$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa File: 43fc3f5d-7da6-3394-990c-e086579daa0f.roa (raw, json) Hash identifier: dt2mUDY3UCoM2GLkvsW6avJw8ZKhUdIR04TPsAtMFdk= Subject key identifier: 38:E3:FA:4F:C7:69:0E:DE:9C:C6:9E:FC:2C:3B:08:52:34:BE:E0:AA Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F432858490B4C2343CAC6427128FA1BC0 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 29909 IP address blocks: 208.74.60.0/22 maxlen: 22 208.74.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:23:43:ca:c6:42:71:28:fa:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=637df54e-579c-4f05-aa44-e614a19ca390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:5c:3b:d6:80:a8:7e:12:66:b0:7b:a4:fc: 12:92:35:3d:24:18:2f:25:d5:d1:54:de:9c:ab:89: f0:c6:b7:43:41:fd:24:b5:e9:d7:9d:1d:73:2f:02: ae:07:96:d0:9d:dd:66:1c:1d:a2:39:a5:e6:74:4a: d5:dd:8c:86:f8:49:2e:48:97:29:24:1c:62:c1:a9: f5:48:03:fa:52:17:36:f5:e7:08:ad:bd:e5:10:4b: dc:dd:2d:90:57:20:dc:9b:00:04:4e:01:8f:43:87: 8f:96:44:b2:fa:78:91:a2:68:93:cf:86:21:8c:2b: 6e:df:e7:49:9a:24:7e:d4:25:6b:f8:be:bf:66:0d: 48:aa:a4:20:ff:70:8d:55:d1:76:2f:c6:33:45:e8: c5:a8:eb:6d:f8:90:f6:d6:89:94:21:1a:17:43:b9: 16:71:e8:92:77:e5:c3:54:c8:c4:d9:f0:5b:42:6e: 84:1e:aa:fb:70:7f:b9:ba:dc:ed:cb:ff:26:29:a3: 1d:30:7a:10:25:4d:2d:bd:ca:34:2a:bc:12:84:9c: 8a:56:4a:74:9a:20:de:ed:46:f5:79:7c:90:a3:51: 77:c4:2f:65:10:8c:90:5f:11:87:dc:e5:2e:1d:ec: 63:50:0b:48:3d:60:05:c0:d4:02:13:5b:ee:80:06: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E3:FA:4F:C7:69:0E:DE:9C:C6:9E:FC:2C:3B:08:52:34:BE:E0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/43fc3f5d-7da6-3394-990c-e086579daa0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.74.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:89:be:40:f6:39:82:fa:1d:38:1a:70:6a:b4:aa:07:dd:e2: 8a:97:96:23:f3:3d:4e:e0:24:09:dc:42:cb:37:fd:34:91:55: 55:20:65:15:f5:54:30:a2:09:7c:00:b9:cb:d3:8b:77:fc:77: b7:46:4b:96:8f:b2:fb:93:0f:37:3c:fc:61:65:75:fd:6d:8b: dd:d3:3a:52:5f:a7:3a:4a:cc:d7:d1:64:24:bd:a6:93:94:31: 95:c2:b4:7d:53:27:fd:2b:96:70:37:ad:ce:4d:d6:ca:4a:b1: ea:c3:73:64:ca:1a:54:dd:b7:e6:4e:c3:b4:ef:7a:ab:b9:d1: 76:39:a0:31:a0:16:01:a4:bd:55:2e:3f:0b:d4:ff:d1:9c:7e: e7:5f:29:fe:fc:97:ac:ad:2d:6c:9c:21:b2:88:6b:1e:3f:e4: 10:93:c4:3e:1b:fb:2c:64:2c:ee:fe:02:ed:98:02:85:b7:f3: 8c:1c:d5:24:ea:3e:8d:d6:f6:f6:13:c0:31:1b:e4:3f:22:b1: 81:79:6a:4c:71:1a:42:f9:43:74:01:4e:07:1a:12:3c:b5:ae: 4a:98:6a:de:f8:c5:e7:0d:98:34:d1:1d:70:6e:e6:ab:ba:8f: 4f:af:d3:50:ac:14:02:65:7f:91:2c:f4:1a:5e:65:9c:b1:cf: c5:2e:a5:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCNDysZCcSj6G8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk NjM3ZGY1NGUtNTc5Yy00ZjA1LWFhNDQtZTYxNGExOWNhMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrNcO9aAqH4SZrB7pPwSkjU9JBgvJdXRVN6c q4nwxrdDQf0ktenXnR1zLwKuB5bQnd1mHB2iOaXmdErV3YyG+EkuSJcpJBxiwan1 SAP6Uhc29ecIrb3lEEvc3S2QVyDcmwAETgGPQ4ePlkSy+niRomiTz4YhjCtu3+dJ miR+1CVr+L6/Zg1IqqQg/3CNVdF2L8YzRejFqOtt+JD21omUIRoXQ7kWceiSd+XD VMjE2fBbQm6EHqr7cH+5utzty/8mKaMdMHoQJU0tvco0KrwShJyKVkp0miDe7Ub1 eXyQo1F3xC9lEIyQXxGH3OUuHexjUAtIPWAFwNQCE1vugAZbnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjj+k/HaQ7enMae/Cw7CFI0vuCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNDNmYzNmNWQtN2RhNi0z Mzk0LTk5MGMtZTA4NjU3OWRhYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6JvkD2OYL6HTgacGq0qgfd4oqXliPzPU7gJAncQss3/TSRVVUgZRX1 VDCiCXwAucvTi3f8d7dGS5aPsvuTDzc8/GFldf1ti93TOlJfpzpKzNfRZCS9ppOU MZXCtH1TJ/0rlnA3rc5N1spKserDc2TKGlTdt+ZOw7Tvequ50XY5oDGgFgGkvVUu PwvU/9GcfudfKf78l6ytLWycIbKIax4/5BCTxD4b+yxkLO7+Au2YAoW384wc1STq Po3W9vYTwDEb5D8isYF5akxxGkL5Q3QBTgcaEjy1rkqYat74xecNmDTRHXBu5qu6 j0+v01CsFAJlf5Es9BpeZZyxz8UupdM= -----END CERTIFICATE-----Generated at Fri Apr 11 21:25:09 2025 by rpki-client