$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa File: 3873425f-0330-3da6-b372-5e44dd7a2deb.roa (raw, json) Hash identifier: fSXQiDo7mLVY7gs76461o7xgB+HeXXkryJhlILuqhBs= Subject key identifier: 26:8F:B8:AF:7A:F3:74:E4:02:D2:9A:D4:AE:12:1E:11:4D:A0:2B:85 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F43285848E59BCCF42F20409BBC65C880 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 35847 IP address blocks: 74.51.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:cc:f4:2f:20:40:9b:bc:65:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=27ad1624-f3f0-4590-864c-bca9b5127492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3c:b4:b4:07:49:c7:3b:38:3b:5b:1a:70:fd: ff:16:3d:4c:10:21:12:ab:19:4b:4a:52:b1:84:ec: f6:22:34:b6:12:a6:47:e7:a9:e9:e5:56:60:f7:dc: be:b7:e9:9c:3f:77:83:c5:db:f0:09:4f:a1:8b:1e: c5:ae:b5:2f:b3:d9:0a:cb:6a:dc:b8:80:11:cd:61: c9:e9:38:98:6d:bf:b6:60:1b:3a:f3:6b:c2:5c:33: a0:cd:a0:c1:d4:bd:67:75:3e:17:34:b7:f0:85:1f: f3:29:94:7f:af:62:d9:78:eb:e5:18:09:d4:5e:41: 76:63:77:51:cb:7e:fb:7b:16:59:53:c6:ae:66:61: 82:e5:28:8b:fe:f6:c6:d0:18:df:2c:86:f4:83:c6: b0:10:33:31:9d:f7:cf:b1:ad:7d:15:c9:70:db:83: f0:4a:39:93:89:bf:74:07:86:d9:88:47:f7:a5:f5: ea:e0:5c:71:4b:ee:9e:28:93:90:8a:d6:dc:a2:ab: 8a:61:f7:c6:6d:d7:4e:e1:5d:b2:09:16:a2:da:ed: af:9d:de:e6:6b:37:ba:86:ac:3a:3d:5a:69:40:a2: d7:c4:a9:3e:d5:8e:75:a6:80:17:a4:49:0e:ef:c5: fc:ff:ea:4d:cd:5a:d7:eb:53:ac:e6:6e:26:58:08: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8F:B8:AF:7A:F3:74:E4:02:D2:9A:D4:AE:12:1E:11:4D:A0:2B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/3873425f-0330-3da6-b372-5e44dd7a2deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 74.51.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e9:e2:65:af:2e:8f:6b:8b:ab:78:31:14:a6:61:6d:1a:9e: c0:3f:e9:0a:04:0e:c1:85:79:00:0d:2e:96:73:a1:56:18:51: 1c:68:54:cd:18:0b:d6:6f:85:f3:08:2f:39:03:93:28:fd:c4: e9:ee:83:bb:39:7f:3b:05:41:59:e4:54:40:79:dc:a7:9d:e2: 33:ab:7c:ae:71:e1:3c:ba:4d:33:d0:f4:28:ed:54:aa:b4:94: 40:ed:a2:91:b2:07:2b:af:78:0d:20:97:98:32:6d:82:51:bd: 25:8d:cc:90:53:9c:4b:66:48:ee:39:8a:43:48:cb:51:26:0c: a6:00:f0:42:18:e0:6d:82:48:c5:85:e1:a8:4f:92:fe:37:ad: e5:56:f1:8b:4a:fa:ea:cf:cd:13:86:6b:23:df:20:5b:ec:02: 06:2a:6d:f0:8c:b3:89:4e:d9:b3:e3:08:f7:8b:d7:56:d9:65: b6:e5:58:53:04:65:9a:58:36:f8:aa:29:f6:68:3f:fc:95:02: d9:04:6c:73:e5:e0:0e:a6:46:87:01:65:d8:df:2b:01:85:95: 17:53:63:70:fd:4f:5d:9b:f5:a7:66:cd:40:70:e4:0a:f1:e6: 38:da:8d:b8:95:b4:c6:0d:42:63:47:33:34:f2:28:4b:5d:71: 18:f0:84:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8z0LyBAm7xlyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjdhZDE2MjQtZjNmMC00NTkwLTg2NGMtYmNhOWI1MTI3NDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjy0tAdJxzs4O1sacP3/Fj1MECESqxlLSlKx hOz2IjS2EqZH56np5VZg99y+t+mcP3eDxdvwCU+hix7FrrUvs9kKy2rcuIARzWHJ 6TiYbb+2YBs682vCXDOgzaDB1L1ndT4XNLfwhR/zKZR/r2LZeOvlGAnUXkF2Y3dR y377exZZU8auZmGC5SiL/vbG0BjfLIb0g8awEDMxnffPsa19Fclw24PwSjmTib90 B4bZiEf3pfXq4FxxS+6eKJOQitbcoquKYffGbddO4V2yCRai2u2vnd7maze6hqw6 PVppQKLXxKk+1Y51poAXpEkO78X8/+pNzVrX61Os5m4mWAib2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaPuK9683TkAtKa1K4SHhFNoCuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvMzg3MzQyNWYtMDMzMC0z ZGE2LWIzNzItNWU0NGRkN2EyZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/p4mWvLo9ri6t4MRSmYW0ansA/6QoEDsGFeQANLpZzoVYYURxoVM0Y C9ZvhfMILzkDkyj9xOnug7s5fzsFQVnkVEB53Ked4jOrfK5x4Ty6TTPQ9CjtVKq0 lEDtopGyByuveA0gl5gybYJRvSWNzJBTnEtmSO45ikNIy1EmDKYA8EIY4G2CSMWF 4ahPkv43reVW8YtK+urPzROGayPfIFvsAgYqbfCMs4lO2bPjCPeL11bZZbblWFME ZZpYNviqKfZoP/yVAtkEbHPl4A6mRocBZdjfKwGFlRdTY3D9T12b9admzUBw5Arx 5jjajbiVtMYNQmNHMzTyKEtdcRjwhFU= -----END CERTIFICATE-----Generated at Tue Apr 29 07:01:48 2025 by rpki-client