$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/2bd77894-b575-3384-81b8-b994869b3293.roa File: 2bd77894-b575-3384-81b8-b994869b3293.roa (raw, json) Hash identifier: 30k6ZwT9oieqVzIMNvNR3WztnpCf+NSGqHVb8cRYvdk= Subject key identifier: CB:47:CB:CC:DC:F7:C8:A4:B4:4A:C3:D9:58:C6:A6:66:8C:DB:AD:73 Certificate issuer: /CN=bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9 Certificate serial: 010D0C9F432858496E498A271F54B82AD58D4230 Authority key identifier: F5:0C:E1:7B:3F:80:EB:2A:B8:70:CA:72:EC:70:69:50:0A:C7:8B:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/2bd77894-b575-3384-81b8-b994869b3293.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 29909 IP address blocks: 74.220.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:8a:27:1f:54:b8:2a:d5:8d:42:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=c6bfc95f-9dec-4ac2-b942-6210bbc8235e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:22:00:ac:48:aa:a1:79:51:cc:b3:7f:f8: 53:90:7a:4c:23:75:44:5e:a6:91:37:38:18:a9:d5: c6:bb:7f:a8:25:36:e1:e1:e0:55:21:ec:63:83:06: c1:3d:6c:83:fc:ee:0f:5d:c5:94:b6:d6:5f:c0:fd: 21:97:f7:05:43:86:9f:6a:a6:48:6d:65:68:3e:d7: f8:df:66:cd:9a:9b:8a:60:17:38:98:ee:17:d0:83: 41:0a:5b:a2:32:2c:2d:a1:4c:16:02:7a:05:a5:e9: 9d:20:2f:aa:0c:dd:d9:a1:71:22:74:2d:d7:ad:14: 65:27:4c:6d:39:13:43:70:63:12:5b:83:51:1a:be: 93:d7:5c:85:30:b6:85:6e:d8:f2:d6:86:de:ee:61: 3f:31:4a:55:8d:f8:6d:d4:bf:3c:05:a0:ab:5f:49: 64:a0:ac:bd:8a:13:8a:c4:55:24:4b:60:b7:42:b8: b8:cd:49:73:26:64:bb:3d:ae:66:fa:1b:66:02:76: 42:a8:79:91:fb:06:87:0a:a5:85:d1:be:c2:2f:89: a3:1c:dc:aa:55:51:8d:8e:fe:a7:50:14:2e:6b:d9: c4:9b:6d:cf:a3:14:dd:f8:a1:b6:bd:8c:b7:a7:33: 5f:4d:0a:54:9f:87:16:39:47:b4:de:36:0e:0d:97: 9d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:47:CB:CC:DC:F7:C8:A4:B4:4A:C3:D9:58:C6:A6:66:8C:DB:AD:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/2bd77894-b575-3384-81b8-b994869b3293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.crl X509v3 Authority Key Identifier: keyid:F5:0C:E1:7B:3F:80:EB:2A:B8:70:CA:72:EC:70:69:50:0A:C7:8B:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bcc6a41f-e6ac-4388-9ac0-8cf0e67040b9.cer sbgp-ipAddrBlock: critical IPv4: 74.220.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:47:c2:e5:72:27:ae:3d:b9:16:eb:01:31:bb:46:9c:f6:98: e4:89:ca:fd:19:53:36:09:da:0b:49:f0:04:3b:64:d7:4a:aa: f3:d0:04:7b:b4:a9:89:a2:bf:7b:2e:06:0c:e6:93:ba:95:35: 43:01:ad:29:84:1f:e5:43:84:b5:03:b5:37:8d:f2:b8:86:8a: c3:1f:e9:57:81:4b:06:79:74:5a:12:33:b9:c3:68:da:49:44: 2b:1a:95:fc:d0:3b:06:cc:3a:77:d8:60:fa:24:c3:0e:54:4e: 1b:83:09:1f:92:9d:c9:e4:b7:54:b4:65:7c:fb:41:c6:41:6d: 4a:98:ec:00:89:e5:81:55:8c:57:24:eb:d6:94:df:f2:e2:49: d5:07:a3:68:39:00:c0:04:18:6b:a3:28:3b:1b:f1:cf:6c:f0: 8e:82:10:a4:c6:db:b4:fc:b9:7c:43:8d:9d:97:c9:f1:8d:99: 42:44:42:4c:b2:31:67:76:75:cd:97:0a:94:e2:f0:51:af:a6: 31:0d:3c:75:bf:0e:22:0c:0d:e8:01:30:af:d2:82:61:8d:41: cd:d5:63:67:cd:1b:26:31:87:c2:db:d4:5f:99:03:20:43:1b: 4f:f0:31:ed:83:37:85:c9:d4:22:a0:5b:99:09:75:0d:c9:f0: 21:e9:7c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYonH1S4KtWNQjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNjNmE0MWYtZTZhYy00Mzg4LTlhYzAtOGNmMGU2NzA0 MGI5MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk YzZiZmM5NWYtOWRlYy00YWMyLWI5NDItNjIxMGJiYzgyMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrYiAKxIqqF5Ucyzf/hTkHpMI3VEXqaRNzgY qdXGu3+oJTbh4eBVIexjgwbBPWyD/O4PXcWUttZfwP0hl/cFQ4afaqZIbWVoPtf4 32bNmpuKYBc4mO4X0INBCluiMiwtoUwWAnoFpemdIC+qDN3ZoXEidC3XrRRlJ0xt ORNDcGMSW4NRGr6T11yFMLaFbtjy1obe7mE/MUpVjfht1L88BaCrX0lkoKy9ihOK xFUkS2C3Qri4zUlzJmS7Pa5m+htmAnZCqHmR+waHCqWF0b7CL4mjHNyqVVGNjv6n UBQua9nEm23PoxTd+KG2vYy3pzNfTQpUn4cWOUe03jYODZednwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtHy8zc98iktErD2VjGpmaM261zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iY2M2 YTQxZi1lNmFjLTQzODgtOWFjMC04Y2YwZTY3MDQwYjkvMmJkNzc4OTQtYjU3NS0z Mzg0LTgxYjgtYjk5NDg2OWIzMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmNjNmE0MWYtZTZhYy00Mzg4LTlh YzAtOGNmMGU2NzA0MGI5L2JjYzZhNDFmLWU2YWMtNDM4OC05YWMwLThjZjBlNjcw NDBiOS5jcmwwHwYDVR0jBBgwFoAU9Qzhez+A6yq4cMpy7HBpUArHi/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iY2M2YTQxZi1lNmFjLTQzODgtOWFjMC04Y2Yw ZTY3MDQwYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhHwuVyJ649uRbrATG7Rpz2mOSJyv0ZUzYJ2gtJ8AQ7ZNdKqvPQBHu0 qYmiv3suBgzmk7qVNUMBrSmEH+VDhLUDtTeN8riGisMf6VeBSwZ5dFoSM7nDaNpJ RCsalfzQOwbMOnfYYPokww5UThuDCR+Sncnkt1S0ZXz7QcZBbUqY7ACJ5YFVjFck 69aU3/LiSdUHo2g5AMAEGGujKDsb8c9s8I6CEKTG27T8uXxDjZ2XyfGNmUJEQkyy MWd2dc2XCpTi8FGvpjENPHW/DiIMDegBMK/SgmGNQc3VY2fNGyYxh8Lb1F+ZAyBD G0/wMe2DN4XJ1CKgW5kJdQ3J8CHpfGU= -----END CERTIFICATE-----Generated at Wed Apr 30 21:26:15 2025 by rpki-client