$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/25942820-2287-398f-ae47-ec5cbf6917de.roa File: 25942820-2287-398f-ae47-ec5cbf6917de.roa (raw, json) Hash identifier: SQNekr8WEYZ2hZupzndFZs1ATQPlbaPmuTkKiycg6Kg= Subject key identifier: 51:C5:46:7A:B2:09:61:7A:F6:F5:28:00:C6:46:D6:8B:6A:93:B9:45 Certificate issuer: /CN=5bab7542-1747-4199-9e18-f75a006e302e Certificate serial: 010D0C9F4328584993F9DE967223EAC2AA384890 Authority key identifier: 51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/25942820-2287-398f-ae47-ec5cbf6917de.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 7018 IP address blocks: 74.113.28.0/22 maxlen: 22 199.255.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:de:96:72:23:ea:c2:aa:38:48:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bab7542-1747-4199-9e18-f75a006e302e Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=f3d1a016-b97a-44ef-9ca1-2ec02090393b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:da:e5:e5:40:5d:ef:00:49:b7:ec:53:09: 11:a9:be:f0:a3:00:b4:28:b6:7c:a7:a9:2b:3a:88: 0c:6f:fb:17:4e:61:9a:4e:7c:bd:5b:ab:1b:6a:6e: a7:53:48:3d:8a:3a:12:0d:53:7e:58:14:d8:2f:94: 81:c1:40:00:e8:f9:b2:a9:47:c6:b0:43:b8:b1:fd: 05:17:44:05:65:f1:15:c7:fd:f6:be:c2:92:c4:d7: cf:d1:81:25:5e:c5:cc:f4:9e:93:59:2b:91:59:da: 75:b1:96:39:7b:2c:22:03:28:af:3f:e0:3f:05:5f: fc:fd:ce:94:32:e8:47:1d:8b:00:14:35:33:6a:81: 55:da:26:4f:a4:26:25:16:b0:17:c0:c4:a5:21:63: be:5e:7a:9e:01:0d:cb:cf:c7:15:94:71:d0:4d:f4: 1c:69:c8:10:9b:dd:ad:c4:1b:8d:cf:18:58:79:7f: f4:52:70:e0:28:65:eb:cc:71:9f:ca:ec:c2:13:b3: 95:aa:c7:e2:b4:81:7e:fd:74:c8:87:38:72:78:e3: 6b:6c:42:8c:b6:5b:c1:a7:b3:05:58:c2:db:ba:53: 0d:ed:64:1f:63:a2:e3:2e:27:8b:dc:d4:00:6e:66: df:6a:39:20:3e:97:dd:09:d7:3e:08:47:06:5a:39: 06:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C5:46:7A:B2:09:61:7A:F6:F5:28:00:C6:46:D6:8B:6A:93:B9:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/25942820-2287-398f-ae47-ec5cbf6917de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl X509v3 Authority Key Identifier: keyid:51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer sbgp-ipAddrBlock: critical IPv4: 74.113.28.0/22 199.255.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:33:12:63:ee:15:35:78:d0:8c:fc:48:0e:0e:55:2e:74:8d: e8:57:29:70:d1:c4:86:9a:8b:a5:c0:da:b9:05:ee:f6:7c:85: 34:58:2c:b1:c8:87:55:9e:c5:77:3d:60:84:fc:24:b2:94:be: 54:b8:9c:e0:a2:b2:f5:30:41:e0:ab:2a:0f:e8:0b:2d:64:8d: 74:80:07:cb:c9:a6:69:72:4e:5e:d5:f6:70:db:14:00:eb:d8: c3:03:1e:53:cd:e5:93:dd:5e:13:a1:13:ce:c1:f4:85:96:d7: 68:82:a4:87:22:5f:26:ff:2f:05:60:4b:70:9e:ee:b1:99:da: b6:e2:bf:c3:87:f4:f7:ac:23:d2:9e:57:0c:f2:6c:e5:68:86: b7:86:02:82:cd:97:89:e9:60:75:c1:98:5f:38:c0:b9:43:21: 3b:ff:7a:44:51:6e:74:13:77:d5:59:73:e0:32:25:e5:de:1e: b2:74:86:07:51:55:af:54:a6:d7:8b:26:e5:93:c6:53:8d:5b: 12:8d:c6:3e:57:27:f6:23:75:a0:0b:05:1b:15:43:8e:c4:e2: d9:5e:79:78:99:c6:2d:86:6a:2d:c6:9d:23:85:d6:f3:85:53: 46:59:ef:18:0f:4e:1e:bc:34:07:ab:f0:1d:95:b5:d5:65:18: df:c5:dd:30 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmT+d6WciPqwqo4SJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhYjc1NDItMTc0Ny00MTk5LTllMTgtZjc1YTAwNmUz MDJlMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZjNkMWEwMTYtYjk3YS00NGVmLTljYTEtMmVjMDIwOTAzOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoHa5eVAXe8ASbfsUwkRqb7wowC0KLZ8p6kr OogMb/sXTmGaTny9W6sbam6nU0g9ijoSDVN+WBTYL5SBwUAA6PmyqUfGsEO4sf0F F0QFZfEVx/32vsKSxNfP0YElXsXM9J6TWSuRWdp1sZY5eywiAyivP+A/BV/8/c6U MuhHHYsAFDUzaoFV2iZPpCYlFrAXwMSlIWO+XnqeAQ3Lz8cVlHHQTfQcacgQm92t xBuNzxhYeX/0UnDgKGXrzHGfyuzCE7OVqsfitIF+/XTIhzhyeONrbEKMtlvBp7MF WMLbulMN7WQfY6LjLieL3NQAbmbfajkgPpfdCdc+CEcGWjkG+wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFHFRnqyCWF69vUoAMZG1otqk7lFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YmFi NzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVhMDA2ZTMwMmUvMjU5NDI4MjAtMjI4Ny0z OThmLWFlNDctZWM1Y2JmNjkxN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWJhYjc1NDItMTc0Ny00MTk5LTll MTgtZjc1YTAwNmUzMDJlLzViYWI3NTQyLTE3NDctNDE5OS05ZTE4LWY3NWEwMDZl MzAyZS5jcmwwHwYDVR0jBBgwFoAUUXlNT8KpFFBQAxgiaW5bGa42yxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YmFiNzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVh MDA2ZTMwMmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSnEcAwQC x//sMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHQzEmPuFTV40Iz8SA4OVS50jehXKXDRxIaai6XA2rkF7vZ8 hTRYLLHIh1WexXc9YIT8JLKUvlS4nOCisvUwQeCrKg/oCy1kjXSAB8vJpmlyTl7V 9nDbFADr2MMDHlPN5ZPdXhOhE87B9IWW12iCpIciXyb/LwVgS3Ce7rGZ2rbiv8OH 9PesI9KeVwzybOVohreGAoLNl4npYHXBmF84wLlDITv/ekRRbnQTd9VZc+AyJeXe HrJ0hgdRVa9UpteLJuWTxlONWxKNxj5XJ/YjdaALBRsVQ47E4tleeXiZxi2Gai3G nSOF1vOFU0ZZ7xgPTh68NAer8B2VtdVlGN/F3TA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:14 2025 by rpki-client