$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ad155f76-6d2b-3185-a31b-ceeb041dfcc4.roa File: ad155f76-6d2b-3185-a31b-ceeb041dfcc4.roa (raw, json) Hash identifier: Z34vtvhbyDcbf8dYCXyjKB7N5yi6mMoImTMAZ7d7GZM= Subject key identifier: C2:8A:FD:BD:4C:78:A0:E3:CD:D9:FD:41:6D:67:0D:31:40:05:47:7B Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B643025783C81D59B4E3C98 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ad155f76-6d2b-3185-a31b-ceeb041dfcc4.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 74.85.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:30:25:78:3c:81:d5:9b:4e:3c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=c1cc1db1-4070-41c3-9742-1feb8ced5e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:18:46:d5:61:45:38:b4:0b:bb:a8:e7:85: 79:94:2e:34:68:be:42:8f:f7:42:e4:6c:c8:54:0e: 55:34:db:3c:b6:0a:ee:47:f2:65:f4:6a:6d:a3:10: ea:c7:0b:b7:97:a4:61:94:7a:79:27:2a:9c:78:74: 13:b1:65:79:41:57:b7:16:05:41:2f:60:7f:5f:03: 4c:b9:ad:d4:37:b1:e3:72:9d:f7:87:e1:a8:85:38: 1d:05:95:2b:a8:3f:ce:f9:f6:52:88:d4:5c:20:72: 64:d4:14:a4:93:9e:67:31:db:7d:3e:6b:5d:9a:07: 3c:1e:d9:2a:45:4f:a7:ea:4a:0b:cc:4f:86:4a:ed: c9:a0:52:9b:cc:27:de:26:ce:c3:2e:e5:27:ff:70: 9b:11:98:36:3c:6c:b6:16:2a:17:75:0e:28:70:f3: 4b:42:94:73:25:ac:1c:02:d1:e9:83:91:87:99:1d: 70:65:f4:b1:50:22:6a:b2:49:9f:38:56:59:64:e4: 53:50:9f:91:72:36:10:68:be:9f:ae:b1:00:40:a0: bc:d9:0d:74:10:27:d4:e8:03:66:a9:4b:c4:48:b0: 74:cf:92:a4:1b:3e:a2:2e:e0:c8:4c:ff:f8:96:6d: 2f:69:f2:74:d3:35:62:e4:86:3f:3a:3c:c3:8b:24: 2e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8A:FD:BD:4C:78:A0:E3:CD:D9:FD:41:6D:67:0D:31:40:05:47:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ad155f76-6d2b-3185-a31b-ceeb041dfcc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 74.85.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:35:ed:aa:a6:a8:ee:10:2f:c7:e9:53:0b:8b:44:6c:42:e5: 55:6a:d6:04:d0:9a:21:d1:8f:4d:52:dd:aa:46:12:3a:ac:bd: 6a:f2:5b:2f:40:ef:a5:6a:6f:11:91:52:6b:6e:8b:ed:58:e3: d3:72:41:d4:a7:ae:93:92:41:b0:9b:2d:f1:fb:49:95:50:36: 6d:61:b7:c7:37:cd:5d:90:ad:54:eb:d8:b2:96:d8:f0:f0:29: aa:91:ee:cd:66:8c:84:6f:25:3e:87:aa:33:eb:3b:f8:8a:05: dc:b7:42:3d:37:d2:c1:8c:51:d9:e0:f8:dd:f0:9a:a8:f7:4e: 26:1f:0e:e2:e4:bb:1b:ad:06:c4:8b:fe:94:97:0d:84:d0:77: 96:84:c7:8a:b9:50:0c:96:c3:73:b6:f4:5d:32:22:5d:48:ae: 72:7c:9a:7a:24:82:b3:8c:59:d6:84:52:02:9e:31:69:d9:9f: 72:32:37:16:72:bc:10:6d:c8:fe:28:fd:d9:00:10:e3:14:c0: f4:9d:18:84:16:4a:60:a5:38:4d:a7:1d:d9:81:ac:64:8e:62: b6:f9:34:cb:15:7a:23:21:d9:6c:bc:fb:40:4e:19:85:b1:26: c5:95:3d:57:11:60:1c:24:9a:0d:b5:66:de:5b:89:72:0b:0c: 64:33:0f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDAleDyB1ZtOPJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YzFjYzFkYjEtNDA3MC00MWMzLTk3NDItMWZlYjhjZWQ1ZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF0YRtVhRTi0C7uo54V5lC40aL5Cj/dC5GzI VA5VNNs8tgruR/Jl9GptoxDqxwu3l6RhlHp5JyqceHQTsWV5QVe3FgVBL2B/XwNM ua3UN7Hjcp33h+GohTgdBZUrqD/O+fZSiNRcIHJk1BSkk55nMdt9Pmtdmgc8Htkq RU+n6koLzE+GSu3JoFKbzCfeJs7DLuUn/3CbEZg2PGy2FioXdQ4ocPNLQpRzJawc AtHpg5GHmR1wZfSxUCJqskmfOFZZZORTUJ+RcjYQaL6frrEAQKC82Q10ECfU6ANm qUvESLB0z5KkGz6iLuDITP/4lm0vafJ00zVi5IY/OjzDiyQutwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKK/b1MeKDjzdn9QW1nDTFABUd7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvYWQxNTVmNzYtNmQyYi0z MTg1LWEzMWItY2VlYjA0MWRmY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSlVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk17aqmqO4QL8fpUwuLRGxC5VVq1gTQmiHRj01S3apGEjqsvWryWy9A 76VqbxGRUmtui+1Y49NyQdSnrpOSQbCbLfH7SZVQNm1ht8c3zV2QrVTr2LKW2PDw KaqR7s1mjIRvJT6HqjPrO/iKBdy3Qj030sGMUdng+N3wmqj3TiYfDuLkuxutBsSL /pSXDYTQd5aEx4q5UAyWw3O29F0yIl1IrnJ8mnokgrOMWdaEUgKeMWnZn3IyNxZy vBBtyP4o/dkAEOMUwPSdGIQWSmClOE2nHdmBrGSOYrb5NMsVeiMh2Wy8+0BOGYWx JsWVPVcRYBwkmg21Zt5biXILDGQzD24= -----END CERTIFICATE-----Generated at Sat Apr 12 12:28:14 2025 by rpki-client