$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/06677e83-0c67-3aee-be47-b4de3ad1063f.roa File: 06677e83-0c67-3aee-be47-b4de3ad1063f.roa (raw, json) Hash identifier: XKDwUCZBXMXzscQAA/ZYFT6XDLuJ0U0BUhecihhhAsI= Subject key identifier: C0:17:27:C3:F8:89:6E:8A:FA:32:63:A9:FA:1A:AC:8F:23:8A:F5:8B Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3FF55BE887B9E1C619D80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/06677e83-0c67-3aee-be47-b4de3ad1063f.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 74.121.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:ff:55:be:88:7b:9e:1c:61:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=4324983e-f9ad-4c5f-9395-9a9d979c939e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:cc:86:50:7f:1a:be:50:c4:2d:94:a0:d8: e2:9f:0b:f6:10:e0:d1:9e:95:8e:c9:df:61:c4:08: 08:f9:07:ac:77:a4:ef:f0:54:0e:8b:0c:ca:e5:6d: 0c:76:1a:88:aa:ad:dd:a5:9a:91:3e:66:32:d7:d0: a9:e6:0e:bc:89:cb:0c:23:3b:9a:a6:9a:c6:30:e3: 47:6d:12:09:e3:60:f4:06:85:36:34:64:d2:43:01: 35:33:a0:05:54:21:48:f4:e0:7c:31:29:00:4c:b8: 17:f2:39:16:6c:4c:91:8f:0e:8d:a3:22:34:78:6b: ef:9b:0b:a5:db:d8:84:31:df:80:89:ca:b3:dc:24: fe:f6:20:52:88:28:e6:fe:ad:9e:1d:18:c5:57:d8: 42:45:fe:14:f5:f1:dc:dc:f1:d0:25:eb:5a:1a:bc: 89:85:a8:35:c3:1e:f5:3b:bb:24:81:96:f8:89:c2: 6a:c0:33:a8:6c:d8:98:7c:ef:94:5f:e8:4b:17:36: 11:8a:8f:5a:27:87:83:25:fa:99:7e:42:f4:22:6d: e1:f4:3b:b7:38:24:5a:56:d1:b7:ba:40:98:0b:a9: 9b:fa:3c:1d:28:82:80:cf:c1:7f:2e:88:73:99:15: 67:30:0f:46:95:24:ce:5e:65:6e:3c:79:29:9f:49: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:17:27:C3:F8:89:6E:8A:FA:32:63:A9:FA:1A:AC:8F:23:8A:F5:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/06677e83-0c67-3aee-be47-b4de3ad1063f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 74.121.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5c:fc:c8:e1:1b:05:a6:eb:97:79:c0:3b:5f:11:50:ad:14: d7:e5:93:5c:72:3f:43:d0:ab:04:71:ab:10:7d:0a:d8:f1:78: 26:ba:ff:d7:46:17:f8:8a:fa:0f:45:6b:1c:0d:c1:06:56:2e: c2:42:40:89:7e:9c:f0:b3:1f:64:ee:e5:55:24:0f:81:59:3d: 06:4b:5e:73:26:dc:ae:a2:9e:77:75:c9:d5:7e:f1:0f:de:56: 34:21:eb:06:33:0c:fd:71:92:46:05:2e:7a:90:f0:a1:27:92: 1e:c7:73:a8:4a:77:7f:28:90:68:55:06:6c:c5:23:d2:08:d3: ac:6a:48:50:77:2a:d9:d1:d3:b1:47:83:9c:33:f9:67:e4:0d: 60:f4:37:50:bf:96:08:94:62:52:16:d0:6f:0e:b1:35:79:a5: 35:99:92:a9:0f:bc:26:ad:10:c9:9b:c9:48:62:98:af:06:43: 84:ae:4f:65:72:5f:e4:a5:b4:e4:44:b6:38:bb:88:f1:2f:d4: e3:1d:49:e4:dd:8f:b4:7a:a9:64:b5:3d:c7:1f:5d:cb:28:55: c5:a4:d1:da:6f:e3:dc:85:df:b3:6e:0d:d3:16:c3:93:78:36: 83:ce:fe:92:ee:be:3f:7a:d9:29:75:cb:c9:73:60:34:05:45: c8:11:20:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/9Vvoh7nhxhnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk NDMyNDk4M2UtZjlhZC00YzVmLTkzOTUtOWE5ZDk3OWM5MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAHMhlB/Gr5QxC2UoNjinwv2EODRnpWOyd9h xAgI+Qesd6Tv8FQOiwzK5W0MdhqIqq3dpZqRPmYy19Cp5g68icsMIzuapprGMONH bRIJ42D0BoU2NGTSQwE1M6AFVCFI9OB8MSkATLgX8jkWbEyRjw6NoyI0eGvvmwul 29iEMd+Aicqz3CT+9iBSiCjm/q2eHRjFV9hCRf4U9fHc3PHQJetaGryJhag1wx71 O7skgZb4icJqwDOobNiYfO+UX+hLFzYRio9aJ4eDJfqZfkL0Im3h9Du3OCRaVtG3 ukCYC6mb+jwdKIKAz8F/LohzmRVnMA9GlSTOXmVuPHkpn0nJlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAXJ8P4iW6K+jJjqfoarI8jivWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMDY2NzdlODMtMGM2Ny0z YWVlLWJlNDctYjRkZTNhZDEwNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABc/MjhGwWm65d5wDtfEVCtFNflk1xyP0PQqwRxqxB9CtjxeCa6/9dG F/iK+g9FaxwNwQZWLsJCQIl+nPCzH2Tu5VUkD4FZPQZLXnMm3K6innd1ydV+8Q/e VjQh6wYzDP1xkkYFLnqQ8KEnkh7Hc6hKd38okGhVBmzFI9II06xqSFB3KtnR07FH g5wz+WfkDWD0N1C/lgiUYlIW0G8OsTV5pTWZkqkPvCatEMmbyUhimK8GQ4SuT2Vy X+SltOREtji7iPEv1OMdSeTdj7R6qWS1PccfXcsoVcWk0dpv49yF37NuDdMWw5N4 NoPO/pLuvj962Sl1y8lzYDQFRcgRII4= -----END CERTIFICATE-----Generated at Sun Apr 20 02:07:43 2025 by rpki-client