$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa File: 4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa (raw, json) Hash identifier: TQPjUmQ54KNpSObMzssLDp33uLJZpfomM46tizASUJk= Subject key identifier: A2:5D:F6:C2:F1:19:E7:5B:B3:50:3E:78:F3:4E:98:F5:6C:3A:81:D8 Certificate issuer: /CN=3bb6068b-be48-4cc9-ad75-338daae24880 Certificate serial: 010D0C9F43285849CE9A5F221ABA8CF873D0D790 Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 399989 IP address blocks: 74.117.216.0/21 maxlen: 21 74.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:5f:22:1a:ba:8c:f8:73:d0:d7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=917c9999-09e0-4683-a05b-6fc21b58c937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:87:95:84:30:da:0e:d5:f0:3a:22:fd:b2:95: 07:d6:db:a2:d6:bd:71:44:c2:45:63:3f:36:85:ed: 3d:38:db:43:c9:75:b9:5e:24:49:31:4d:76:a8:04: f9:34:6e:50:11:af:d7:39:06:5f:ff:38:3d:98:fa: c9:fb:41:f5:97:45:16:1f:0c:0a:c4:0e:e4:80:ac: f3:e1:e1:c4:51:a0:e2:d5:89:ec:ee:07:fc:b5:b3: 65:f7:96:97:4c:68:34:53:6e:02:7b:db:a8:39:f6: c8:84:c3:00:65:e9:e3:cc:9a:a5:33:00:15:6c:95: 5c:d2:e1:ae:a0:0d:c7:fd:e3:ab:b8:1d:16:4b:8a: 35:03:31:7c:eb:b4:9c:e9:db:de:40:4f:ff:3c:3b: 22:6b:cc:63:77:6b:92:d3:b1:56:0d:4f:eb:95:1f: 5d:7a:02:f8:5f:09:1d:10:80:65:03:e4:71:0b:a9: f1:0c:43:d5:8f:4d:28:5d:ba:c6:7e:48:bf:2a:5c: cb:cd:bb:7c:62:d4:ff:a1:e3:8e:f5:8a:f1:fd:76: 10:35:1a:99:8f:ba:f7:3f:b9:4e:c1:4e:33:e6:12: 66:fa:c1:69:4e:8b:e0:ab:9d:64:58:df:b9:df:54: b2:e6:af:a0:73:e8:f9:5f:80:4a:ff:e6:79:2c:e2: 01:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5D:F6:C2:F1:19:E7:5B:B3:50:3E:78:F3:4E:98:F5:6C:3A:81:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/4a48e20a-0e29-3e1f-a81e-4a72b742e470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl X509v3 Authority Key Identifier: keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer sbgp-ipAddrBlock: critical IPv4: 74.117.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1a:47:18:a8:66:57:ad:5f:4a:2a:f6:c4:f5:da:fb:58:1c: 48:23:27:a4:e4:b4:c7:49:4e:f9:4d:dc:fa:d1:72:ec:c3:7b: 63:d6:39:8b:89:2d:d3:83:a3:1e:e4:af:6c:ee:aa:85:ec:dc: ba:76:fb:3c:3c:6d:ef:46:86:ed:ed:d4:a0:26:2c:38:58:7f: 15:b4:1a:55:3e:52:54:8e:4a:ef:45:e3:79:24:d8:64:aa:c3: a9:bb:3b:b1:c1:25:3c:58:db:20:db:32:f1:af:96:d9:7e:55: 02:2a:00:3a:07:b2:b5:3c:79:79:d3:aa:ab:33:a4:36:81:ee: b9:cc:67:1a:bf:3a:23:ae:07:f6:12:0a:db:aa:d4:f5:b7:44: 5d:74:56:1d:43:09:23:f1:4a:06:6a:80:fc:60:a1:75:5f:a4: 3c:a7:55:b9:18:9e:37:e2:3d:ab:65:d0:7c:ac:dd:69:d4:41: 86:48:6a:bf:91:8e:81:3f:32:42:4c:13:66:bb:a4:a3:7f:2e: 67:cb:58:b0:a0:08:2f:c7:e1:dd:d9:02:e5:25:21:84:3d:8c: 39:4d:31:99:9d:02:ac:3b:64:c1:1e:c3:1e:e1:cd:3d:43:da: 2e:8e:15:98:63:5a:ce:c1:4c:be:9b:ac:f2:cc:51:27:0d:1f: bb:2a:9d:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOml8iGrqM+HPQ15AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNjA2OGItYmU0OC00Y2M5LWFkNzUtMzM4ZGFhZTI0 ODgwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OTE3Yzk5OTktMDllMC00NjgzLWEwNWItNmZjMjFiNThjOTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IeVhDDaDtXwOiL9spUH1tui1r1xRMJFYz82 he09ONtDyXW5XiRJMU12qAT5NG5QEa/XOQZf/zg9mPrJ+0H1l0UWHwwKxA7kgKzz 4eHEUaDi1Yns7gf8tbNl95aXTGg0U24Ce9uoOfbIhMMAZenjzJqlMwAVbJVc0uGu oA3H/eOruB0WS4o1AzF867Sc6dveQE//PDsia8xjd2uS07FWDU/rlR9degL4Xwkd EIBlA+RxC6nxDEPVj00oXbrGfki/KlzLzbt8YtT/oeOO9Yrx/XYQNRqZj7r3P7lO wU4z5hJm+sFpTovgq51kWN+531Sy5q+gc+j5X4BK/+Z5LOIBoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJd9sLxGedbs1A+ePNOmPVsOoHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2 MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhkYWFlMjQ4ODAvNGE0OGUyMGEtMGUyOS0z ZTFmLWE4MWUtNGE3MmI3NDJlNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JiNjA2OGItYmU0OC00Y2M5LWFk NzUtMzM4ZGFhZTI0ODgwLzNiYjYwNjhiLWJlNDgtNGNjOS1hZDc1LTMzOGRhYWUy NDg4MC5jcmwwHwYDVR0jBBgwFoAUbtTxliCn6Jrv3X4Q6UKTgKaqUgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmI2MDY4Yi1iZTQ4LTRjYzktYWQ3NS0zMzhk YWFlMjQ4ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAaRxioZletX0oq9sT12vtYHEgjJ6TktMdJTvlN3PrRcuzDe2PWOYuJ LdODox7kr2zuqoXs3Lp2+zw8be9Ghu3t1KAmLDhYfxW0GlU+UlSOSu9F43kk2GSq w6m7O7HBJTxY2yDbMvGvltl+VQIqADoHsrU8eXnTqqszpDaB7rnMZxq/OiOuB/YS Ctuq1PW3RF10Vh1DCSPxSgZqgPxgoXVfpDynVbkYnjfiPatl0Hys3WnUQYZIar+R joE/MkJME2a7pKN/LmfLWLCgCC/H4d3ZAuUlIYQ9jDlNMZmdAqw7ZMEewx7hzT1D 2i6OFZhjWs7BTL6brPLMUScNH7sqnaw= -----END CERTIFICATE-----Generated at Sun Jun 15 20:03:18 2025 by rpki-client