$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa File: 9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa (raw, json) Hash identifier: GFfrVgj/FSlUOLzstQUJ5kKkzfJYBoWkUzJUv7qA7QU= Subject key identifier: E3:5F:10:16:7F:FF:81:1A:37:0D:47:ED:70:BF:FB:FB:C6:E7:BE:C1 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858493ED3D7513C20F7D628309980 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 26407 IP address blocks: 74.85.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d7:51:3c:20:f7:d6:28:30:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=42206af1-1ff3-4dfd-88f4-2c4ac106aa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:27:d4:26:92:a1:b1:1b:45:fc:02:85:e9:9d: be:17:48:6a:c6:69:3f:3e:bc:b4:cd:19:f3:fc:0c: 1e:fa:7f:ed:64:f9:76:de:2c:d9:1f:1e:e0:de:9c: 31:99:9c:0b:0e:31:d2:fe:c0:08:bb:e6:0a:ea:7e: 37:05:00:8e:98:e1:48:d5:4e:08:e4:22:03:99:67: e5:fa:50:73:7c:5a:c7:3a:a8:07:6e:00:67:76:8c: 1f:e6:ed:7d:03:ac:17:5a:85:42:16:ce:dc:e9:ec: 82:fb:25:63:e8:4a:33:96:22:be:d5:a6:e6:df:a6: 1e:3d:04:f8:d8:a9:8a:d4:65:58:f5:f2:08:ee:cb: c6:7e:64:e0:c8:35:fe:54:21:87:58:73:25:63:c3: a0:35:4a:11:f1:bf:ca:46:5e:3c:60:ef:04:b9:e0: 83:d5:55:d8:ef:fc:f2:8f:8e:87:33:a6:a0:49:17: 8f:6b:8f:1c:9a:4f:d7:7e:c0:99:a6:2b:19:fd:39: 11:c5:cd:c2:16:da:c4:81:c7:58:47:8b:5e:43:7f: 63:99:ed:de:59:75:16:43:77:93:21:46:ef:24:a9: f5:b6:8b:e4:65:9a:e3:a2:e6:21:49:4f:d8:e2:9d: 76:ab:1c:df:53:ef:0f:2a:83:6f:4f:ee:8f:f1:eb: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5F:10:16:7F:FF:81:1A:37:0D:47:ED:70:BF:FB:FB:C6:E7:BE:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/9dfa1cbc-f228-3a18-a8c6-2b8a7153104a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f8:41:14:b3:f1:7b:74:09:14:92:16:aa:7b:50:ac:f3:15: 46:2e:5c:f2:f6:12:9e:8d:85:b5:cb:0c:16:46:34:cf:6a:9e: 38:81:c1:c8:c0:b5:1b:49:9d:01:cc:25:fa:64:a7:5f:37:33: 27:e7:5d:4c:e2:27:70:a3:e0:4c:40:65:25:c8:79:bd:5f:3c: 4a:28:68:2b:c4:95:a4:e4:de:e7:ca:4f:b6:a9:f5:68:96:4b: f8:40:ff:8c:88:71:b5:b5:9b:99:03:16:1f:18:13:80:8c:67: a0:97:6f:f7:35:1b:0a:a1:d1:4a:37:38:e0:e0:96:74:eb:0e: 6b:4a:46:29:93:23:30:53:56:e0:b9:88:8e:60:7f:55:a9:92: a6:f4:64:dd:cf:18:3f:81:dc:d9:f4:9e:d8:16:52:2b:28:e0: 48:3b:f9:ee:b3:99:10:4d:85:0a:e9:d9:5c:70:35:9c:b2:3c: 8e:d5:66:f0:22:d8:d2:43:42:96:52:8f:4f:d9:d8:2b:7c:d9: a4:9b:2d:e3:f0:9e:17:d1:e4:b7:51:a6:e4:c8:58:98:8a:84: 19:df:47:f3:51:29:a7:7f:a0:dc:64:a4:a4:49:78:77:5c:88: c2:1e:72:7c:b6:01:9d:45:2f:01:da:a9:c1:7e:98:5a:dd:78: 0a:b4:4f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09dRPCD31igwmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NDIyMDZhZjEtMWZmMy00ZGZkLTg4ZjQtMmM0YWMxMDZhYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCfUJpKhsRtF/AKF6Z2+F0hqxmk/Pry0zRnz /Awe+n/tZPl23izZHx7g3pwxmZwLDjHS/sAIu+YK6n43BQCOmOFI1U4I5CIDmWfl +lBzfFrHOqgHbgBndowf5u19A6wXWoVCFs7c6eyC+yVj6EozliK+1abm36YePQT4 2KmK1GVY9fII7svGfmTgyDX+VCGHWHMlY8OgNUoR8b/KRl48YO8EueCD1VXY7/zy j46HM6agSRePa48cmk/XfsCZpisZ/TkRxc3CFtrEgcdYR4teQ39jme3eWXUWQ3eT IUbvJKn1tovkZZrjouYhSU/Y4p12qxzfU+8PKoNvT+6P8evkdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONfEBZ//4EaNw1H7XC/+/vG577BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOWRmYTFjYmMtZjIyOC0z YTE4LWE4YzYtMmI4YTcxNTMxMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSlVaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT4QRSz8Xt0CRSSFqp7UKzzFUYuXPL2Ep6NhbXLDBZGNM9qnjiBwcjA tRtJnQHMJfpkp183MyfnXUziJ3Cj4ExAZSXIeb1fPEooaCvElaTk3ufKT7ap9WiW S/hA/4yIcbW1m5kDFh8YE4CMZ6CXb/c1Gwqh0Uo3OODglnTrDmtKRimTIzBTVuC5 iI5gf1Wpkqb0ZN3PGD+B3Nn0ntgWUiso4Eg7+e6zmRBNhQrp2VxwNZyyPI7VZvAi 2NJDQpZSj0/Z2Ct82aSbLePwnhfR5LdRpuTIWJiKhBnfR/NRKad/oNxkpKRJeHdc iMIecny2AZ1FLwHaqcF+mFrdeAq0T+0= -----END CERTIFICATE-----Generated at Sat Apr 12 12:37:20 2025 by rpki-client