$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df896102-d0e6-3fbc-abd2-dba8cbea1511.roa File: df896102-d0e6-3fbc-abd2-dba8cbea1511.roa (raw, json) Hash identifier: Y4IXS8gG4qKQmvvPlHcvYTia/AZ2Ex6D9F2IlIOy9TY= Subject key identifier: 82:4C:27:0B:5C:DC:C5:55:2D:AD:AE:1F:7C:2C:DE:AC:54:1A:A4:19 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F43285848BD20F1FE00963062E1B9D000 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df896102-d0e6-3fbc-abd2-dba8cbea1511.roa Signing time: Sat 01 Feb 2025 14:00:51 +0000 ROA not before: Sat 01 Feb 2025 14:00:51 +0000 ROA not after: Fri 02 May 2025 13:00:51 +0000 asID: 397222 IP address blocks: 204.74.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bd:20:f1:fe:00:96:30:62:e1:b9:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Feb 1 14:00:51 2025 GMT Not After : May 2 13:00:51 2025 GMT Subject: CN=cc444c35-f491-47e3-b3f5-160edfd83f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:a1:be:99:c9:72:18:89:6b:c6:49:84:dd: 2a:23:b9:d2:4c:c0:29:22:28:33:dd:6e:ca:f8:a5: 1e:f5:ef:8a:16:23:0e:77:27:83:15:80:7b:5b:46: 50:ac:c5:9c:86:02:2f:1e:8f:45:f1:9b:e5:91:6f: 81:8b:4d:c8:c5:e8:fa:fe:25:ab:1a:4a:c8:d3:a5: fd:af:02:dc:24:25:1f:9b:fc:24:4a:0a:0c:93:93: 11:bb:19:d0:1e:08:ba:f3:97:34:4f:d4:b8:31:c8: 60:98:fb:4b:9b:79:a1:26:a5:1f:d5:33:2f:52:19: 4d:5f:91:56:e2:c9:f5:b3:dd:a7:d1:3b:a9:3f:83: bd:bd:59:f1:92:cc:4a:03:82:4c:3a:7b:60:16:45: fe:25:8f:ec:1d:5e:84:b6:10:f0:5e:64:01:55:58: c7:7a:dd:20:35:2c:aa:8f:69:47:db:f2:f8:13:d4: a6:7e:43:48:29:74:47:55:39:d6:67:45:88:e6:0e: 40:e9:92:30:c8:e1:45:cd:a1:9f:33:83:75:0c:0c: 0d:19:25:ca:f0:3c:2b:97:fe:98:ba:89:28:50:82: ad:69:8e:9e:d8:5b:ca:55:db:50:43:45:7a:73:95: d6:7a:25:5b:69:92:73:2d:5c:7e:8d:7c:46:09:85: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4C:27:0B:5C:DC:C5:55:2D:AD:AE:1F:7C:2C:DE:AC:54:1A:A4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/df896102-d0e6-3fbc-abd2-dba8cbea1511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:47:aa:c5:b8:79:b4:e5:11:c6:c4:23:df:d0:55:12:0e:69: d4:51:16:c0:3b:07:46:d1:db:b6:a5:64:89:4c:70:04:e9:f6: 54:9c:03:3f:5e:f2:63:e7:62:89:15:6b:33:b8:d8:1f:f7:f9: 0a:a8:ca:16:3d:46:b4:74:be:b6:75:16:ad:76:69:b2:3f:b7: 7d:b3:66:f4:36:c6:18:36:e2:9e:bc:a4:7a:cf:6b:f4:fb:03: a4:3a:69:4d:0e:f4:d7:b0:80:af:59:43:4a:fa:ed:ee:b7:20: 21:d7:fb:41:ff:32:4b:3c:b6:4d:7b:42:5e:0a:88:02:13:9e: 07:9c:22:16:27:96:4c:ca:a1:01:8e:fc:a9:b6:bd:49:c9:fb: 6f:fd:a1:93:d1:55:39:f9:36:78:ce:30:01:dd:8c:1f:2a:62: 08:3c:76:1d:5e:6d:68:17:72:ae:e3:e2:c8:ac:38:d9:59:81: 91:27:2d:a3:04:b2:80:58:04:42:3d:76:0d:9e:51:cd:e4:63: 80:7d:8f:89:2e:e6:c8:23:80:eb:9a:84:9f:5f:7d:01:ca:ef: e7:38:99:09:27:56:31:45:bf:81:7c:a0:80:aa:33:cc:1a:3b: 36:eb:97:d8:d7:c0:8e:1f:b2:f0:fd:23:a3:06:a4:13:a3:b5: a3:e9:e0:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IPH+AJYwYuG50AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk Y2M0NDRjMzUtZjQ5MS00N2UzLWIzZjUtMTYwZWRmZDgzZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEahvpnJchiJa8ZJhN0qI7nSTMApIigz3W7K +KUe9e+KFiMOdyeDFYB7W0ZQrMWchgIvHo9F8ZvlkW+Bi03Ixej6/iWrGkrI06X9 rwLcJCUfm/wkSgoMk5MRuxnQHgi685c0T9S4MchgmPtLm3mhJqUf1TMvUhlNX5FW 4sn1s92n0TupP4O9vVnxksxKA4JMOntgFkX+JY/sHV6EthDwXmQBVVjHet0gNSyq j2lH2/L4E9SmfkNIKXRHVTnWZ0WI5g5A6ZIwyOFFzaGfM4N1DAwNGSXK8Dwrl/6Y uokoUIKtaY6e2FvKVdtQQ0V6c5XWeiVbaZJzLVx+jXxGCYWVsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJMJwtc3MVVLa2uH3ws3qxUGqQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGY4OTYxMDItZDBlNi0z ZmJjLWFiZDItZGJhOGNiZWExNTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtHqsW4ebTlEcbEI9/QVRIOadRRFsA7B0bR27alZIlMcATp9lScAz9e 8mPnYokVazO42B/3+QqoyhY9RrR0vrZ1Fq12abI/t32zZvQ2xhg24p68pHrPa/T7 A6Q6aU0O9NewgK9ZQ0r67e63ICHX+0H/Mks8tk17Ql4KiAITngecIhYnlkzKoQGO /Km2vUnJ+2/9oZPRVTn5NnjOMAHdjB8qYgg8dh1ebWgXcq7j4sisONlZgZEnLaME soBYBEI9dg2eUc3kY4B9j4ku5sgjgOuahJ9ffQHK7+c4mQknVjFFv4F8oICqM8wa Ozbrl9jXwI4fsvD9I6MGpBOjtaPp4JM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:54:06 2025 by rpki-client