$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa File: 24ba5273-3345-3148-8db9-2c7983ba89c8.roa (raw, json) Hash identifier: MNrTZQctfj/E0qzGuaur+8L8656MycABqm5Uq6fevJw= Subject key identifier: 0C:57:CA:30:EC:75:1C:9E:74:DA:37:38:B3:77:B9:B9:9C:7E:F9:55 Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F43285848748B129D94DFA0E9D4950810 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 13451 IP address blocks: 74.205.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:12:9d:94:df:a0:e9:d4:95:08:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=bb0cc009-355a-47de-963b-94cdd53ef953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:8e:34:49:0f:c8:60:28:8c:bc:39:53:87: eb:35:72:15:fc:90:39:86:62:7e:5d:56:49:99:93: 1a:5a:14:0d:97:60:f8:15:64:2f:a3:e1:e1:bf:af: 99:fb:5b:51:84:fc:9b:ae:ec:fa:7e:fb:b2:81:85: 72:7d:c9:1f:63:3c:f0:08:f1:04:d9:41:3b:f0:83: 2e:90:c8:f0:5d:8d:33:f6:03:da:b2:36:01:90:c6: ee:05:a1:d8:ed:6b:03:21:f9:23:61:c2:f8:19:28: 6a:b1:76:a8:55:d7:9b:ab:52:5d:9a:f6:19:27:b3: e6:9a:6a:82:0f:88:d4:67:e1:76:e8:32:94:f5:53: 5d:27:03:8a:ae:48:76:a5:9f:14:ee:a6:15:ed:10: 5b:cc:d3:78:98:9e:84:ab:89:01:34:25:83:72:be: 8f:81:3e:7c:d0:60:57:5c:0f:ea:9c:ee:cb:55:c7: 3e:07:9a:08:b9:53:dc:8d:b6:63:c0:e2:e5:f6:37: 50:30:34:a9:a2:b9:f0:04:bf:19:f1:f4:6d:d3:ec: 0d:4a:6f:55:61:67:be:1b:92:8f:8e:3c:da:ed:9e: 49:17:b5:19:93:c6:82:75:11:61:c1:1c:4d:c2:12: 88:a5:7a:21:5d:53:6c:79:c9:b4:65:fb:be:8b:3b: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:57:CA:30:EC:75:1C:9E:74:DA:37:38:B3:77:B9:B9:9C:7E:F9:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 74.205.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4d:38:5b:38:4a:12:b0:df:85:7c:22:ad:71:5e:e4:05:f6: 2d:53:93:79:74:45:45:c7:6f:25:ee:ba:df:97:36:e8:18:7a: 9a:6b:9d:74:80:fa:b7:48:76:f6:86:b4:03:b1:5c:3c:3c:21: 52:57:18:3d:f9:f4:85:4d:00:3d:dc:18:93:26:47:56:c0:d9: 59:7a:5a:43:bc:10:d1:9f:bd:4f:ec:6b:06:70:2a:04:94:8d: 52:61:8a:5c:0e:ef:ca:b7:2e:3a:9e:92:66:7c:c0:9c:bf:3a: e1:21:65:59:69:2c:94:8c:b2:a2:f5:bf:ea:01:7a:e7:b8:ff: ae:98:5e:22:0e:b8:6c:35:14:15:7b:55:22:84:8c:c5:45:4c: d7:bf:03:c9:19:b9:ff:7a:d6:50:e4:e3:bf:31:aa:0f:6a:62: 6e:8e:36:52:c8:5b:b3:02:e4:b1:7e:93:ea:cb:3b:56:1b:95: 03:ef:b9:1d:a4:63:28:36:3d:25:08:ca:10:26:36:85:6c:7c: c7:1e:2f:e6:39:3b:cc:81:77:a6:cf:48:c7:42:1b:b8:ca:b4: 97:f4:f9:be:b8:69:d0:b2:db:e5:7e:e8:17:cd:2a:76:0a:8f: c6:d9:a2:55:15:e3:d2:65:b4:80:97:35:7c:d8:3e:20:26:82: f6:43:b3:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ixKdlN+g6dSVCBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk YmIwY2MwMDktMzU1YS00N2RlLTk2M2ItOTRjZGQ1M2VmOTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQCONEkPyGAojLw5U4frNXIV/JA5hmJ+XVZJ mZMaWhQNl2D4FWQvo+Hhv6+Z+1tRhPybruz6fvuygYVyfckfYzzwCPEE2UE78IMu kMjwXY0z9gPasjYBkMbuBaHY7WsDIfkjYcL4GShqsXaoVdebq1JdmvYZJ7PmmmqC D4jUZ+F26DKU9VNdJwOKrkh2pZ8U7qYV7RBbzNN4mJ6Eq4kBNCWDcr6PgT580GBX XA/qnO7LVcc+B5oIuVPcjbZjwOLl9jdQMDSpornwBL8Z8fRt0+wNSm9VYWe+G5KP jjza7Z5JF7UZk8aCdRFhwRxNwhKIpXohXVNsecm0Zfu+izuh6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxXyjDsdRyedNo3OLN3ubmcfvlVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvMjRiYTUyNzMtMzM0NS0z MTQ4LThkYjktMmM3OTgzYmE4OWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSs3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhNOFs4ShKw34V8Iq1xXuQF9i1Tk3l0RUXHbyXuut+XNugYepprnXSA +rdIdvaGtAOxXDw8IVJXGD359IVNAD3cGJMmR1bA2Vl6WkO8ENGfvU/sawZwKgSU jVJhilwO78q3LjqekmZ8wJy/OuEhZVlpLJSMsqL1v+oBeue4/66YXiIOuGw1FBV7 VSKEjMVFTNe/A8kZuf961lDk478xqg9qYm6ONlLIW7MC5LF+k+rLO1YblQPvuR2k Yyg2PSUIyhAmNoVsfMceL+Y5O8yBd6bPSMdCG7jKtJf0+b64adCy2+V+6BfNKnYK j8bZolUV49JltICXNXzYPiAmgvZDsyE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:45 2025 by rpki-client