$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa File: 9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa (raw, json) Hash identifier: 5abveX6q05rCd4+aV3hqfngyHgWGXXUNzDMew2LD6YY= Subject key identifier: 55:10:9D:92:20:A7:D5:2D:BE:F7:6F:B8:07:02:3A:A8:44:64:83:8E Certificate issuer: /CN=879f8f15-9dc9-4663-aff8-bf62864b859c Certificate serial: 010D0C9F432858492B488C36400C0F2DD88F9530 Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa Signing time: Thu 13 Mar 2025 00:59:45 +0000 ROA not before: Thu 13 Mar 2025 00:59:45 +0000 ROA not after: Wed 11 Jun 2025 00:59:45 +0000 asID: 398296 IP address blocks: 74.114.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2b:48:8c:36:40:0c:0f:2d:d8:8f:95:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c Validity Not Before: Mar 13 00:59:45 2025 GMT Not After : Jun 11 00:59:45 2025 GMT Subject: CN=f64f715e-d1bd-4bb1-b440-096a38b48b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:bf:f3:da:a0:08:65:b6:16:47:e5:af:ee: 1b:55:1d:c3:82:02:d4:73:38:b1:1c:5b:0b:37:ff: 77:1b:8d:3e:a7:37:52:d9:ae:7a:35:cf:d1:9b:48: 1b:c1:18:1b:96:a4:59:83:f6:e4:10:8d:43:13:11: 53:57:3b:e8:68:95:5c:f9:9b:d1:b5:13:9e:1b:02: 1a:b3:9d:04:e3:19:a5:de:db:a3:3f:bf:83:8d:cb: 18:c1:90:7e:01:85:0d:04:b6:d5:69:d2:db:5d:6d: 89:79:44:67:c9:52:f2:51:05:e6:21:a9:4e:0d:4c: 6c:dd:fd:99:d3:01:7c:4a:26:e6:98:db:4f:79:1a: 48:0f:3b:e1:a7:c1:94:87:67:6b:35:ad:fd:c2:53: c8:74:19:83:c3:1d:34:70:43:d4:68:88:38:ca:0c: 88:f0:5f:a2:cf:39:a0:8e:05:86:e7:3b:05:7c:c2: 74:8f:0d:40:ab:55:c2:6f:70:b7:e1:63:99:ba:fc: e0:07:12:e8:a2:a0:05:25:f7:66:0a:f4:e5:e3:d3: 44:53:e4:3f:34:b9:16:33:39:31:68:3f:55:c4:7b: 39:b5:1a:61:a6:ce:3e:5f:4b:ac:3a:c1:85:01:27: 21:a9:20:bd:d1:e6:5c:84:9b:c0:ed:b8:db:ca:b1: d8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:10:9D:92:20:A7:D5:2D:BE:F7:6F:B8:07:02:3A:A8:44:64:83:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/9e1f7b4a-dd80-30e8-b8d0-6c7f12c3eb02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl X509v3 Authority Key Identifier: keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer sbgp-ipAddrBlock: critical IPv4: 74.114.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ef:b4:42:c1:d2:fe:aa:46:98:35:84:99:28:ef:5d:88:38: ba:e2:33:cf:bd:09:45:78:13:84:3d:91:1e:16:39:6e:18:ab: 9a:05:32:ce:5e:72:f7:22:09:53:62:83:d1:f1:f2:e4:5a:71: f1:49:bb:66:52:84:fb:2c:d6:ce:39:46:39:f8:7d:0c:fd:71: a4:82:7d:70:da:73:7e:af:58:1c:1f:03:d5:1c:0c:fc:a8:a1: a1:9f:09:eb:fb:e9:aa:96:ae:55:26:46:44:d9:d5:9a:83:22: 59:db:52:e4:26:a5:8e:67:62:40:40:86:ed:26:20:c5:6e:7a: 28:49:b6:fb:50:14:45:8d:02:02:fe:d1:85:18:47:25:f1:40: 24:88:00:28:94:1e:94:f1:93:13:98:d4:f7:b5:1b:52:c7:e8: bb:c3:5a:5b:69:80:b9:17:28:1d:63:84:59:2f:09:f0:27:3d: 77:98:5c:0b:86:f7:20:39:ff:27:d1:e4:b8:59:d5:ab:b0:e8: f7:94:08:05:7e:be:7f:fd:a3:00:1a:3b:af:f4:23:4b:d8:71: e8:30:9f:a9:31:cc:a1:2b:26:2b:fd:d5:c0:16:3e:ff:a8:c9: 89:3a:56:2b:bb:eb:7b:7e:c6:18:d7:9a:b8:6c:5f:1e:f9:d2: 00:69:72:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkrSIw2QAwPLdiPlTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc5ZjhmMTUtOWRjOS00NjYzLWFmZjgtYmY2Mjg2NGI4 NTljMB4XDTI1MDMxMzAwNTk0NVoXDTI1MDYxMTAwNTk0NVowLzEtMCsGA1UEAxMk ZjY0ZjcxNWUtZDFiZC00YmIxLWI0NDAtMDk2YTM4YjQ4YjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMy/89qgCGW2Fkflr+4bVR3DggLUczixHFsL N/93G40+pzdS2a56Nc/Rm0gbwRgblqRZg/bkEI1DExFTVzvoaJVc+ZvRtROeGwIa s50E4xml3tujP7+DjcsYwZB+AYUNBLbVadLbXW2JeURnyVLyUQXmIalODUxs3f2Z 0wF8SibmmNtPeRpIDzvhp8GUh2drNa39wlPIdBmDwx00cEPUaIg4ygyI8F+izzmg jgWG5zsFfMJ0jw1Aq1XCb3C34WOZuvzgBxLooqAFJfdmCvTl49NEU+Q/NLkWMzkx aD9VxHs5tRphps4+X0usOsGFASchqSC90eZchJvA7bjbyrHYFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUQnZIgp9UtvvdvuAcCOqhEZIOOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84Nzlm OGYxNS05ZGM5LTQ2NjMtYWZmOC1iZjYyODY0Yjg1OWMvOWUxZjdiNGEtZGQ4MC0z MGU4LWI4ZDAtNmM3ZjEyYzNlYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODc5ZjhmMTUtOWRjOS00NjYzLWFm ZjgtYmY2Mjg2NGI4NTljLzg3OWY4ZjE1LTlkYzktNDY2My1hZmY4LWJmNjI4NjRi ODU5Yy5jcmwwHwYDVR0jBBgwFoAUhrLN/DG6NFfqZMvh3lCvE5jPycAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NzlmOGYxNS05ZGM5LTQ2NjMtYWZmOC1iZjYy ODY0Yjg1OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjvtELB0v6qRpg1hJko712IOLriM8+9CUV4E4Q9kR4WOW4Yq5oFMs5e cvciCVNig9Hx8uRacfFJu2ZShPss1s45Rjn4fQz9caSCfXDac36vWBwfA9UcDPyo oaGfCev76aqWrlUmRkTZ1ZqDIlnbUuQmpY5nYkBAhu0mIMVueihJtvtQFEWNAgL+ 0YUYRyXxQCSIACiUHpTxkxOY1Pe1G1LH6LvDWltpgLkXKB1jhFkvCfAnPXeYXAuG 9yA5/yfR5LhZ1auw6PeUCAV+vn/9owAaO6/0I0vYcegwn6kxzKErJiv91cAWPv+o yYk6Viu763t+xhjXmrhsXx750gBpct8= -----END CERTIFICATE-----Generated at Mon Apr 28 10:36:26 2025 by rpki-client