$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ba716f70-2dda-370c-a6e8-5fc14d9a48e0.roa File: ba716f70-2dda-370c-a6e8-5fc14d9a48e0.roa (raw, json) Hash identifier: FdMI4Iq5XoIVlM4jFhY7WbXeyYO+V9wX/Lwctc6SpkA= Subject key identifier: 22:D3:D8:D6:5A:8A:D0:1F:A0:31:F8:76:14:3B:C4:46:6D:46:49:27 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3FF00199B532D17BDB200 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ba716f70-2dda-370c-a6e8-5fc14d9a48e0.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 19795 IP address blocks: 74.112.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:ff:00:19:9b:53:2d:17:bd:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=0b856d97-b7b9-45bb-8d23-e1322a5abbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:b9:04:aa:6f:29:19:9b:4b:bd:1d:cd:fc: c9:63:8c:d5:a7:90:18:8d:2c:2c:2c:25:7d:8b:95: bb:c1:2a:44:4a:4f:6c:72:99:37:04:9c:25:cd:c5: af:00:70:67:8e:83:1b:0e:aa:ad:e6:30:1d:06:97: e6:e4:22:46:3f:cf:05:14:dd:7d:f6:e7:a1:c5:f4: a3:01:fe:a5:e2:91:3a:4c:94:ee:b1:23:a5:df:9d: f8:12:05:48:f1:b4:9b:83:ec:39:d9:70:c8:46:1b: 08:00:0d:91:05:0e:94:0a:2e:f5:c0:55:b1:e6:18: f3:e1:e9:56:81:3b:f9:1d:7c:23:8c:a7:f0:66:c6: fc:e2:84:82:e1:d9:9e:f2:da:74:54:b9:fa:9e:34: 28:ec:97:47:04:df:e8:fa:98:05:6c:04:5e:a3:ff: 33:63:0b:dc:4b:c1:72:85:bc:a1:81:d0:ec:1d:dd: 22:22:a0:bc:e7:87:ab:f7:84:e6:fd:ab:fd:0b:a9: 12:4c:8d:87:a9:e1:1e:fc:cd:ed:2e:30:17:1c:4c: 62:9a:99:9f:01:d9:02:34:f8:a1:e7:db:3a:ac:bd: c3:72:8c:24:bc:98:e1:5e:c2:72:5d:b4:db:07:5f: 02:86:db:7e:be:c3:a4:aa:b9:5d:c4:2f:b6:a1:35: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D3:D8:D6:5A:8A:D0:1F:A0:31:F8:76:14:3B:C4:46:6D:46:49:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ba716f70-2dda-370c-a6e8-5fc14d9a48e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 74.112.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:42:ef:7e:fd:fd:f1:41:9a:ca:7c:d7:0a:ef:b5:15:59:f3: 87:67:0f:a2:36:36:f8:36:60:98:42:9f:6b:d5:83:2b:66:2d: f5:9f:b3:13:de:61:21:83:ea:bb:24:e3:ab:f5:bb:ec:b8:38: 3e:15:b8:bf:8b:ef:09:7d:3c:ca:3f:f7:d3:07:91:ed:e9:08: 33:27:4b:be:18:51:5d:e2:7f:eb:f6:31:37:a2:e1:62:7a:36: ec:15:99:77:c0:45:42:52:cc:04:09:8a:dd:1d:8a:24:f7:1a: 11:cc:4f:bc:80:f6:7c:e0:51:c0:b7:ce:ac:bc:be:1a:58:05: 4e:ea:7c:db:e9:a5:b2:05:bd:3b:85:5a:26:c0:40:9d:07:78: 64:ba:76:25:de:0b:86:f5:99:8f:c5:3e:56:a4:4f:12:d8:2d: 63:52:2e:c7:fa:e4:dc:a7:b0:47:16:fb:4e:3a:75:6e:db:23: 4d:7c:39:c9:a4:3d:8a:db:11:2c:ad:95:b8:20:0a:11:bf:79: 75:fa:54:83:c6:5a:18:10:95:e6:a7:3f:c8:f1:8e:63:bb:29: 44:cf:66:80:39:c7:38:6d:cd:2a:4a:7a:8c:89:2c:ae:29:94: f6:0d:35:c7:b5:ba:e0:40:22:e3:48:fc:a2:93:b7:e2:59:2c: 63:1c:fc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/8AGZtTLRe9sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MGI4NTZkOTctYjdiOS00NWJiLThkMjMtZTEzMjJhNWFiYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3m5BKpvKRmbS70dzfzJY4zVp5AYjSwsLCV9 i5W7wSpESk9scpk3BJwlzcWvAHBnjoMbDqqt5jAdBpfm5CJGP88FFN199uehxfSj Af6l4pE6TJTusSOl3534EgVI8bSbg+w52XDIRhsIAA2RBQ6UCi71wFWx5hjz4elW gTv5HXwjjKfwZsb84oSC4dme8tp0VLn6njQo7JdHBN/o+pgFbAReo/8zYwvcS8Fy hbyhgdDsHd0iIqC854er94Tm/av9C6kSTI2HqeEe/M3tLjAXHEximpmfAdkCNPih 59s6rL3DcowkvJjhXsJyXbTbB18Chtt+vsOkqrldxC+2oTVbyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLT2NZaitAfoDH4dhQ7xEZtRkknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYmE3MTZmNzAtMmRkYS0z NzBjLWE2ZTgtNWZjMTRkOWE0OGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnBDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtC7379/fFBmsp81wrvtRVZ84dnD6I2Nvg2YJhCn2vVgytmLfWfsxPe YSGD6rsk46v1u+y4OD4VuL+L7wl9PMo/99MHke3pCDMnS74YUV3if+v2MTei4WJ6 NuwVmXfARUJSzAQJit0diiT3GhHMT7yA9nzgUcC3zqy8vhpYBU7qfNvppbIFvTuF WibAQJ0HeGS6diXeC4b1mY/FPlakTxLYLWNSLsf65NynsEcW+046dW7bI018Ocmk PYrbESytlbggChG/eXX6VIPGWhgQleanP8jxjmO7KUTPZoA5xzhtzSpKeoyJLK4p lPYNNce1uuBAIuNI/KKTt+JZLGMc/KQ= -----END CERTIFICATE-----Generated at Sun Apr 20 04:17:13 2025 by rpki-client