$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa File: 8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa (raw, json) Hash identifier: MU2FoJDd5pT6bedlgHuRaVvpTHXyHorJNUiiD2pXXkk= Subject key identifier: FB:65:1A:C3:11:9B:49:77:2E:AA:2B:10:80:96:7B:65:DC:52:46:43 Certificate issuer: /CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f Certificate serial: 010D0C9F432858495EEEE55553F6E706E5C6AE80 Authority key identifier: E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 399761 IP address blocks: 74.117.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e5:55:53:f6:e7:06:e5:c6:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=8daaab22-97fc-45d9-b839-5e57e5eba884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:05:8f:ae:3f:2e:be:c0:5f:15:c0:d3:74: 85:84:f1:be:f4:0f:6c:b4:19:76:e3:b0:10:79:cf: f5:9b:96:26:6b:81:e0:f1:5f:09:47:f5:a4:b3:5e: 39:e8:90:d9:2f:49:75:07:f2:9d:c3:f4:a0:9d:8d: a9:65:11:15:cd:f8:55:99:65:b8:25:b3:76:b2:34: 91:a1:3e:81:8f:01:f7:2b:b0:b8:a1:e4:f8:11:90: 3d:1e:f3:2e:5e:10:9c:e5:f1:1e:5a:16:a1:f3:23: 1b:6d:93:a4:0b:16:2d:09:a0:c9:8f:b0:47:1e:4d: 02:7d:28:90:16:a9:03:bc:3e:5f:2c:7d:c7:da:ef: 9f:d8:3a:25:d9:8b:99:50:46:da:1a:1e:1c:4d:77: d0:29:17:0e:9f:09:ff:e8:40:ec:6a:38:1c:c0:a7: 81:c2:1f:da:3b:23:ad:7d:b0:8b:4e:1f:85:b5:26: 67:ba:35:4e:29:35:cc:10:e8:1a:33:3c:56:37:ed: 24:56:12:2a:ab:0a:40:dd:02:a4:b4:58:bb:e7:55: 05:11:e3:89:70:34:93:34:67:b4:82:61:86:ed:52: e4:be:76:0d:cb:0a:29:92:02:ea:1e:b6:1b:a4:0c: 96:86:f5:e7:13:61:70:ad:e6:17:f1:52:fd:f2:7c: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:65:1A:C3:11:9B:49:77:2E:AA:2B:10:80:96:7B:65:DC:52:46:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/8f879f1c-4d45-3eae-9b64-b6dfb54e38a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.crl X509v3 Authority Key Identifier: keyid:E7:5A:9B:72:A0:DA:D3:14:B8:AF:D2:D5:58:D4:5B:AA:2E:62:ED:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcf9b6c8-75f0-4b9b-87b6-216bc95b2b3f.cer sbgp-ipAddrBlock: critical IPv4: 74.117.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:51:03:71:3c:3e:ba:ea:90:4a:86:91:8e:30:68:c0:a8:3e: 02:7a:7e:0c:3b:37:e8:d9:94:5d:d3:7f:b7:64:7f:ed:95:a8: b8:85:a1:3a:4e:f4:2f:20:73:c7:2b:87:3f:a7:5e:40:b2:6c: f2:c9:0c:2b:0f:69:ff:34:0e:c0:63:58:0d:13:ff:bf:01:03: 16:90:6c:6e:0c:f5:ae:df:77:71:43:2b:ff:01:ae:82:b4:34: 7b:31:4b:64:ec:97:71:0f:30:08:42:7e:00:04:4e:56:1e:f2: d8:a7:f1:ab:cc:4f:98:09:f3:6c:8a:5a:de:3f:5e:14:0d:e9: 37:81:cc:eb:60:53:86:f5:6e:87:11:7e:0d:00:91:6d:52:11: ed:d3:23:b3:74:d1:d1:90:40:6f:da:54:e6:99:d1:75:da:63: 1e:6e:63:9c:90:4a:9e:91:35:31:ae:d4:19:5c:55:47:ea:17: 7e:97:fb:f9:f2:b2:6a:4e:e6:25:03:af:1c:42:a6:8d:3b:f3: 42:5c:9d:c3:af:96:fc:d6:d1:2f:0d:d3:2f:0e:21:38:c0:ff: 1c:0d:f1:3b:eb:03:10:ff:09:17:24:83:17:fb:98:b9:48:ee: 2b:f3:71:4b:d6:83:24:9e:13:a5:03:1b:8c:e7:b7:27:6e:ff: 05:03:d4:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7uVVU/bnBuXGroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNmOWI2YzgtNzVmMC00YjliLTg3YjYtMjE2YmM5NWIy YjNmMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk OGRhYWFiMjItOTdmYy00NWQ5LWI4MzktNWU1N2U1ZWJhODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhssFj64/Lr7AXxXA03SFhPG+9A9stBl247AQ ec/1m5Yma4Hg8V8JR/Wks1456JDZL0l1B/Kdw/SgnY2pZREVzfhVmWW4JbN2sjSR oT6BjwH3K7C4oeT4EZA9HvMuXhCc5fEeWhah8yMbbZOkCxYtCaDJj7BHHk0CfSiQ FqkDvD5fLH3H2u+f2Dol2YuZUEbaGh4cTXfQKRcOnwn/6EDsajgcwKeBwh/aOyOt fbCLTh+FtSZnujVOKTXMEOgaMzxWN+0kVhIqqwpA3QKktFi751UFEeOJcDSTNGe0 gmGG7VLkvnYNywopkgLqHrYbpAyWhvXnE2FwreYX8VL98nyVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtlGsMRm0l3LqorEICWe2XcUkZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iY2Y5 YjZjOC03NWYwLTRiOWItODdiNi0yMTZiYzk1YjJiM2YvOGY4NzlmMWMtNGQ0NS0z ZWFlLTliNjQtYjZkZmI1NGUzOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmNmOWI2YzgtNzVmMC00YjliLTg3 YjYtMjE2YmM5NWIyYjNmL2JjZjliNmM4LTc1ZjAtNGI5Yi04N2I2LTIxNmJjOTVi MmIzZi5jcmwwHwYDVR0jBBgwFoAU51qbcqDa0xS4r9LVWNRbqi5i7dUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iY2Y5YjZjOC03NWYwLTRiOWItODdiNi0yMTZi Yzk1YjJiM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNRA3E8PrrqkEqGkY4waMCoPgJ6fgw7N+jZlF3Tf7dkf+2VqLiFoTpO 9C8gc8crhz+nXkCybPLJDCsPaf80DsBjWA0T/78BAxaQbG4M9a7fd3FDK/8BroK0 NHsxS2Tsl3EPMAhCfgAETlYe8tin8avMT5gJ82yKWt4/XhQN6TeBzOtgU4b1bocR fg0AkW1SEe3TI7N00dGQQG/aVOaZ0XXaYx5uY5yQSp6RNTGu1BlcVUfqF36X+/ny smpO5iUDrxxCpo0780JcncOvlvzW0S8N0y8OITjA/xwN8TvrAxD/CRckgxf7mLlI 7ivzcUvWgySeE6UDG4zntydu/wUD1GU= -----END CERTIFICATE-----Generated at Mon Apr 28 06:09:21 2025 by rpki-client