$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa File: 28c14568-3d6b-3afa-aaf3-35ef290a818e.roa (raw, json) Hash identifier: tr8FBX4l4xozu/CSm4L46Y9CgCw6ovTWmNhIs25zOio= Subject key identifier: F4:30:F8:6B:92:91:9D:33:BF:D3:BB:96:DD:C0:BA:E5:88:16:30:5C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B32D8CA7EA057FF65B180 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54858 IP address blocks: 74.85.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:32:d8:ca:7e:a0:57:ff:65:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=fba924f3-bd18-4859-a406-82b04145acfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:bb:91:63:31:61:02:28:63:16:88:72:0a: 5b:b9:0a:0a:28:5b:db:e7:48:60:bd:f0:6b:77:bc: 4d:f8:da:ce:76:f4:93:1c:d3:5b:81:17:28:2e:43: a7:67:c5:b6:32:99:3a:00:23:8e:7d:c5:08:30:34: c6:b7:db:1f:e2:3b:0d:3b:ed:70:2b:9e:4c:7d:ee: a5:a5:2b:6b:3e:26:06:04:7f:43:6e:64:f0:f8:1f: 62:98:0c:54:d2:04:f5:8e:17:b4:e5:61:34:c9:a8: db:9d:a1:cf:6f:ca:00:21:cd:93:52:df:a8:c5:18: 3b:cf:e8:96:83:6b:d7:35:8b:26:2c:9b:6e:b5:55: dc:7b:59:95:99:e9:c6:5a:3f:2d:c4:a1:bd:2d:cc: 67:ff:ad:39:79:f3:86:0f:00:76:fb:65:cf:20:6b: 4e:3c:70:f6:4c:7a:c9:f8:2e:f8:e1:91:4a:78:9d: 4a:7a:2f:0d:2c:40:2d:97:45:00:0e:ca:1b:33:f5: 7c:61:28:96:a4:9d:2f:02:92:9f:d6:e4:7d:f1:e2: 5b:42:52:43:4a:ce:06:9e:be:d3:27:0f:23:ef:ea: 24:40:8a:69:4a:31:5a:8c:4d:b8:4a:96:ec:9e:57: df:6b:a4:0a:11:d5:79:85:e4:9e:96:4d:a9:2d:16: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:30:F8:6B:92:91:9D:33:BF:D3:BB:96:DD:C0:BA:E5:88:16:30:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b4:95:f1:57:9c:c7:b4:b2:3d:21:86:29:37:72:e0:86:96: c4:44:30:ed:9a:a2:fe:51:52:19:79:c2:ed:0a:2b:57:f3:0c: d7:21:90:82:19:0a:dd:4d:6c:d9:4c:65:d7:e6:f9:76:8f:21: 36:83:7e:60:ba:53:85:88:2b:d1:55:5f:82:8e:8b:f5:a5:07: fb:2d:be:85:31:b8:0a:ec:c7:a5:c5:98:d4:04:b9:1d:c3:bf: 6c:d0:90:0c:2f:f5:09:47:bd:da:f1:d0:5b:32:e8:5c:22:c0: 83:5c:9e:80:70:5f:f8:11:b6:a6:c4:21:d0:c4:e1:4a:74:86: 33:bb:bc:63:46:34:96:66:51:af:d3:c6:90:77:a6:30:b9:79: 18:8e:d9:f0:43:11:b7:61:07:a3:1a:c7:a4:e0:d2:04:3b:31: 3e:21:e5:ac:d3:da:81:48:01:89:da:46:42:4b:d5:d6:36:32: 90:1d:ae:c5:47:61:b1:dc:d0:0a:16:91:03:30:e2:70:28:c9: b3:16:fd:cd:5a:20:43:d7:fb:cb:d7:9a:2e:6d:55:17:9f:26: 5f:b9:21:22:6c:ca:ac:c8:a4:79:97:cc:58:b7:6b:1c:1b:ab: e0:b4:18:ec:1b:a9:d6:ae:70:45:dd:fe:41:35:3e:fd:12:db: 3e:24:3f:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzLYyn6gV/9lsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZmJhOTI0ZjMtYmQxOC00ODU5LWE0MDYtODJiMDQxNDVhY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF+7kWMxYQIoYxaIcgpbuQoKKFvb50hgvfBr d7xN+NrOdvSTHNNbgRcoLkOnZ8W2Mpk6ACOOfcUIMDTGt9sf4jsNO+1wK55Mfe6l pStrPiYGBH9DbmTw+B9imAxU0gT1jhe05WE0yajbnaHPb8oAIc2TUt+oxRg7z+iW g2vXNYsmLJtutVXce1mVmenGWj8txKG9Lcxn/605efOGDwB2+2XPIGtOPHD2THrJ +C744ZFKeJ1Kei8NLEAtl0UADsobM/V8YSiWpJ0vApKf1uR98eJbQlJDSs4Gnr7T Jw8j7+okQIppSjFajE24Spbsnlffa6QKEdV5heSelk2pLRbnwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQw+GuSkZ0zv9O7lt3AuuWIFjBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMjhjMTQ1NjgtM2Q2Yi0z YWZhLWFhZjMtMzVlZjI5MGE4MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSlUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy0lfFXnMe0sj0hhik3cuCGlsREMO2aov5RUhl5wu0KK1fzDNchkIIZ Ct1NbNlMZdfm+XaPITaDfmC6U4WIK9FVX4KOi/WlB/stvoUxuArsx6XFmNQEuR3D v2zQkAwv9QlHvdrx0Fsy6FwiwINcnoBwX/gRtqbEIdDE4Up0hjO7vGNGNJZmUa/T xpB3pjC5eRiO2fBDEbdhB6Max6Tg0gQ7MT4h5azT2oFIAYnaRkJL1dY2MpAdrsVH YbHc0AoWkQMw4nAoybMW/c1aIEPX+8vXmi5tVRefJl+5ISJsyqzIpHmXzFi3axwb q+C0GOwbqdaucEXd/kE1Pv0S2z4kP14= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:04 2025 by rpki-client