:3d:b0:0c:b3: 18:f3:3d:62:29:ea:19:26:ac:91:5d:fd:ff:9b:c0:d5:8f:7d: a0:c1:96:d5:7b:41:5b:ce:d3:3e:ed:e4:96:db:a2:9d:f0:52: 2a:71:ea:85:a4:95:65:7d:b5:2a:6b:ca:ba:01:0a:aa:2b:62: 35:06:40:f0:fe:60:f8:fe:34:51:fa:ef:c5:e2:c7:75:f2:cf: c7:9b:2b:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7mvB3HtdBw05rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MDFlNmRlOTYtMzRlYy00ZTM2LWFkZjUtNzMzNmI0M2E3MjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSPZ9dPnsHYayCjGI297pX/6O59SgrazbB87 QICQPa2ilVVoF8rolN7aZmO8eUGc8gMMXtnxfTGWofckNFUi8bMIECkzVcUfKREZ HuqZLW5TsCe1W3b1+wh5mSNajuWVMj6HesvAMs4BfoDCc2mizqnHI5nsnrnGJgIp SOgs6XKBT1ESVRsFzauWwaFDOtl9SA0gzUGlKIisMbJXuFi3KsI95TKcFQGGfzbS 25PsSe4CKdfiuL2maoHwr1WThlszaJai7ns/L7xWaXgiX7FG34+Gb2sod5xuHUXO VRNVIyrE+/K6GKDZnKIUU4pdqm6cDuX7r1FiUSS473jLhtvsGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFG/aQFlwfO6MFaQ2SxLQ6diCd4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2Q1OThhY2EtM2EwNi0z MGFkLWExNmQtM2VjYjEyMmU3MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjHjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6K0b7B4mrZK5C9UQ1z1ZEJc/+1534ChnkbwBNN7RJlCLtoDDNTvJKV TUYFdF7JovEeOmCzj/+B2n9tbe2Zhdmx/syyA3ihX9d0sQgiYQnVBD49eNPhXg2C bsTFz8X4z/PQlmwpx4Ea6knBYSW2SGIX29QYyIJ21GZRW/iwFy5kHgRafa01tAnX cIXL2tRczrSqI57LxouDLiEfZhWZuqYlW2ZIUyL18VPaGS8a/yCyPbAMsxjzPWIp 6hkmrJFd/f+bwNWPfaDBltV7QVvO0z7t5Jbbop3wUipx6oWklWV9tSpryroBCqor YjUGQPD+YPj+NFH678Xix3Xyz8ebKzs= -----END CERTIFICATE-----Generated at Tue Apr 15 06:00:49 2025 by rpki-client