$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa File: d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa (raw, json) Hash identifier: FJ+bCEIcUHtg9RQdxLdLYOQweT/zH/ojerfm8pQzgCw= Subject key identifier: 7A:F1:64:21:1C:FB:F9:BA:0F:A6:63:11:1A:9F:22:80:65:DE:62:EF Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848F4F69329DDB724CC65360D80 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 25649 IP address blocks: 74.112.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:93:29:dd:b7:24:cc:65:36:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=b6f04dc5-3c4f-4b33-8177-b36886b0d6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:93:a9:ce:ee:02:7a:c2:a9:b2:00:b7:bf: 74:9d:60:ad:0a:0c:e8:3a:0e:5e:3f:61:68:c9:dc: ac:2c:30:dd:ec:ef:c9:91:3f:7d:72:ef:1c:16:e4: 06:98:19:7d:ee:cc:7c:d5:c6:d1:6e:c6:94:45:ec: 47:9a:2e:b3:5d:d7:61:30:dc:63:44:18:8a:61:5c: 83:31:f4:2e:a0:f2:bd:67:33:65:ee:1a:59:ec:8c: 98:1e:b9:a6:b6:11:dc:cb:ea:11:87:56:e9:5a:6c: c7:6e:6c:65:9b:be:9a:45:0b:ba:84:2c:b2:d7:d2: d5:40:ae:7e:56:4b:11:ef:08:34:bd:95:ef:77:61: 02:6f:c8:1c:b6:d1:a0:4c:33:c5:be:b6:16:10:90: 49:e3:e2:c0:75:16:c8:e6:0b:f4:70:6e:04:06:54: 58:b8:1d:a9:2d:39:b6:42:3f:72:b0:90:32:1e:92: 8b:77:61:87:bc:ac:44:e0:16:65:49:00:45:34:78: b5:bf:15:e4:39:8e:67:f1:c3:50:aa:d5:5b:e5:6d: d7:ea:5c:8e:ce:eb:29:59:f1:3e:6d:30:09:65:5c: 14:8d:05:19:21:af:ff:b9:20:86:e0:a9:9e:50:ee: 22:a9:12:2b:5e:e3:e1:59:29:5f:2f:43:7d:34:21: 9c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F1:64:21:1C:FB:F9:BA:0F:A6:63:11:1A:9F:22:80:65:DE:62:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/d48f88ce-84b8-34c9-b77e-c19ac22e820e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 74.112.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f4:0d:42:cc:15:fd:5c:aa:61:6c:50:5b:80:b4:08:fb:f8: ea:44:ac:8a:8d:13:09:55:ce:df:75:e8:46:17:00:e2:17:08: 79:e9:99:fe:b3:ff:c4:6d:fe:ea:79:c7:b8:33:1e:77:d2:58: 0c:7c:0c:92:0c:54:27:c6:67:04:be:5c:98:c0:06:56:da:96: 70:a7:8b:06:56:c9:f1:58:88:53:77:ae:e5:54:a8:be:00:ca: 80:32:f0:3f:1e:24:db:69:36:23:f4:ea:e1:92:5e:88:26:29: 8f:9f:f2:ae:82:54:be:14:6f:d1:68:bc:b4:15:ba:14:64:12: da:d6:6b:85:00:98:54:4c:42:39:d5:9f:66:65:26:92:d3:7d: b1:b9:bc:08:68:75:54:91:51:92:86:44:b4:69:8d:8a:16:df: 9b:bf:f4:5b:fc:19:4c:2d:ad:0e:36:4a:1e:27:c6:33:79:c9: 56:b3:32:e5:37:20:24:4d:5b:a9:6f:3e:0f:5b:27:96:c8:ba: 3b:97:39:99:ce:9d:cc:bb:94:26:b9:18:93:69:54:50:8c:2e: 0b:16:ff:c5:e9:bf:aa:5e:bb:bf:0f:db:4d:58:4b:01:ba:c3: bd:a2:12:7b:dc:87:28:f7:c6:e0:ed:d6:66:51:f2:13:a3:0f: 1c:c7:c8:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pMp3bckzGU2DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YjZmMDRkYzUtM2M0Zi00YjMzLTgxNzctYjM2ODg2YjBkNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9qTqc7uAnrCqbIAt790nWCtCgzoOg5eP2Fo ydysLDDd7O/JkT99cu8cFuQGmBl97sx81cbRbsaURexHmi6zXddhMNxjRBiKYVyD MfQuoPK9ZzNl7hpZ7IyYHrmmthHcy+oRh1bpWmzHbmxlm76aRQu6hCyy19LVQK5+ VksR7wg0vZXvd2ECb8gcttGgTDPFvrYWEJBJ4+LAdRbI5gv0cG4EBlRYuB2pLTm2 Qj9ysJAyHpKLd2GHvKxE4BZlSQBFNHi1vxXkOY5n8cNQqtVb5W3X6lyOzuspWfE+ bTAJZVwUjQUZIa//uSCG4KmeUO4iqRIrXuPhWSlfL0N9NCGcJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrxZCEc+/m6D6ZjERqfIoBl3mLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvZDQ4Zjg4Y2UtODRiOC0z NGM5LWI3N2UtYzE5YWMyMmU4MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr0DULMFf1cqmFsUFuAtAj7+OpErIqNEwlVzt916EYXAOIXCHnpmf6z /8Rt/up5x7gzHnfSWAx8DJIMVCfGZwS+XJjABlbalnCniwZWyfFYiFN3ruVUqL4A yoAy8D8eJNtpNiP06uGSXogmKY+f8q6CVL4Ub9FovLQVuhRkEtrWa4UAmFRMQjnV n2ZlJpLTfbG5vAhodVSRUZKGRLRpjYoW35u/9Fv8GUwtrQ42Sh4nxjN5yVazMuU3 ICRNW6lvPg9bJ5bIujuXOZnOncy7lCa5GJNpVFCMLgsW/8Xpv6peu78P201YSwG6 w72iEnvchyj3xuDt1mZR8hOjDxzHyEk= -----END CERTIFICATE-----Generated at Sat Apr 12 10:14:32 2025 by rpki-client