$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9fdf788d-7065-37a1-a200-7a805e426120.roa File: 9fdf788d-7065-37a1-a200-7a805e426120.roa (raw, json) Hash identifier: imx9zp4boQu2Z1Nm9IIYICXUztNrRXJx1RpDndHpA8c= Subject key identifier: 35:0A:10:24:7B:FC:1A:45:79:39:87:6D:6E:CF:B5:97:70:8E:21:5F Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F432858494E4E92676D03D26716738930 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9fdf788d-7065-37a1-a200-7a805e426120.roa Signing time: Tue 25 Mar 2025 14:05:11 +0000 ROA not before: Tue 25 Mar 2025 14:05:11 +0000 ROA not after: Mon 23 Jun 2025 14:05:11 +0000 asID: 834 IP address blocks: 74.81.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:4e:92:67:6d:03:d2:67:16:73:89:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 25 14:05:11 2025 GMT Not After : Jun 23 14:05:11 2025 GMT Subject: CN=0f890afb-cab2-439a-969f-fd735d3de691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:85:2f:8e:b4:f2:05:75:b0:f1:c9:e5:e0:bb: c7:26:79:dd:d0:0f:4a:6e:09:15:09:3e:2e:74:dc: bc:c4:5f:09:5c:69:dc:03:e2:3a:4d:e6:22:ce:5d: 01:60:e9:7f:df:26:93:52:a9:7f:2c:4c:32:26:da: f2:dc:d4:f9:6b:88:e2:a5:64:1d:44:a5:b9:e4:f1: 2c:b7:58:e7:6e:39:66:c3:ca:14:fe:b0:20:99:7e: eb:ab:09:30:b6:f9:81:fa:35:8e:0b:2f:7b:f7:64: e5:28:b5:49:a5:30:65:0e:4a:fc:0d:bb:2f:47:a9: 6a:f4:02:57:f4:14:79:7e:03:9a:b7:a6:a8:2d:47: a1:71:0c:c0:60:3a:52:6f:b7:1b:ad:a8:f0:0f:a2: 95:1c:e0:4f:9d:0d:16:da:90:f8:d4:38:5f:44:4a: f1:73:19:88:86:04:a7:f1:a6:c3:af:a7:da:49:d0: 2a:9e:5e:1c:85:f8:84:c5:1c:21:ec:85:04:e3:33: e0:57:42:27:15:e7:5d:e2:13:02:f3:35:89:d3:1b: 34:9b:84:a2:cf:96:f0:b7:ef:f1:eb:62:26:66:8c: db:13:81:42:af:63:01:6c:ae:8a:45:a9:eb:0f:a0: 22:63:7b:3a:2f:51:da:8e:3f:80:4c:d3:ce:7c:d3: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0A:10:24:7B:FC:1A:45:79:39:87:6D:6E:CF:B5:97:70:8E:21:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9fdf788d-7065-37a1-a200-7a805e426120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 74.81.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:01:cb:91:ff:82:7d:03:95:b1:2a:a2:34:b1:bf:74:c0:91: c4:28:84:95:9f:7d:9b:39:45:bb:14:e7:af:93:e9:d3:01:22: e8:ed:6a:96:db:d4:98:fc:ab:a7:d3:c0:17:f0:f2:8e:b9:4c: f4:cf:44:d8:80:52:56:d9:7c:13:5b:09:2a:6e:ce:86:0e:f2: c9:bf:c6:a8:70:87:77:cc:00:db:91:cc:a2:91:23:69:de:32: 8f:59:a3:86:f6:f9:ab:20:ed:9c:cc:f3:f0:e3:9d:be:94:74: cc:27:60:c5:ba:1c:2a:50:3b:84:fd:c2:c5:39:3a:b1:4f:45: 90:ba:a3:0a:d2:01:e1:42:08:15:fa:f9:9c:1a:be:37:37:bb: 4d:85:2c:00:ad:17:d6:44:d8:db:33:b0:7d:8a:ff:84:a5:cb: 0c:d5:21:33:04:1d:d1:86:b7:03:24:40:c0:bf:e4:b5:b6:fc: 85:a5:9a:6e:69:b8:7e:31:c2:d8:d6:4d:1d:8b:92:56:47:11: 23:b0:79:13:cf:f0:70:3e:f8:08:79:7a:90:e7:d9:5b:6b:c6: 19:7a:4e:64:e9:4f:bf:73:03:d7:d0:0a:11:70:b6:75:53:60: e0:39:1c:a9:a3:67:6e:ba:d7:7b:e9:de:4f:d4:a8:20:0e:63: 5c:11:66:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOTpJnbQPSZxZziTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDMyNTE0MDUxMVoXDTI1MDYyMzE0MDUxMVowLzEtMCsGA1UEAxMk MGY4OTBhZmItY2FiMi00MzlhLTk2OWYtZmQ3MzVkM2RlNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoUvjrTyBXWw8cnl4LvHJnnd0A9KbgkVCT4u dNy8xF8JXGncA+I6TeYizl0BYOl/3yaTUql/LEwyJtry3NT5a4jipWQdRKW55PEs t1jnbjlmw8oU/rAgmX7rqwkwtvmB+jWOCy9792TlKLVJpTBlDkr8DbsvR6lq9AJX 9BR5fgOat6aoLUehcQzAYDpSb7cbrajwD6KVHOBPnQ0W2pD41DhfRErxcxmIhgSn 8abDr6faSdAqnl4chfiExRwh7IUE4zPgV0InFedd4hMC8zWJ0xs0m4Siz5bwt+/x 62ImZozbE4FCr2MBbK6KRanrD6AiY3s6L1Hajj+ATNPOfNMlCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUKECR7/BpFeTmHbW7PtZdwjiFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvOWZkZjc4OGQtNzA2NS0z N2ExLWEyMDAtN2E4MDVlNDI2MTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlFOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoBy5H/gn0DlbEqojSxv3TAkcQohJWffZs5RbsU56+T6dMBIujtapbb 1Jj8q6fTwBfw8o65TPTPRNiAUlbZfBNbCSpuzoYO8sm/xqhwh3fMANuRzKKRI2ne Mo9Zo4b2+asg7ZzM8/Djnb6UdMwnYMW6HCpQO4T9wsU5OrFPRZC6owrSAeFCCBX6 +Zwavjc3u02FLACtF9ZE2NszsH2K/4SlywzVITMEHdGGtwMkQMC/5LW2/IWlmm5p uH4xwtjWTR2LklZHESOweRPP8HA++Ah5epDn2Vtrxhl6TmTpT79zA9fQChFwtnVT YOA5HKmjZ26613vp3k/UqCAOY1wRZlI= -----END CERTIFICATE-----Generated at Fri Apr 4 21:42:59 2025 by rpki-client