$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/48586b0c-a9df-3320-ba30-93ad371b4d84.roa File: 48586b0c-a9df-3320-ba30-93ad371b4d84.roa (raw, json) Hash identifier: R4BnEG6bbYG4bueJmoyRaM9AiD3FYexUwdEGix7ui8c= Subject key identifier: 34:78:A9:0B:D5:03:B9:80:20:69:EA:B6:7A:53:72:20:81:89:6D:71 Certificate issuer: /CN=a895e462-e3f7-4517-baf9-17cc027d673c Certificate serial: 010D0C9F432858496D187EAE4C6BEFBE002E1DC0 Authority key identifier: 2B:30:6E:4E:A0:93:AF:FA:78:94:14:6B:D4:18:29:C8:F4:FA:57:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/48586b0c-a9df-3320-ba30-93ad371b4d84.roa Signing time: Sat 05 Apr 2025 14:46:17 +0000 ROA not before: Sat 05 Apr 2025 14:46:17 +0000 ROA not after: Fri 04 Jul 2025 14:46:17 +0000 asID: 3819 IP address blocks: 204.74.81.0/24 maxlen: 24 204.74.82.0/23 maxlen: 24 204.74.84.0/22 maxlen: 24 204.74.88.0/21 maxlen: 24 204.74.96.0/23 maxlen: 24 204.74.98.0/24 maxlen: 24 204.74.116.0/22 maxlen: 24 204.74.123.0/24 maxlen: 24 204.74.124.0/23 maxlen: 24 204.74.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/a895e462-e3f7-4517-baf9-17cc027d673c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/a895e462-e3f7-4517-baf9-17cc027d673c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6d:18:7e:ae:4c:6b:ef:be:00:2e:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a895e462-e3f7-4517-baf9-17cc027d673c Validity Not Before: Apr 5 14:46:17 2025 GMT Not After : Jul 4 14:46:17 2025 GMT Subject: CN=4372e904-bb7c-4068-bd99-571820c4b97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:73:3b:59:c2:33:00:45:85:ac:3b:33:bd: b1:7e:94:e4:8e:28:21:a0:a2:b8:08:98:0d:43:79: 13:37:48:73:59:55:4d:5a:c6:85:51:a6:9b:04:e6: bb:d9:9e:07:cf:b9:83:b0:f5:99:fb:ac:00:b2:68: 2e:9a:e2:95:e1:f2:c4:2f:a3:d4:79:f9:2b:df:3d: a4:46:fe:57:46:aa:4b:85:9d:6a:c6:e1:fa:eb:18: c6:eb:00:5e:e4:37:95:25:e6:e8:06:24:13:f8:37: e2:12:df:34:ad:b5:f6:a1:4d:aa:a5:c6:e7:c7:19: e3:bf:c2:83:ae:10:54:c5:28:5a:fc:0d:77:46:f4: b1:d1:a3:b2:35:18:8e:6c:9d:76:43:32:50:4d:c8: 5f:7b:93:94:6d:73:da:0e:8d:70:0d:fd:9a:e7:6a: 47:05:1d:14:83:90:8d:35:47:b4:94:52:f8:b2:5c: b8:b4:be:e9:70:fb:4a:74:79:75:6d:d9:fd:bd:05: fc:0c:68:31:1a:fb:bd:11:68:07:a0:22:9a:16:f1: cd:ff:28:3f:a7:4e:df:1b:2a:b6:20:83:87:0a:81: d7:8f:81:53:09:f9:d7:5d:0a:1d:61:48:f7:a9:47: 5a:7b:a3:f6:84:09:48:7d:f5:52:79:53:9a:9e:d4: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:78:A9:0B:D5:03:B9:80:20:69:EA:B6:7A:53:72:20:81:89:6D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/48586b0c-a9df-3320-ba30-93ad371b4d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c/a895e462-e3f7-4517-baf9-17cc027d673c.crl X509v3 Authority Key Identifier: keyid:2B:30:6E:4E:A0:93:AF:FA:78:94:14:6B:D4:18:29:C8:F4:FA:57:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a895e462-e3f7-4517-baf9-17cc027d673c.cer sbgp-ipAddrBlock: critical IPv4: 204.74.81.0-204.74.98.255 204.74.116.0/22 204.74.123.0-204.74.126.