$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa File: 7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa (raw, json) Hash identifier: pRdpOJd6jCPlUXm0FlZbZDIuXetpwwlHQ4sdNfm/xd4= Subject key identifier: CD:A1:03:C0:C6:93:DA:78:06:19:D3:D9:DD:C5:E3:24:7F:67:E5:C8 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B30C83D22B9259D318280 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 11404 IP address blocks: 74.85.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:30:c8:3d:22:b9:25:9d:31:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=05d42697-a73f-45e7-8b69-c98785d0586e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:3c:40:46:5c:99:ff:6b:6e:d1:d6:05:03: 3c:00:d8:c4:a7:80:31:7c:64:09:ec:b5:61:82:06: 36:11:f7:f7:5f:f5:0f:8f:55:c3:44:6b:6d:0c:60: 7f:fb:3e:28:00:64:95:ba:c5:99:fa:94:9a:35:ad: 24:62:dd:b6:b2:cc:57:e1:5a:24:ca:8d:83:e4:51: ea:a0:20:59:6c:13:b4:69:47:3c:4b:d9:ae:2d:ee: 79:13:08:e1:bb:dd:45:bf:ff:1b:68:ed:9b:09:7b: 52:28:6a:af:51:3a:1d:f0:d5:28:ce:ca:63:41:23: e6:61:af:ea:53:04:dd:62:4d:30:04:70:40:06:db: de:d6:7a:42:d9:ed:f1:52:b5:6f:6a:ff:64:3f:6f: 7c:40:2c:5a:09:42:1d:5e:2a:57:bd:72:84:be:23: d7:a7:2a:20:7f:b5:5d:99:b7:1c:3a:58:8c:91:38: b9:29:b3:ac:31:87:a1:03:4a:44:de:56:4c:6e:55: 4b:09:30:82:1d:52:e9:d8:39:d7:a1:3c:2f:a3:89: b0:e9:e8:42:b1:da:a9:52:cf:6c:d7:b6:27:1a:6e: 3e:80:7e:51:a2:82:64:8d:07:d5:61:a6:5a:5f:e2: 25:27:eb:2b:96:c7:16:60:d0:ba:db:31:20:21:22: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A1:03:C0:C6:93:DA:78:06:19:D3:D9:DD:C5:E3:24:7F:67:E5:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d85eb5e-2cf2-31e1-8b1e-145a8cd6aece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:77:27:b8:bf:2f:45:22:f5:80:e7:55:f6:3f:d5:07:d6:df: 2d:65:0d:94:46:7d:89:41:4e:2f:9d:f9:5e:dd:74:9e:1d:1e: 5a:33:17:4a:8c:f8:03:69:40:ee:77:77:62:a4:27:71:d7:34: 19:fb:45:47:6f:20:ff:cf:84:f4:df:3a:20:7c:1d:f1:9e:f9: fb:ce:f0:a7:7f:df:bc:2c:4f:00:99:af:22:2c:7e:f9:86:90: 03:bc:6b:48:03:eb:8f:9f:d7:72:1b:d3:ca:3d:eb:19:57:15: fc:5f:f9:55:68:d8:a1:3b:eb:75:d8:ab:33:13:ef:24:80:1c: 07:6e:61:e0:01:9c:db:87:0c:b1:4e:1c:56:1f:ec:db:ea:bb: cf:99:a5:2a:b2:9b:11:2a:96:dc:5b:79:a4:69:57:41:c8:80: a2:86:70:b5:a1:5c:2a:a1:9e:28:db:9f:5f:5a:38:42:5d:b3: 8b:fb:7f:5e:26:2b:c8:ed:e9:51:f4:45:de:f8:92:10:b5:29: 9f:6c:9a:6b:b5:bd:84:66:62:57:b2:2e:c4:0c:c0:fd:af:df: a6:0e:bb:ac:6f:10:74:5b:66:73:0c:20:f3:e4:94:ce:31:62: fe:10:3c:3d:a7:b4:e0:04:1b:fc:20:98:99:9a:0b:d7:95:57: b0:55:1a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzDIPSK5JZ0xgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk MDVkNDI2OTctYTczZi00NWU3LThiNjktYzk4Nzg1ZDA1ODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUg8QEZcmf9rbtHWBQM8ANjEp4AxfGQJ7LVh ggY2Eff3X/UPj1XDRGttDGB/+z4oAGSVusWZ+pSaNa0kYt22ssxX4Vokyo2D5FHq oCBZbBO0aUc8S9muLe55Ewjhu91Fv/8baO2bCXtSKGqvUTod8NUozspjQSPmYa/q UwTdYk0wBHBABtve1npC2e3xUrVvav9kP298QCxaCUIdXipXvXKEviPXpyogf7Vd mbccOliMkTi5KbOsMYehA0pE3lZMblVLCTCCHVLp2DnXoTwvo4mw6ehCsdqpUs9s 17YnGm4+gH5RooJkjQfVYaZaX+IlJ+srlscWYNC62zEgISLIuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2hA8DGk9p4BhnT2d3F4yR/Z+XIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2Q4NWViNWUtMmNmMi0z MWUxLThiMWUtMTQ1YThjZDZhZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSlUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR3J7i/L0Ui9YDnVfY/1QfW3y1lDZRGfYlBTi+d+V7ddJ4dHlozF0qM +ANpQO53d2KkJ3HXNBn7RUdvIP/PhPTfOiB8HfGe+fvO8Kd/37wsTwCZryIsfvmG kAO8a0gD64+f13Ib08o96xlXFfxf+VVo2KE763XYqzMT7ySAHAduYeABnNuHDLFO HFYf7Nvqu8+ZpSqymxEqltxbeaRpV0HIgKKGcLWhXCqhnijbn19aOEJds4v7f14m K8jt6VH0Rd74khC1KZ9smmu1vYRmYleyLsQMwP2v36YOu6xvEHRbZnMMIPPklM4x Yv4QPD2ntOAEG/wgmJmaC9eVV7BVGiI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:07 2025 by rpki-client