$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa File: 119a8ee9-c67a-3c89-b56c-207a8120cc45.roa (raw, json) Hash identifier: Rp5mgNt0OYYhuOr0uhI3qWYI013cEV4uiJ6UFCb+FMY= Subject key identifier: 67:92:9E:C3:76:F2:8C:3D:67:12:6F:7D:FB:A6:16:B0:C1:EE:0B:72 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F432858498E6486CE901E8B8524600B00 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 396185 IP address blocks: 74.127.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:86:ce:90:1e:8b:85:24:60:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=921653ab-810e-4da4-aa6b-8b77942886cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5b:77:2f:4f:1d:af:89:41:03:0b:6a:1c:84: 41:d5:d3:ad:33:16:fe:34:c7:9c:8e:ef:f2:6e:b5: 91:f8:16:70:f2:d2:fe:a7:b4:71:07:15:08:65:de: 4c:7c:c6:b2:4e:a9:e3:5f:39:20:be:b2:1a:aa:86: 7b:0a:9b:e7:7e:b3:7d:b1:8b:b8:d2:3a:49:41:94: 6c:b6:a8:db:40:b6:67:1d:09:42:a2:33:37:92:ef: 1c:ae:1a:3e:8f:c7:82:29:07:e7:35:1f:4a:7c:cf: 74:04:04:20:84:ff:16:f6:74:07:2b:ec:2e:13:6e: e0:26:94:69:9a:71:6c:ce:ed:a5:50:ca:d2:5b:55: c2:48:d6:1b:58:9e:8b:67:ff:0f:65:8c:12:58:39: be:6d:d7:b7:0f:15:b0:3b:30:5e:ea:b5:26:e9:cb: 5a:a6:99:42:e8:1e:5f:4f:ea:80:c6:1d:2f:c9:2f: 2d:cb:e2:c1:32:b8:25:8f:cf:c5:af:9d:8f:ac:16: 50:1b:b8:9f:e5:52:1f:a8:4d:76:74:bf:8d:4a:36: c2:9f:d6:1e:02:6f:49:7c:ff:5b:85:5e:47:10:22: 3f:37:00:98:0c:bb:7a:14:fe:5d:bf:d7:50:15:ac: b3:a9:bc:b5:35:56:16:29:d5:66:d4:68:14:a2:79: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:92:9E:C3:76:F2:8C:3D:67:12:6F:7D:FB:A6:16:B0:C1:EE:0B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/119a8ee9-c67a-3c89-b56c-207a8120cc45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 74.127.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a2:35:77:d4:62:7d:40:c4:40:38:89:55:75:23:2c:e4:59: 42:d5:30:68:47:d0:c2:bf:db:07:8f:9a:41:b3:f3:2d:25:82: a4:13:08:1f:3d:cb:7d:06:02:8e:e2:68:6c:bb:e9:45:cf:a1: 56:9a:61:76:1c:58:ab:33:37:3c:82:72:63:25:78:6f:d8:6a: 83:cc:3e:1a:94:07:04:a2:9d:66:97:f2:3f:d6:95:8f:da:3b: 7a:3b:c4:6f:2b:61:4d:9a:75:2f:1c:85:c9:a3:28:60:51:5b: 46:dd:47:9d:e7:a8:8a:b8:ad:6b:0b:98:7a:44:e5:a9:b5:dd: 2e:1f:b6:24:87:17:f9:cf:fc:44:13:bb:4e:54:a4:da:e7:06: 95:78:48:63:bf:3d:8b:24:4a:d6:61:81:56:bb:b9:ca:0c:e1: 5e:20:44:e0:6f:6c:02:61:96:f6:56:04:77:5c:a2:a6:e6:fd: be:39:aa:18:33:58:43:07:d9:e2:42:fd:fe:cf:fe:b8:fd:13: 05:b6:dc:44:38:0b:bb:64:03:1f:49:eb:ea:41:86:c8:f8:ad: e5:e2:cc:d2:aa:cb:d9:c3:50:d2:0b:73:55:6f:7b:53:f0:6b: a2:31:af:aa:4d:45:6b:53:f9:dc:81:01:48:0d:e5:17:59:d1: 23:c3:d4:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZIbOkB6LhSRgCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OTIxNjUzYWItODEwZS00ZGE0LWFhNmItOGI3Nzk0Mjg4NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVt3L08dr4lBAwtqHIRB1dOtMxb+NMecju/y brWR+BZw8tL+p7RxBxUIZd5MfMayTqnjXzkgvrIaqoZ7CpvnfrN9sYu40jpJQZRs tqjbQLZnHQlCojM3ku8crho+j8eCKQfnNR9KfM90BAQghP8W9nQHK+wuE27gJpRp mnFszu2lUMrSW1XCSNYbWJ6LZ/8PZYwSWDm+bde3DxWwOzBe6rUm6ctapplC6B5f T+qAxh0vyS8ty+LBMrglj8/Fr52PrBZQG7if5VIfqE12dL+NSjbCn9YeAm9JfP9b hV5HECI/NwCYDLt6FP5dv9dQFayzqby1NVYWKdVm1GgUonkiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeSnsN28ow9ZxJvffumFrDB7gtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMTE5YThlZTktYzY3YS0z Yzg5LWI1NmMtMjA3YTgxMjBjYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSn9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiiNXfUYn1AxEA4iVV1IyzkWULVMGhH0MK/2wePmkGz8y0lgqQTCB89 y30GAo7iaGy76UXPoVaaYXYcWKszNzyCcmMleG/YaoPMPhqUBwSinWaX8j/WlY/a O3o7xG8rYU2adS8chcmjKGBRW0bdR53nqIq4rWsLmHpE5am13S4ftiSHF/nP/EQT u05UpNrnBpV4SGO/PYskStZhgVa7ucoM4V4gROBvbAJhlvZWBHdcoqbm/b45qhgz WEMH2eJC/f7P/rj9EwW23EQ4C7tkAx9J6+pBhsj4reXizNKqy9nDUNILc1Vve1Pw a6Ixr6pNRWtT+dyBAUgN5RdZ0SPD1IM= -----END CERTIFICATE-----Generated at Mon Apr 28 00:41:44 2025 by rpki-client