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6d:e6:90:76:44:08:9d:7b:b1:b6:ae:a9:8c:1c:14:86:a3: 2d:c4:65:02:51:28:7e:1f:36:59:16:b7:d9:8a:21:43:82:60: ab:22:02:87:5a:80:ee:f3:f1:f9:07:a3:85:82:7c:02:64:fb: 85:05:a9:24:31:8f:12:02:d8:f4:d2:93:e1:6e:75:2c:16:ac: dc:08:9e:df:d4:41:3f:1f:36:bd:23:1d:18:b4:7e:ab:6e:3b: 1d:ed:5f:fa:b0:19:9a:4b:50:6c:0e:69:bf:9a:4f:99:e8:14: 5d:c4:fd:96:74:d2:3e:49:3b:f7:cd:a1:66:93:eb:d5:3b:00: af:44:d0:2c:3e:9e:f5:f5:81:16:87:2b:b4:e2:0d:0f:6d:c4: 08:78:51:24:22:84:af:c2:ce:e2:4e:4e:2d:50:38:6d:d6:0d: d0:d3:5c:89:1a:97:bc:1e:a1:39:1f:db:6c:5e:da:91:66:f7: d1:c1:75:36:0c:fb:d9:60:89:01:96:93:95:57:b5:93:36:5b: 2b:f0:a7:26:d2:9c:0b:63:44:85:71:7e:0b:18:15:01:fc:8a: 63:b5:17:82:5d:e1:24:9f:b2:0d:1f:5b:26:41:bf:b0:6e:7d: c5:38:90:7d:f6:fd:74:f4:c1:c7:78:f3:43:39:85:ff:b0:b8: f1:bd:ae:9a -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEltGH6uTGvvvgAuHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg5NWU0NjItZTNmNy00NTE3LWJhZjktMTdjYzAyN2Q2 NzNjMB4XDTI1MDQwNTE0NDYxN1oXDTI1MDcwNDE0NDYxN1owLzEtMCsGA1UEAxMk NDM3MmU5MDQtYmI3Yy00MDY4LWJkOTktNTcxODIwYzRiOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxppzO1nCMwBFhaw7M72xfpTkjighoKK4CJgN Q3kTN0hzWVVNWsaFUaabBOa72Z4Hz7mDsPWZ+6wAsmgumuKV4fLEL6PUefkr3z2k Rv5XRqpLhZ1qxuH66xjG6wBe5DeVJeboBiQT+DfiEt80rbX2oU2qpcbnxxnjv8KD rhBUxSha/A13RvSx0aOyNRiObJ12QzJQTchfe5OUbXPaDo1wDf2a52pHBR0Ug5CN NUe0lFL4sly4tL7pcPtKdHl1bdn9vQX8DGgxGvu9EWgHoCKaFvHN/yg/p07fGyq2 IIOHCoHXj4FTCfnXXQodYUj3qUdae6P2hAlIffVSeVOantTWVwIDAQABo4IDcTCC A20wHQYDVR0OBBYEFDR4qQvVA7mAIGnqtnpTciCBiW1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hODk1 ZTQ2Mi1lM2Y3LTQ1MTctYmFmOS0xN2NjMDI3ZDY3M2MvNDg1ODZiMGMtYTlkZi0z MzIwLWJhMzAtOTNhZDM3MWI0ZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTg5NWU0NjItZTNmNy00NTE3LWJh ZjktMTdjYzAyN2Q2NzNjL2E4OTVlNDYyLWUzZjctNDUxNy1iYWY5LTE3Y2MwMjdk NjczYy5jcmwwHwYDVR0jBBgwFoAUKzBuTqCTr/p4lBRr1BgpyPT6VwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hODk1ZTQ2Mi1lM2Y3LTQ1MTctYmFmOS0xN2Nj MDI3ZDY3M2MuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBADMSlED BADMSmIDBALMSnQwDAMEAMxKewMEAMxKfjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkbeaQdkQInXuxtq6p jBwUhqMtxGUCUSh+HzZZFrfZiiFDgmCrIgKHWoDu8/H5B6OFgnwCZPuFBakkMY8S Atj00pPhbnUsFqzcCJ7f1EE/Hza9Ix0YtH6rbjsd7V/6sBmaS1BsDmm/mk+Z6BRd xP2WdNI+STv3zaFmk+vVOwCvRNAsPp719YEWhyu04g0PbcQIeFEkIoSvws7iTk4t UDht1g3Q01yJGpe8HqE5H9tsXtqRZvfRwXU2DPvZYIkBlpOVV7WTNlsr8Kcm0pwL Y0SFcX4LGBUB/IpjtReCXeEkn7INH1smQb+wbn3FOJB99v109MHHePNDOYX/sLjx va6a -----END CERTIFICATE-----Generated at Sun Apr 20 19:41:15 2025 by rpki-client