$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/bd4f29c2-546c-38d2-9b64-7a4249945c21.roa File: bd4f29c2-546c-38d2-9b64-7a4249945c21.roa (raw, json) Hash identifier: ycrl1dOuOn90utr+s3D+INPJm06z8BnyQc5TX3vCjh8= Subject key identifier: 8F:46:1D:66:3C:92:B5:CA:8E:A3:D3:9A:12:B0:37:53:E5:CF:10:D5 Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Certificate serial: 010D0C9F43285848B35B6A31DA2E9689956A3600 Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/bd4f29c2-546c-38d2-9b64-7a4249945c21.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 200182 IP address blocks: 74.119.149.0/24 maxlen: 24 2602:fd50:1060::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:6a:31:da:2e:96:89:95:6a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=f02a1148-b479-4421-9fbb-ea4a51537c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9f:0d:b0:72:82:bb:22:be:db:13:59:87:5f: d2:23:66:72:a9:cb:41:67:f5:d5:d3:08:27:8f:b6: f7:62:63:c3:33:90:81:13:4c:72:ef:d5:f4:fb:dd: 67:9c:4b:2d:dd:24:82:63:e8:72:a8:80:4e:6a:6e: de:a2:10:23:0c:2f:25:35:f7:a9:03:32:18:d4:e2: fe:cd:6a:93:32:a1:f5:f6:ef:ab:23:dc:78:59:d3: 44:2a:38:ed:37:fb:93:0a:14:ef:f7:04:88:fe:8d: 88:76:74:7f:d8:69:06:4d:55:18:dd:99:5b:97:ad: 0d:d3:b8:49:30:55:00:31:ef:a3:20:50:a0:7f:25: af:11:fa:c4:a7:24:e2:bc:51:80:48:7a:95:ff:c3: ee:6c:a6:21:95:33:95:47:98:df:8f:49:e9:90:33: 51:5e:21:cf:3d:37:d6:27:23:0a:48:8d:1a:8f:a1: cc:b6:08:19:67:88:da:8a:0f:5e:ca:6a:96:b3:97: 02:35:4a:e4:df:e8:75:32:41:42:14:89:4c:db:51: 37:b6:95:a3:2e:11:05:5e:64:59:9e:4b:e0:a6:0c: 27:10:ed:a8:42:e1:e7:66:33:e7:52:4e:a6:e2:bc: 5f:80:84:dd:c6:58:c9:67:4c:f8:39:30:2b:77:06: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:46:1D:66:3C:92:B5:CA:8E:A3:D3:9A:12:B0:37:53:E5:CF:10:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/bd4f29c2-546c-38d2-9b64-7a4249945c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl X509v3 Authority Key Identifier: keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer sbgp-ipAddrBlock: critical IPv4: 74.119.149.0/24 IPv6: 2602:fd50:1060::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cc:a0:0f:18:6f:cf:5b:5f:04:af:19:3a:e8:3c:b1:a9:50: ce:c6:18:68:13:a4:25:28:d8:03:dd:58:d2:3a:2e:bf:c8:0d: d8:51:0a:d6:66:6c:d8:35:6a:76:4f:60:b4:04:a0:8d:a8:30: 83:bd:46:db:d2:9f:b3:40:17:d6:fc:be:f7:7c:bd:f5:7e:47: 30:45:bf:74:d8:ae:6d:00:06:e1:f3:0a:e0:46:77:13:5f:14: 4b:79:8d:f7:57:d4:95:74:95:62:5d:1d:34:ab:eb:7e:3a:67: 82:7d:a4:fd:5a:24:d6:ba:d7:5d:b2:66:d9:1b:f8:5c:f3:f9: 25:dd:ba:f4:ab:0a:da:3f:bf:94:0a:27:86:b8:2d:a7:1b:0d: ac:8b:08:27:3d:bb:5b:08:fe:de:a8:2c:0a:1f:83:df:cc:d7: 1b:0b:52:f4:4b:a9:f9:b9:7b:70:c3:ac:8d:fa:aa:63:3f:e6: 09:9d:a3:eb:3b:8f:0a:f7:a3:22:0a:ec:19:04:3a:9f:ec:63: b0:9c:75:5c:37:db:00:88:ee:36:8d:b3:f3:59:ee:bf:dd:3c: 95:06:61:33:1d:58:25:3e:6e:83:f9:b7:e0:56:21:ac:75:bb: 04:34:7b:2b:47:3c:f2:dc:ce:65:05:f6:19:dc:3e:02:40:a3: 52:be:9c:7a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEizW2ox2i6WiZVqNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3 ZWU3MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk ZjAyYTExNDgtYjQ3OS00NDIxLTlmYmItZWE0YTUxNTM3YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ8NsHKCuyK+2xNZh1/SI2ZyqctBZ/XV0wgn j7b3YmPDM5CBE0xy79X0+91nnEst3SSCY+hyqIBOam7eohAjDC8lNfepAzIY1OL+ zWqTMqH19u+rI9x4WdNEKjjtN/uTChTv9wSI/o2IdnR/2GkGTVUY3Zlbl60N07hJ MFUAMe+jIFCgfyWvEfrEpyTivFGASHqV/8PubKYhlTOVR5jfj0npkDNRXiHPPTfW JyMKSI0aj6HMtggZZ4jaig9eymqWs5cCNUrk3+h1MkFCFIlM21E3tpWjLhEFXmRZ nkvgpgwnEO2oQuHnZjPnUk6m4rxfgITdxljJZ0z4OTArdwYxLQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFI9GHWY8krXKjqPTmhKwN1PlzxDVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvYmQ0ZjI5YzItNTQ2Yy0z OGQyLTliNjQtN2E0MjQ5OTQ1YzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3 YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1 N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw MWU3NTdlZTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQASneVMA8E AgACMAkDBwQmAv1QEGAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABcygDxhvz1tfBK8ZOug8salQzsYYaBOk JSjYA91Y0jouv8gN2FEK1mZs2DVqdk9gtASgjagwg71G29Kfs0AX1vy+93y99X5H MEW/dNiubQAG4fMK4EZ3E18US3mN91fUlXSVYl0dNKvrfjpngn2k/Vok1rrXXbJm 2Rv4XPP5Jd269KsK2j+/lAonhrgtpxsNrIsIJz27Wwj+3qgsCh+D38zXGwtS9Eup +bl7cMOsjfqqYz/mCZ2j6zuPCvejIgrsGQQ6n+xjsJx1XDfbAIjuNo2z81nuv908 lQZhMx1YJT5ug/m34FYhrHW7BDR7K0c88tzOZQX2Gdw+AkCjUr6ceg== -----END CERTIFICATE-----Generated at Sat Apr 5 03:50:08 2025 by rpki-client