$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa File: 2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa (raw, json) Hash identifier: 7mJAEuQ44hkN4+zeQ0Nz5M60h7ndjgQ0usgYS48LcEo= Subject key identifier: CE:90:51:20:8B:BE:FF:DF:A9:30:1F:A4:80:31:41:14:8F:6E:18:54 Certificate issuer: /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Certificate serial: 010D0C9F4328584917DC37A64EDBAB7B4F128500 Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 36666 IP address blocks: 74.120.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:37:a6:4e:db:ab:7b:4f:12:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=30d3b79f-0f60-4951-a1b7-4ab06c8b00d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:18:25:36:77:eb:aa:d0:6f:4f:a7:e6:47:1e: 61:49:71:cf:f3:03:b1:50:fb:54:8c:40:b5:ec:b9: 52:b6:1a:8a:f4:fd:ba:d7:05:6e:0d:9b:ea:68:98: 99:bd:0c:0d:d1:0b:2c:9a:77:a7:e1:5d:7a:58:2b: 57:79:8a:f4:9e:78:28:e9:58:d7:15:5f:3a:b1:9a: 2b:52:b6:da:db:11:a3:68:36:7d:19:19:85:78:75: cc:70:3f:75:cc:af:38:c1:8e:96:f4:c5:c7:d5:09: 08:77:9c:89:03:0d:e4:b5:2c:57:8d:54:fa:34:c9: 5b:18:9c:e8:36:50:a0:1c:2f:e2:dc:11:42:84:b3: 66:99:f2:4d:fe:25:b5:f5:9c:1f:0d:de:98:50:bb: 67:eb:b7:94:66:13:5b:0d:52:62:33:61:ac:d0:b0: 0e:1e:ee:7c:1a:78:bd:d2:fd:8c:27:28:09:0f:95: 50:a2:5f:af:29:dd:c5:f5:78:bc:c0:62:55:2e:1b: 85:6a:76:19:43:0d:73:46:1e:f0:70:a0:47:a5:62: f9:94:50:94:b7:97:22:fd:22:0e:de:b6:3a:69:33: 29:b6:e3:7c:99:0e:36:d4:28:9f:f0:cc:1a:be:4e: 00:12:50:41:87:00:46:af:c0:16:8e:20:c1:09:c1: 4b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:90:51:20:8B:BE:FF:DF:A9:30:1F:A4:80:31:41:14:8F:6E:18:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/2f70567d-0cf0-3c14-9e79-3ae29735bac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl X509v3 Authority Key Identifier: keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer sbgp-ipAddrBlock: critical IPv4: 74.120.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7f:41:fa:50:fc:e4:9e:25:4d:a7:10:ef:d7:e7:d8:c7:90: a6:9c:c2:1d:3d:3a:d1:78:2c:4b:6c:ea:3d:fa:52:5a:00:4c: 04:f5:69:7f:56:d9:8a:11:72:a1:d3:b8:36:16:47:7c:b3:2c: e8:d9:b8:21:b2:85:be:61:90:42:a0:55:15:37:f7:2f:03:25: 4b:1a:fd:c3:28:38:01:58:83:85:4a:92:7a:2c:58:36:3c:80: 23:87:cb:35:68:63:c5:9b:ec:fc:07:41:6f:5e:c2:c8:c2:19: 8d:64:75:b6:34:00:5a:0b:86:31:98:ec:62:b0:77:51:72:9e: 82:d8:ea:99:3d:bc:5d:62:1e:5c:ce:f2:2d:0d:4f:fc:e4:b8: c5:99:c9:9e:c4:54:43:09:f4:45:db:40:85:f5:3a:b0:d7:41: 17:53:11:25:9b:d6:e3:08:67:c1:26:fe:f2:f2:3d:d2:f8:18: 29:d7:40:cc:91:45:b2:d5:89:27:76:c5:da:99:65:ec:1b:0d: e1:01:b1:a3:f3:e4:45:8e:4f:b4:6c:33:37:58:f5:e5:c6:df: ee:a9:77:b3:dd:70:36:6f:20:42:88:05:41:27:e2:55:d2:95: 33:1d:f6:3c:e8:11:d6:a0:ce:04:9a:e4:b6:43:37:a7:b3:83: d6:81:19:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3DemTture08ShQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBlMzM4YjktMmE2My00ZGZmLTkzNzEtYzhhOGU5MzUw ZWViMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MzBkM2I3OWYtMGY2MC00OTUxLWExYjctNGFiMDZjOGIwMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBglNnfrqtBvT6fmRx5hSXHP8wOxUPtUjEC1 7LlSthqK9P261wVuDZvqaJiZvQwN0Qssmnen4V16WCtXeYr0nngo6VjXFV86sZor Urba2xGjaDZ9GRmFeHXMcD91zK84wY6W9MXH1QkId5yJAw3ktSxXjVT6NMlbGJzo NlCgHC/i3BFChLNmmfJN/iW19ZwfDd6YULtn67eUZhNbDVJiM2Gs0LAOHu58Gni9 0v2MJygJD5VQol+vKd3F9Xi8wGJVLhuFanYZQw1zRh7wcKBHpWL5lFCUt5ci/SIO 3rY6aTMptuN8mQ421Cif8Mwavk4AElBBhwBGr8AWjiDBCcFLGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6QUSCLvv/fqTAfpIAxQRSPbhhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMGUz MzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4ZTkzNTBlZWIvMmY3MDU2N2QtMGNmMC0z YzE0LTllNzktM2FlMjk3MzViYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTBlMzM4YjktMmE2My00ZGZmLTkz NzEtYzhhOGU5MzUwZWViL2UwZTMzOGI5LTJhNjMtNGRmZi05MzcxLWM4YThlOTM1 MGVlYi5jcmwwHwYDVR0jBBgwFoAUNDUW6fpcIavP8B9lsDFncZERP8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMGUzMzhiOS0yYTYzLTRkZmYtOTM3MS1jOGE4 ZTkzNTBlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN/QfpQ/OSeJU2nEO/X59jHkKacwh09OtF4LEts6j36UloATAT1aX9W 2YoRcqHTuDYWR3yzLOjZuCGyhb5hkEKgVRU39y8DJUsa/cMoOAFYg4VKknosWDY8 gCOHyzVoY8Wb7PwHQW9ewsjCGY1kdbY0AFoLhjGY7GKwd1FynoLY6pk9vF1iHlzO 8i0NT/zkuMWZyZ7EVEMJ9EXbQIX1OrDXQRdTESWb1uMIZ8Em/vLyPdL4GCnXQMyR RbLViSd2xdqZZewbDeEBsaPz5EWOT7RsMzdY9eXG3+6pd7PdcDZvIEKIBUEn4lXS lTMd9jzoEdagzgSa5LZDN6ezg9aBGeI= -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:24 2025 by rpki-client