$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa File: 2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa (raw, json) Hash identifier: bbagXMGpGLg43ow/LoyL2qrJjc7toEG2D3biNVGkgis= Subject key identifier: 10:8C:CD:81:90:67:58:7B:17:CB:31:10:5F:B6:C6:2A:42:20:DA:5F Certificate issuer: /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Certificate serial: 010D0C9F43285848F4F69DFFC6A93C4D6DD7AC80 Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 8560 IP address blocks: 74.208.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9d:ff:c6:a9:3c:4d:6d:d7:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d4035a82-1db7-4a98-9044-754921534c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:be:19:3f:2a:39:da:80:df:ed:57:53:08: 92:6d:89:98:05:31:76:c0:f7:c8:56:b5:5b:e8:b3: d0:de:d9:57:04:82:e6:12:cf:67:bd:3a:26:25:f4: 11:e5:c8:d0:e9:8d:5f:8d:ed:bf:a9:43:ee:a0:7f: ad:ca:9c:e1:70:3e:9f:84:0e:88:ae:35:cd:f8:39: 82:56:8f:8e:d6:88:85:c8:1a:08:63:b9:db:fc:64: 3e:d9:fc:c6:ee:5f:57:b4:14:e4:00:79:ab:e1:7d: 72:b2:2c:0b:23:30:86:05:da:ae:c1:f6:2d:c9:e3: ca:63:9d:2f:9d:ff:12:66:00:28:d2:d4:2b:2e:9b: 14:09:b2:bf:75:30:72:27:f3:df:e6:94:e8:cf:fd: a0:cf:11:38:f7:82:ca:ae:3b:b8:04:5c:e0:2e:b9: e1:bd:44:87:22:bb:59:a6:9d:ff:c4:ed:17:44:30: be:88:96:ee:12:e1:db:cb:23:82:45:d5:a6:bf:c8: f6:42:d8:5c:17:49:02:3d:a2:2e:59:f4:0a:16:ae: 72:a7:44:bd:9c:b7:7b:92:9b:9c:5e:66:c0:be:5a: 21:84:53:27:95:80:de:7e:3d:2d:8e:f6:e0:15:19: da:4c:f5:9f:0e:7d:45:8d:72:f5:b0:e3:50:f0:04: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8C:CD:81:90:67:58:7B:17:CB:31:10:5F:B6:C6:2A:42:20:DA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/2a02523f-43fc-3f4b-94fb-1e7cf91db4a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl X509v3 Authority Key Identifier: keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer sbgp-ipAddrBlock: critical IPv4: 74.208.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4f:11:00:46:c7:4a:cd:5d:89:50:fc:48:3b:23:e1:4e:86: 86:7f:7f:70:50:d6:3e:12:b2:76:09:4b:36:36:a9:53:c3:85: fd:e8:00:ce:c7:f0:78:f2:a9:d7:74:83:7f:6a:b3:03:d6:72: 27:4d:8d:9e:26:82:c5:65:c5:34:8c:8d:af:3c:dd:af:be:74: 16:f5:e8:74:14:e2:91:e6:50:d7:6c:97:39:e3:d6:33:d2:44: e0:6b:05:9b:a2:e9:05:ee:f5:41:6d:d4:ed:2c:7c:13:09:87: fc:e1:ea:49:aa:21:11:91:40:c8:4d:cc:d7:a9:36:ab:07:cf: fe:cb:98:0b:bd:a7:69:07:8c:cd:62:59:5d:50:9c:7f:9e:b6: b9:3a:b1:50:f0:aa:7b:1a:93:f0:e3:a2:68:c3:3c:82:a6:fe: 93:14:05:cd:6e:26:0a:fb:98:57:ec:e1:af:ab:84:ae:a8:88: 83:ee:1f:42:cb:05:16:8f:53:a9:d9:70:0c:a1:53:41:b6:e1: 43:0d:df:21:f4:56:39:f0:d0:12:31:bb:89:7a:9a:4e:bf:5b: ce:ff:36:14:d4:33:98:10:95:78:e7:42:e6:8a:63:15:ca:cf: 06:88:ad:54:bb:f9:18:68:ab:fd:51:6f:7c:18:0c:d6:4d:73: 64:2d:4c:b0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj09p3/xqk8TW3XrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm MWNlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDQwMzVhODItMWRiNy00YTk4LTkwNDQtNzU0OTIxNTM0YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl2+GT8qOdqA3+1XUwiSbYmYBTF2wPfIVrVb 6LPQ3tlXBILmEs9nvTomJfQR5cjQ6Y1fje2/qUPuoH+typzhcD6fhA6IrjXN+DmC Vo+O1oiFyBoIY7nb/GQ+2fzG7l9XtBTkAHmr4X1ysiwLIzCGBdquwfYtyePKY50v nf8SZgAo0tQrLpsUCbK/dTByJ/Pf5pToz/2gzxE494LKrju4BFzgLrnhvUSHIrtZ pp3/xO0XRDC+iJbuEuHbyyOCRdWmv8j2QthcF0kCPaIuWfQKFq5yp0S9nLd7kpuc XmbAvlohhFMnlYDefj0tjvbgFRnaTPWfDn1FjXL1sONQ8ATuwQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBCMzYGQZ1h7F8sxEF+2xipCINpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3 OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvMmEwMjUyM2YtNDNmYy0z ZjRiLTk0ZmItMWU3Y2Y5MWRiNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1 ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0 MDBkNWYxY2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAStAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYU8RAEbHSs1diVD8SDsj4U6Ghn9/cFDWPhKydglLNjapU8OF/egAzsfw ePKp13SDf2qzA9ZyJ02NniaCxWXFNIyNrzzdr750FvXodBTikeZQ12yXOePWM9JE 4GsFm6LpBe71QW3U7Sx8EwmH/OHqSaohEZFAyE3M16k2qwfP/suYC72naQeMzWJZ XVCcf562uTqxUPCqexqT8OOiaMM8gqb+kxQFzW4mCvuYV+zhr6uErqiIg+4fQssF Fo9TqdlwDKFTQbbhQw3fIfRWOfDQEjG7iXqaTr9bzv82FNQzmBCVeOdC5opjFcrP BoitVLv5GGir/VFvfBgM1k1zZC1MsA== -----END CERTIFICATE-----Generated at Wed Apr 9 17:05:18 2025 by rpki-client