$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa File: 2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa (raw, json) Hash identifier: CFwP8mlOm5OeO0IJw3lGyZh2yWvYtFQW+UBonJ4Hp/M= Subject key identifier: 85:99:46:DE:D0:CD:92:24:A7:79:C2:E0:04:79:41:49:C0:40:18:40 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F432858497974412872D5E7E13CD0B490 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 398420 IP address blocks: 74.126.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:41:28:72:d5:e7:e1:3c:d0:b4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=7c998d16-6771-465a-a8ba-54a50827657d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:66:8a:06:10:54:fc:6d:8a:84:0e:66:30:f2: c6:03:26:68:fc:61:ce:17:00:46:14:fe:f3:02:b3: 27:e1:58:6f:d8:25:7c:82:b0:d8:94:e3:1b:2d:02: 4a:3c:a7:05:80:58:88:6c:23:e2:5b:f0:ab:92:b4: 9a:2f:64:bb:b5:7e:6d:95:c7:64:9c:bf:c4:97:06: 98:55:9f:08:32:8b:c4:48:c6:a6:41:65:9b:b6:80: 5e:de:b8:19:95:ee:ee:e6:ee:79:4f:a6:a7:07:96: bb:24:e1:a3:ec:57:f7:39:dc:13:7c:a4:26:3e:67: 08:9d:70:59:90:9a:3a:b3:6c:cd:78:d4:1c:d1:92: bd:c2:da:1d:21:67:69:e5:03:58:02:37:f0:b0:89: d0:a6:f5:c1:58:f2:5a:70:13:83:70:3d:75:36:75: 3c:6b:8f:34:ea:fb:d0:68:a9:be:f9:fb:5f:35:eb: 6c:72:81:ef:45:1c:ab:df:18:71:63:35:cb:a1:6a: 4a:50:b5:a5:80:bc:e7:d3:bf:fa:7f:40:00:58:01: b7:2d:34:68:e9:71:17:b8:c0:ad:0e:76:90:25:65: fe:79:1c:30:12:9a:5e:02:4d:3b:22:1e:8c:93:36: b0:03:6d:94:d5:b0:00:5a:00:da:4e:0d:6d:3d:46: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:99:46:DE:D0:CD:92:24:A7:79:C2:E0:04:79:41:49:C0:40:18:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2b2681df-c6c5-3cf8-b2fa-c5e90358ea9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:61:2b:b5:15:96:17:81:dd:ee:b3:6c:7f:3b:76:a2:97:6a: d5:c2:5d:10:ed:e5:2f:24:d6:54:38:8a:dd:1c:9a:be:95:9a: 6e:70:23:d9:67:ba:e0:76:5d:0a:88:c8:b3:d0:ad:b1:d2:af: 98:a4:eb:cb:c3:0e:a6:d4:60:73:21:f0:1f:8a:73:fa:56:71: 1a:5b:48:b9:c0:54:5a:ad:5c:7a:b8:95:2f:41:8b:78:00:61: b8:48:d2:1e:19:63:6f:65:81:74:6d:6e:00:df:c5:ec:74:00: 25:59:8f:29:86:4d:9b:6f:49:cd:c3:69:a1:68:47:62:0f:8f: 7a:1e:ab:a4:dd:e4:60:57:90:9a:d5:51:b8:67:5a:01:3b:e0: 8a:40:e8:e4:14:0c:6c:ca:1f:2a:b5:9d:af:fc:05:37:2f:40: c6:93:34:f2:d9:1b:a2:c6:d8:be:3c:14:28:e9:ab:d4:b2:dd: 35:1f:69:87:46:2b:67:71:69:69:a0:44:98:1f:61:0f:87:41: bd:f6:d9:6c:16:84:cf:dd:43:e0:9c:52:35:b6:fa:2c:d9:3f: df:0a:a3:b3:8c:8b:0d:23:b4:d4:cf:b3:64:f5:ad:98:c7:81: b7:31:47:2d:92:f8:5f:df:6e:33:ba:78:1f:6b:36:ef:bf:3d: 37:7d:27:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEEoctXn4TzQtJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk N2M5OThkMTYtNjc3MS00NjVhLWE4YmEtNTRhNTA4Mjc2NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32aKBhBU/G2KhA5mMPLGAyZo/GHOFwBGFP7z ArMn4Vhv2CV8grDYlOMbLQJKPKcFgFiIbCPiW/CrkrSaL2S7tX5tlcdknL/ElwaY VZ8IMovESMamQWWbtoBe3rgZle7u5u55T6anB5a7JOGj7Ff3OdwTfKQmPmcInXBZ kJo6s2zNeNQc0ZK9wtodIWdp5QNYAjfwsInQpvXBWPJacBODcD11NnU8a4806vvQ aKm++ftfNetscoHvRRyr3xhxYzXLoWpKULWlgLzn07/6f0AAWAG3LTRo6XEXuMCt DnaQJWX+eRwwEppeAk07Ih6MkzawA22U1bAAWgDaTg1tPUZ41QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWZRt7QzZIkp3nC4AR5QUnAQBhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMmIyNjgxZGYtYzZjNS0z Y2Y4LWIyZmEtYzVlOTAzNThlYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRhK7UVlheB3e6zbH87dqKXatXCXRDt5S8k1lQ4it0cmr6Vmm5wI9ln uuB2XQqIyLPQrbHSr5ik68vDDqbUYHMh8B+Kc/pWcRpbSLnAVFqtXHq4lS9Bi3gA YbhI0h4ZY29lgXRtbgDfxex0ACVZjymGTZtvSc3DaaFoR2IPj3oeq6Td5GBXkJrV UbhnWgE74IpA6OQUDGzKHyq1na/8BTcvQMaTNPLZG6LG2L48FCjpq9Sy3TUfaYdG K2dxaWmgRJgfYQ+HQb322WwWhM/dQ+CcUjW2+izZP98Ko7OMiw0jtNTPs2T1rZjH gbcxRy2S+F/fbjO6eB9rNu+/PTd9J+Q= -----END CERTIFICATE-----Generated at Mon Apr 28 12:37:47 2025 by rpki-client