$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa File: 8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa (raw, json) Hash identifier: 6JbVm1VV4UMyMr2lvFskb6LtnoRwRyc5JP9p68uiohE= Subject key identifier: B7:70:33:47:74:00:33:DC:BF:6D:FE:BC:43:08:38:1F:C0:EE:F2:DF Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F43285848EF613178E38BC535576D3800 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7782 IP address blocks: 74.124.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:31:78:e3:8b:c5:35:57:6d:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=47a6bc37-040d-47be-b681-157a26c3badb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:a3:23:be:57:d5:f2:d4:95:c9:db:78:66: 94:b2:4d:7b:92:7a:b6:79:d3:8f:c1:a3:a3:2f:18: 01:b5:cd:0d:4f:00:7d:ea:87:e0:d1:1e:98:5b:d2: 95:79:a7:9e:0b:23:0a:cc:fc:72:ee:e2:23:4a:c1: 0f:63:fd:a3:db:af:78:0b:cc:ed:e2:45:f4:5b:08: ed:73:c4:82:26:35:75:7d:fd:2d:67:e3:ca:1f:16: c9:d9:3c:11:63:c3:9b:fb:59:05:52:51:fd:73:98: ab:b0:c3:62:8c:84:ca:e7:5c:75:c5:6c:e6:f5:35: 2c:f8:c7:3b:36:e2:58:fd:d1:dc:5c:12:2e:be:53: de:a1:e2:d6:90:fd:cf:c3:52:36:6f:14:68:b2:1a: d5:94:0d:60:91:6f:71:a6:6a:55:68:f8:9a:7a:68: 9d:1c:59:bf:9f:26:4a:27:3d:de:32:5a:20:3f:fd: d6:7b:9b:86:54:b5:d6:ff:57:ec:8c:85:d5:51:7c: d4:cc:51:be:00:a0:5f:a4:f1:13:75:6f:0f:22:5a: ad:24:c9:a1:b1:22:51:33:e4:cc:aa:1e:cd:9c:42: 24:9d:5d:f8:e9:64:69:34:10:ca:14:56:59:92:8a: 3a:e4:46:aa:9a:48:6b:05:dd:39:2d:4d:d7:b6:6f: 5d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:70:33:47:74:00:33:DC:BF:6D:FE:BC:43:08:38:1F:C0:EE:F2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/8e3f2098-dd16-3cb2-9293-b0e30b1fd323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 74.124.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:75:67:e7:d0:43:0f:c5:9f:0a:96:72:33:5f:65:95:f9:5e: ac:1a:4b:45:50:17:1e:d1:88:8f:af:7e:2b:08:d5:c5:b1:52: 39:2c:ef:79:cf:ef:aa:b9:ae:88:e5:e0:22:ec:75:28:5c:d8: 0f:27:bc:c6:9b:ee:f3:81:c9:75:c2:c0:4a:9d:4e:e1:a1:78: 7d:9e:8f:2a:8d:38:f0:99:c5:5c:36:ea:04:71:7c:59:45:ff: 2d:f5:b3:38:56:7e:ca:53:18:7d:23:7f:87:e2:11:93:35:72: 9d:a5:6a:a7:93:17:92:95:4b:8d:52:60:0a:9b:e5:f1:b7:ba: 09:e2:e7:04:91:eb:14:72:0c:4e:32:12:15:6e:0d:89:91:ad: 2e:6a:1f:a5:89:80:cb:59:8c:d4:77:d9:4f:3f:5b:1a:6d:bb: 6d:18:54:e4:e7:9b:c3:48:27:6b:7f:01:19:c7:dd:e4:f8:ed: 7a:05:36:48:8d:69:1a:05:ea:8c:63:3f:8b:33:a8:45:f0:50: 47:f1:20:1d:18:7a:f7:f0:02:8d:57:0e:fa:fc:00:4a:5e:a9: 1c:ef:8e:cf:ac:78:26:74:59:44:71:0e:65:4d:df:5d:24:4c: 11:b3:17:1a:0b:39:7d:ec:f6:d9:39:8c:86:84:cc:1a:4b:eb: 9d:f6:4e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTF444vFNVdtOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDdhNmJjMzctMDQwZC00N2JlLWI2ODEtMTU3YTI2YzNiYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwejI75X1fLUlcnbeGaUsk17knq2edOPwaOj LxgBtc0NTwB96ofg0R6YW9KVeaeeCyMKzPxy7uIjSsEPY/2j2694C8zt4kX0Wwjt c8SCJjV1ff0tZ+PKHxbJ2TwRY8Ob+1kFUlH9c5irsMNijITK51x1xWzm9TUs+Mc7 NuJY/dHcXBIuvlPeoeLWkP3Pw1I2bxRoshrVlA1gkW9xpmpVaPiaemidHFm/nyZK Jz3eMlogP/3We5uGVLXW/1fsjIXVUXzUzFG+AKBfpPETdW8PIlqtJMmhsSJRM+TM qh7NnEIknV346WRpNBDKFFZZkoo65EaqmkhrBd05LU3Xtm9dEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdwM0d0ADPcv23+vEMIOB/A7vLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvOGUzZjIwOTgtZGQxNi0z Y2IyLTkyOTMtYjBlMzBiMWZkMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSnxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl1Z+fQQw/FnwqWcjNfZZX5XqwaS0VQFx7RiI+vfisI1cWxUjks73nP 76q5rojl4CLsdShc2A8nvMab7vOByXXCwEqdTuGheH2ejyqNOPCZxVw26gRxfFlF /y31szhWfspTGH0jf4fiEZM1cp2laqeTF5KVS41SYAqb5fG3ugni5wSR6xRyDE4y EhVuDYmRrS5qH6WJgMtZjNR32U8/Wxptu20YVOTnm8NIJ2t/ARnH3eT47XoFNkiN aRoF6oxjP4szqEXwUEfxIB0YevfwAo1XDvr8AEpeqRzvjs+seCZ0WURxDmVN310k TBGzFxoLOX3s9tk5jIaEzBpL6532TiQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:39 2025 by rpki-client