$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/e87834f7-fccc-3d54-b691-86c753624379.roa File: e87834f7-fccc-3d54-b691-86c753624379.roa (raw, json) Hash identifier: YCiglmFoZAgOMiMk9nr1codon9RK7W55gw4sm0y3k2M= Subject key identifier: 32:93:BA:4F:2B:67:D9:19:11:C9:01:D5:E1:DB:E4:BF:5D:A5:F2:84 Certificate issuer: /CN=22d4b872-8325-44d1-958d-897bd254f68b Certificate serial: 010D0C9F43285848A494DFCD5B0DF25BFD425A00 Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/e87834f7-fccc-3d54-b691-86c753624379.roa Signing time: Thu 23 Jan 2025 18:59:25 +0000 ROA not before: Thu 23 Jan 2025 18:59:25 +0000 ROA not after: Wed 23 Apr 2025 17:59:25 +0000 asID: 272814 IP address blocks: 74.118.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:94:df:cd:5b:0d:f2:5b:fd:42:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b Validity Not Before: Jan 23 18:59:25 2025 GMT Not After : Apr 23 17:59:25 2025 GMT Subject: CN=335aa637-3a1e-451d-b4b7-c3301d5e3d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:57:fb:29:14:59:07:c2:c7:0e:86:67:8f:78: c5:18:23:19:a0:7f:49:12:a9:58:23:ba:33:62:c4: 08:d4:8c:21:7d:fd:a4:78:a4:79:f8:94:ca:f2:6d: 19:64:b8:5e:57:10:31:e1:59:8b:a6:00:86:ff:87: d2:f4:b4:dc:0e:a0:a3:81:0e:8c:cf:84:65:be:38: 23:4a:91:6b:8f:99:6b:d3:9d:9b:b0:ef:22:82:9a: 9e:7c:0e:80:47:e0:71:f9:62:95:33:59:ae:6a:da: 6c:0e:29:f2:d4:51:a3:5f:e0:33:ab:52:c7:7f:a7: ee:a1:48:93:4c:02:ba:66:ad:d4:ab:1d:80:8a:dd: 9b:0b:e2:03:1c:fb:73:76:8e:1a:6e:4f:56:7c:a4: 4b:92:ef:cd:7a:f1:3b:98:aa:6d:94:8f:68:11:9e: f3:01:de:d1:2e:00:08:29:b4:a2:02:d7:07:a8:51: e1:0b:b1:2f:67:7d:bc:12:b3:54:e9:bb:cf:c3:30: 01:57:50:6b:98:a7:47:1b:0f:6c:8a:ae:be:ad:a3: a3:eb:a7:db:a8:19:2f:b2:c7:d7:dc:c4:30:7b:7a: 02:2d:74:b1:c1:59:ed:bc:f9:26:46:f3:44:89:dc: f4:ed:f7:a2:66:b5:d4:6b:f6:e9:13:6a:92:b1:05: 91:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:93:BA:4F:2B:67:D9:19:11:C9:01:D5:E1:DB:E4:BF:5D:A5:F2:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/e87834f7-fccc-3d54-b691-86c753624379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl X509v3 Authority Key Identifier: keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer sbgp-ipAddrBlock: critical IPv4: 74.118.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:08:1a:fa:0f:f7:a9:b1:1a:03:76:17:db:01:ce:00:54:c1: 3a:2f:cd:ab:49:a4:20:b5:19:a4:3c:6f:df:75:c6:4a:a8:4c: bf:bb:e8:9e:16:35:98:b6:80:58:f9:53:7c:fe:16:b1:ae:c3: 61:b2:c6:d8:5a:ce:c6:a2:58:82:0a:cd:20:10:31:1f:b1:ec: e8:e0:8b:8b:ad:0b:24:d9:a9:75:8b:80:bb:98:07:fe:25:a1: 46:fb:22:a3:46:37:e4:8f:81:f0:4a:80:62:db:91:55:1b:41: 45:b9:32:f3:42:d0:b7:41:92:20:29:9a:c2:14:fe:42:68:d7: bc:bb:3b:e2:7c:08:b3:96:f4:0f:76:77:7c:58:ef:b7:97:56: 0a:30:b1:de:f9:00:dc:35:5e:c6:c6:f1:b3:9a:0e:f5:1a:17: 18:31:a4:a4:14:47:06:c4:f9:0e:65:60:f5:74:68:f3:16:4f: 08:fe:6a:67:68:d7:62:fb:a8:92:06:39:bd:f3:83:f5:5c:05: 53:39:ae:e4:07:12:03:ec:6a:71:fa:e4:26:da:45:b8:ef:3f: c1:56:82:4a:1b:d0:f3:a4:e5:7a:cf:9e:c1:a8:4d:a2:c3:39: e5:85:ff:58:b5:be:a2:2b:c2:cd:ee:3e:1b:6b:29:e7:d1:c6: 44:51:d4:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiklN/NWw3yW/1CWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNGI4NzItODMyNS00NGQxLTk1OGQtODk3YmQyNTRm NjhiMB4XDTI1MDEyMzE4NTkyNVoXDTI1MDQyMzE3NTkyNVowLzEtMCsGA1UEAxMk MzM1YWE2MzctM2ExZS00NTFkLWI0YjctYzMzMDFkNWUzZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVf7KRRZB8LHDoZnj3jFGCMZoH9JEqlYI7oz YsQI1Iwhff2keKR5+JTK8m0ZZLheVxAx4VmLpgCG/4fS9LTcDqCjgQ6Mz4Rlvjgj SpFrj5lr052bsO8igpqefA6AR+Bx+WKVM1muatpsDiny1FGjX+Azq1LHf6fuoUiT TAK6Zq3Uqx2Ait2bC+IDHPtzdo4abk9WfKRLku/NevE7mKptlI9oEZ7zAd7RLgAI KbSiAtcHqFHhC7EvZ328ErNU6bvPwzABV1BrmKdHGw9siq6+raOj66fbqBkvssfX 3MQwe3oCLXSxwVntvPkmRvNEidz07feiZrXUa/bpE2qSsQWRUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKTuk8rZ9kZEckB1eHb5L9dpfKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0 Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdiZDI1NGY2OGIvZTg3ODM0ZjctZmNjYy0z ZDU0LWI2OTEtODZjNzUzNjI0Mzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjJkNGI4NzItODMyNS00NGQxLTk1 OGQtODk3YmQyNTRmNjhiLzIyZDRiODcyLTgzMjUtNDRkMS05NThkLTg5N2JkMjU0 ZjY4Yi5jcmwwHwYDVR0jBBgwFoAUoesnN2ifyJue4jDjyAXH4u6NjvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMmQ0Yjg3Mi04MzI1LTQ0ZDEtOTU4ZC04OTdi ZDI1NGY2OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnY8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwIGvoP96mxGgN2F9sBzgBUwTovzatJpCC1GaQ8b991xkqoTL+76J4W NZi2gFj5U3z+FrGuw2GyxthazsaiWIIKzSAQMR+x7Ojgi4utCyTZqXWLgLuYB/4l oUb7IqNGN+SPgfBKgGLbkVUbQUW5MvNC0LdBkiApmsIU/kJo17y7O+J8CLOW9A92 d3xY77eXVgowsd75ANw1XsbG8bOaDvUaFxgxpKQURwbE+Q5lYPV0aPMWTwj+amdo 12L7qJIGOb3zg/VcBVM5ruQHEgPsanH65CbaRbjvP8FWgkob0POk5XrPnsGoTaLD OeWF/1i1vqIrws3uPhtrKefRxkRR1JY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:36 2025 by rpki-client