$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b66951a0-8987-3e4a-b3f3-8e8f51671429.roa File: b66951a0-8987-3e4a-b3f3-8e8f51671429.roa (raw, json) Hash identifier: ecFdoZ/8ac0Bm0x7LBNZnjUmM5V4LH2FbtIBvNlQ0yE= Subject key identifier: 35:DB:07:87:0A:67:5F:22:44:D1:29:B5:73:27:6A:5F:4B:9C:22:95 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848A996440DCA16F33060F9FE40 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b66951a0-8987-3e4a-b3f3-8e8f51671429.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397229 IP address blocks: 204.74.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:44:0d:ca:16:f3:30:60:f9:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=5033eb73-e005-4668-abc6-92c647d7edc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:a6:0f:40:36:c0:c8:25:29:d4:e2:46:48: 13:76:ac:7d:c5:de:3c:34:0a:5b:35:2d:27:63:83: 22:1a:7a:ac:26:35:52:e8:07:e5:38:1a:33:b4:fb: a5:8b:76:a6:98:9b:27:4e:79:f9:4a:a4:08:27:f5: 64:cb:c2:17:12:97:f3:df:31:70:94:86:08:9e:44: fc:09:84:8c:58:f8:d3:8f:e9:0c:ba:57:50:b4:64: 7e:7a:ea:76:f0:0d:bc:d5:af:82:fb:c4:89:f4:0f: ad:27:78:ff:6f:9e:1b:e9:b5:35:c1:a8:4a:2d:dc: 6b:73:32:73:71:eb:12:ba:58:be:1d:eb:51:a1:44: ef:ad:c9:ee:71:f3:e2:cb:c6:aa:cc:86:46:34:c4: e7:d1:b8:aa:a9:97:6e:95:0b:ba:1d:98:7e:fb:67: f2:16:2a:29:e9:8c:81:fb:12:f8:90:57:bd:f1:5e: ca:06:1e:65:57:1e:10:e8:14:30:07:70:8b:17:6c: 4a:72:d2:7b:f9:26:7d:5c:fc:8d:fb:62:62:91:f2: de:21:29:0b:8d:aa:42:4b:ac:f7:4b:47:3a:66:8e: 18:b6:58:b1:c7:28:8f:22:16:a1:d5:3b:2d:00:38: 8a:93:c1:3e:37:4f:d3:64:70:d1:28:cd:04:b3:03: dc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DB:07:87:0A:67:5F:22:44:D1:29:B5:73:27:6A:5F:4B:9C:22:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b66951a0-8987-3e4a-b3f3-8e8f51671429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a2:d8:24:ff:85:2e:86:5c:d4:b9:b5:79:da:c3:5e:d0:e8: 28:3f:1c:1b:c4:b3:8b:26:64:b5:37:ce:8f:52:0f:91:7a:82: 26:91:98:a0:d5:c1:77:4d:60:59:80:e1:c9:55:5d:09:dd:cb: cf:65:e2:68:57:c6:29:40:f8:0d:89:af:cc:d6:93:17:93:1b: 0d:26:24:41:9e:f2:67:46:ab:23:03:b8:ed:de:a0:61:01:1a: e5:ff:af:7a:47:e9:bb:00:20:a1:f7:0e:23:6d:e3:f1:7c:31: 76:f6:c5:35:0e:46:be:e1:f6:c3:f9:f2:4c:60:f1:0c:d9:25: b9:e8:ba:12:62:21:be:1c:ce:ea:00:45:1c:fd:7a:8e:d2:5a: 59:53:e7:4a:14:f4:6c:e8:c8:27:c1:2d:62:86:22:f3:27:c1: 71:d6:d7:d8:f8:17:d8:38:8e:b9:a2:74:af:b1:8b:7f:05:99: 28:57:dc:45:8e:54:46:fb:1c:9f:03:a5:43:c7:14:eb:41:0d: 23:f1:44:ce:4d:e3:c2:d0:30:82:a6:90:33:a4:b2:e0:ca:53: ba:94:c0:39:53:87:db:97:e2:99:95:b2:33:2b:25:f9:c6:b1: 1b:e0:e6:d0:52:8d:7b:a8:15:cd:c4:12:15:98:c2:82:56:7c: a0:c1:67:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplkQNyhbzMGD5/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTAzM2ViNzMtZTAwNS00NjY4LWFiYzYtOTJjNjQ3ZDdlZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NCmD0A2wMglKdTiRkgTdqx9xd48NApbNS0n Y4MiGnqsJjVS6AflOBoztPuli3ammJsnTnn5SqQIJ/Vky8IXEpfz3zFwlIYInkT8 CYSMWPjTj+kMuldQtGR+eup28A281a+C+8SJ9A+tJ3j/b54b6bU1wahKLdxrczJz cesSuli+HetRoUTvrcnucfPiy8aqzIZGNMTn0biqqZdulQu6HZh++2fyFiop6YyB +xL4kFe98V7KBh5lVx4Q6BQwB3CLF2xKctJ7+SZ9XPyN+2JikfLeISkLjapCS6z3 S0c6Zo4YtlixxyiPIhah1TstADiKk8E+N0/TZHDRKM0EswPcFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXbB4cKZ18iRNEptXMnal9LnCKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjY2OTUxYTAtODk4Ny0z ZTRhLWIzZjMtOGU4ZjUxNjcxNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAii2CT/hS6GXNS5tXnaw17Q6Cg/HBvEs4smZLU3zo9SD5F6giaRmKDV wXdNYFmA4clVXQndy89l4mhXxilA+A2Jr8zWkxeTGw0mJEGe8mdGqyMDuO3eoGEB GuX/r3pH6bsAIKH3DiNt4/F8MXb2xTUORr7h9sP58kxg8QzZJbnouhJiIb4czuoA RRz9eo7SWllT50oU9GzoyCfBLWKGIvMnwXHW19j4F9g4jrmidK+xi38FmShX3EWO VEb7HJ8DpUPHFOtBDSPxRM5N48LQMIKmkDOksuDKU7qUwDlTh9uX4pmVsjMrJfnG sRvg5tBSjXuoFc3EEhWYwoJWfKDBZyY= -----END CERTIFICATE-----Generated at Sun Feb 16 20:49:16 2025 by rpki-client