$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa File: 28c14568-3d6b-3afa-aaf3-35ef290a818e.roa (raw, json) Hash identifier: MshoAjNkyYkTBzcdcRIBTyYBV5aJWQiauhhfytmptnI= Subject key identifier: 3B:AF:25:7D:47:4D:E2:09:06:CE:02:B6:FA:CF:C2:78:D2:D0:27:DC Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64305C3F642E7D0CB2EF00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 74.85.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:30:5c:3f:64:2e:7d:0c:b2:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=90ffd063-2d2d-41d0-a089-81bc84e8275c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:77:0e:b3:5e:6a:ca:f8:59:88:b2:64:a3: 5e:3a:cc:92:e3:85:55:80:33:35:c8:6a:75:b8:b5: a1:78:d8:62:cf:9d:27:93:54:44:c3:f0:34:9c:e7: ef:21:69:0a:50:71:81:50:1d:b0:be:8b:07:15:5d: 53:ed:d8:4a:14:7f:7e:97:cf:5e:5f:13:b2:f8:d1: 80:2b:cc:39:16:8e:dd:b8:46:c3:73:05:a2:63:0c: 3c:8b:fb:ee:77:93:57:70:7b:28:e9:b7:9f:ec:2a: 48:db:74:b3:a7:ac:07:da:f4:9d:d2:5e:72:cf:9a: 80:12:ef:2d:21:ee:d6:65:3c:37:b0:93:67:1f:55: 0f:db:3d:5a:bd:7d:93:13:de:d5:56:2e:b8:c0:ed: 0f:3f:39:45:0e:d1:39:0c:1b:a1:96:10:75:17:3b: 25:03:ef:0d:9f:a4:26:2c:ec:2f:ca:e5:0e:13:18: 51:c1:26:40:21:9d:27:3e:0b:a7:ca:4b:6a:a3:2c: 42:20:ab:3d:92:4e:02:33:db:8f:dc:27:86:48:56: c1:ae:7a:86:c8:6e:6e:1f:30:5f:70:cc:bf:44:f5: 4e:c6:05:73:65:e5:1a:e2:5c:92:f8:4a:d6:e0:e5: 5d:79:74:0e:37:0c:d9:33:5a:5c:09:6f:d9:20:a7: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AF:25:7D:47:4D:E2:09:06:CE:02:B6:FA:CF:C2:78:D2:D0:27:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/28c14568-3d6b-3afa-aaf3-35ef290a818e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e1:7b:f7:90:d2:1f:53:f2:60:97:ba:7a:6a:14:28:51:3b: 56:56:19:7a:a2:1a:d9:df:b8:1c:6a:5e:6c:f4:c3:9d:01:50: ce:31:84:28:31:c8:a0:63:ad:09:a0:a0:72:79:cf:34:80:63: e6:f9:67:b5:58:60:32:e1:19:4a:27:0f:85:81:8d:19:e7:e3: aa:6f:b7:5a:1a:0b:4a:26:68:cd:11:39:7d:a3:b6:ba:2b:92: 46:2b:47:7f:54:f1:7d:d1:fa:bb:a2:b0:6e:d7:36:08:80:84: ca:3d:47:79:28:97:ad:43:e6:c1:3d:06:63:ab:a3:04:a1:c8: 61:2b:dc:b9:44:db:79:1a:56:91:84:bc:08:1b:bb:a4:01:3a: 20:62:0a:49:72:b9:05:6c:d6:db:fc:0d:22:55:e9:ad:aa:2f: df:b4:97:c3:71:03:d8:80:6a:3f:d5:0f:aa:52:30:73:cc:67: c6:61:e3:a7:29:ae:db:45:6f:39:1c:c8:05:3f:a1:93:32:cf: e5:fb:22:21:e0:06:7d:db:e6:e3:5b:f1:81:d4:a0:f2:cb:7a: b6:b2:89:be:64:6a:67:be:66:94:fd:db:d5:ea:77:4b:be:23: 30:0e:3c:d5:29:ec:53:21:53:53:bb:33:c0:a2:2f:d2:56:b0: c1:31:ef:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDBcP2QufQyy7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTBmZmQwNjMtMmQyZC00MWQwLWEwODktODFiYzg0ZTgyNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbN3DrNeasr4WYiyZKNeOsyS44VVgDM1yGp1 uLWheNhiz50nk1REw/A0nOfvIWkKUHGBUB2wvosHFV1T7dhKFH9+l89eXxOy+NGA K8w5Fo7duEbDcwWiYww8i/vud5NXcHso6bef7CpI23Szp6wH2vSd0l5yz5qAEu8t Ie7WZTw3sJNnH1UP2z1avX2TE97VVi64wO0PPzlFDtE5DBuhlhB1FzslA+8Nn6Qm LOwvyuUOExhRwSZAIZ0nPgunyktqoyxCIKs9kk4CM9uP3CeGSFbBrnqGyG5uHzBf cMy/RPVOxgVzZeUa4lyS+ErW4OVdeXQONwzZM1pcCW/ZIKeNGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuvJX1HTeIJBs4CtvrPwnjS0CfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMjhjMTQ1NjgtM2Q2Yi0z YWZhLWFhZjMtMzVlZjI5MGE4MThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSlUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfhe/eQ0h9T8mCXunpqFChRO1ZWGXqiGtnfuBxqXmz0w50BUM4xhCgx yKBjrQmgoHJ5zzSAY+b5Z7VYYDLhGUonD4WBjRnn46pvt1oaC0omaM0ROX2jtror kkYrR39U8X3R+ruisG7XNgiAhMo9R3kol61D5sE9BmOrowShyGEr3LlE23kaVpGE vAgbu6QBOiBiCklyuQVs1tv8DSJV6a2qL9+0l8NxA9iAaj/VD6pSMHPMZ8Zh46cp rttFbzkcyAU/oZMyz+X7IiHgBn3b5uNb8YHUoPLLerayib5kame+ZpT929Xqd0u+ IzAOPNUp7FMhU1O7M8CiL9JWsMEx78k= -----END CERTIFICATE-----Generated at Sun Apr 13 02:51:42 2025 by rpki-client