$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3df95919-da70-3e70-bd1b-b6fc3619e127.roa File: 3df95919-da70-3e70-bd1b-b6fc3619e127.roa (raw, json) Hash identifier: OW+J0OGisYCSmGNsoHGYCQaETLgdPChOj6CWrf3sWd0= Subject key identifier: 9C:09:A6:73:AB:4F:F9:9A:C0:E4:57:95:DC:AB:07:44:79:52:3D:15 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A9965FD149EB42B387160580 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3df95919-da70-3e70-bd1b-b6fc3619e127.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397227 IP address blocks: 204.74.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:5f:d1:49:eb:42:b3:87:16:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=31d37409-d68e-44ff-90c1-1921f13796c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fa:d5:8c:ee:db:1c:e6:f2:a4:d9:a4:b5:11: 56:8d:1c:f7:4a:91:99:8e:72:05:0b:d4:e1:88:85: 3a:d5:8e:4a:81:cc:ec:3d:3c:30:26:f6:fb:6a:3b: ac:31:b1:e6:e2:36:6b:1b:15:8a:02:e5:d0:2f:94: 97:4b:42:c9:50:3f:20:1f:d3:6b:e3:df:b6:65:22: 90:70:68:91:84:41:6b:91:b8:8e:ec:e7:31:df:2b: 36:a9:cb:c8:3c:fd:17:59:30:e9:eb:3a:58:9b:18: 7a:65:12:7a:98:d9:57:eb:67:f4:c8:d2:19:f9:eb: 34:6e:73:e8:06:8f:5c:99:be:ee:85:84:33:27:f2: 91:fc:9a:66:e3:8b:7b:16:c8:51:79:03:a6:55:12: 9c:59:67:8b:6d:22:d6:bc:95:64:0a:f4:e0:5d:8b: 47:c1:79:b6:87:2c:b6:65:fe:5e:26:13:70:11:11: 3f:4b:df:f2:40:c1:6d:24:ef:55:d8:2a:43:4a:85: cd:e3:18:3e:43:95:55:44:f5:c8:9a:18:c7:8f:ef: 80:bc:57:fa:f6:4f:c8:87:bd:1f:43:27:ed:44:79: a3:35:f6:a8:1f:1c:aa:45:f7:41:05:cb:23:c5:64: f2:48:62:58:f4:d3:7f:a6:df:d9:01:18:f0:96:2e: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:09:A6:73:AB:4F:F9:9A:C0:E4:57:95:DC:AB:07:44:79:52:3D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3df95919-da70-3e70-bd1b-b6fc3619e127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a2:50:c2:ae:cc:82:71:de:6b:66:4d:eb:66:70:df:44:53: 28:82:ec:39:6c:ca:b8:da:da:49:42:0e:5f:c8:c3:db:27:e9: 69:a2:e5:d5:d1:69:d3:d7:39:2e:39:00:0b:ff:a7:21:3c:56: 94:01:6e:c0:bd:15:71:95:24:27:3a:cc:7d:ed:27:97:c3:31: 5c:c8:82:df:06:93:df:90:85:07:82:c1:2f:b9:f3:32:16:ed: 89:73:fa:ee:92:f5:ee:46:e0:a5:86:db:7e:5b:7e:0e:32:02: 10:a7:d4:4e:97:38:23:c9:cd:c0:52:ee:40:2b:59:6b:4a:66: 1c:d2:75:f2:fb:ca:d3:64:10:b0:3e:6a:79:05:4b:07:45:41: 30:f3:19:23:27:01:77:60:14:f2:01:44:20:d0:6a:0e:b7:be: 8e:df:96:41:5b:ea:e0:c4:36:21:7f:9c:71:8b:af:43:78:34: b2:57:ce:59:56:46:ff:b6:ed:15:dd:17:c0:d4:93:3b:ca:7b: 5f:e3:b4:29:ad:93:7d:aa:11:94:48:10:3a:ec:d8:b6:0a:f8: ee:c2:87:3b:bb:58:68:44:14:09:31:05:fe:5b:1e:7f:1a:64: 1b:79:8a:92:06:eb:26:51:ab:44:08:05:25:62:28:09:71:78: ff:22:50:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipll/RSetCs4cWBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzFkMzc0MDktZDY4ZS00NGZmLTkwYzEtMTkyMWYxMzc5NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvrVjO7bHObypNmktRFWjRz3SpGZjnIFC9Th iIU61Y5KgczsPTwwJvb7ajusMbHm4jZrGxWKAuXQL5SXS0LJUD8gH9Nr49+2ZSKQ cGiRhEFrkbiO7Ocx3ys2qcvIPP0XWTDp6zpYmxh6ZRJ6mNlX62f0yNIZ+es0bnPo Bo9cmb7uhYQzJ/KR/Jpm44t7FshReQOmVRKcWWeLbSLWvJVkCvTgXYtHwXm2hyy2 Zf5eJhNwERE/S9/yQMFtJO9V2CpDSoXN4xg+Q5VVRPXImhjHj++AvFf69k/Ih70f QyftRHmjNfaoHxyqRfdBBcsjxWTySGJY9NN/pt/ZARjwli60qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwJpnOrT/mawORXldyrB0R5Uj0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2RmOTU5MTktZGE3MC0z ZTcwLWJkMWItYjZmYzM2MTllMTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuiUMKuzIJx3mtmTetmcN9EUyiC7Dlsyrja2klCDl/Iw9sn6Wmi5dXR adPXOS45AAv/pyE8VpQBbsC9FXGVJCc6zH3tJ5fDMVzIgt8Gk9+QhQeCwS+58zIW 7Ylz+u6S9e5G4KWG235bfg4yAhCn1E6XOCPJzcBS7kArWWtKZhzSdfL7ytNkELA+ ankFSwdFQTDzGSMnAXdgFPIBRCDQag63vo7flkFb6uDENiF/nHGLr0N4NLJXzllW Rv+27RXdF8DUkzvKe1/jtCmtk32qEZRIEDrs2LYK+O7Chzu7WGhEFAkxBf5bHn8a ZBt5ipIG6yZRq0QIBSViKAlxeP8iUCk= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:01 2025 by rpki-client