$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/6dfabb17-4437-3c66-996a-7acc0579861a.roa File: 6dfabb17-4437-3c66-996a-7acc0579861a.roa (raw, json) Hash identifier: hiwSdJP4Mr+sK+Bg7TIbCTxAA4IwzsmRjGV7nIDMAbA= Subject key identifier: FE:9B:1D:52:A7:41:E1:A3:89:CC:87:F7:A8:56:78:43:49:A0:79:4C Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Certificate serial: 010D0C9F4328584A00DABF443EDDFC1350EE4180 Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/6dfabb17-4437-3c66-996a-7acc0579861a.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 16509 IP address blocks: 74.200.119.0/24 maxlen: 24 74.200.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:bf:44:3e:dd:fc:13:50:ee:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=c6e193dc-b94c-4b5a-ac28-1bbc00a821a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:49:c0:8d:56:e4:29:33:f8:a3:da:5a:cf:9f: eb:45:bb:79:eb:e5:90:4a:d5:d0:e8:e2:a1:ec:7b: ad:36:85:ad:15:85:00:3e:fb:64:08:cb:8a:76:80: 29:1a:3b:22:51:71:e2:3b:5a:d4:14:e0:af:21:11: 5a:f7:a6:c7:58:f0:ec:ab:a9:55:04:48:8d:8e:d7: ca:71:d8:07:58:19:15:f5:c9:09:8e:9f:3a:f0:11: c0:35:34:3a:e9:77:80:20:51:c7:66:58:24:a2:d8: ff:f7:60:12:fa:35:6a:6d:b1:7d:a7:9c:dd:cd:53: b3:2c:9a:67:67:95:26:ef:32:30:46:37:cd:32:4f: 90:18:30:cf:23:80:ce:18:b2:ed:43:af:b6:56:f4: 05:78:48:93:aa:d8:e1:48:7a:f2:27:07:c3:2b:c3: 5d:43:17:c8:a0:5b:4a:1b:30:6b:b9:b6:96:93:c0: 19:ae:b2:20:9c:78:9c:98:bb:0f:92:a9:5e:b7:71: 3c:36:83:ca:40:6d:0a:60:cd:75:e0:6c:44:da:c9: 14:83:61:c9:80:67:d9:26:4c:6a:88:bd:1b:7a:25: be:ef:06:e6:3d:f2:0f:2f:3f:3e:33:5c:f2:83:61: 8f:ad:e6:2a:f8:69:b3:35:5c:73:f1:fc:cf:c6:d5: 94:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9B:1D:52:A7:41:E1:A3:89:CC:87:F7:A8:56:78:43:49:A0:79:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/6dfabb17-4437-3c66-996a-7acc0579861a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl X509v3 Authority Key Identifier: keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer sbgp-ipAddrBlock: critical IPv4: 74.200.119.0-74.200.120.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8a:9e:9d:8f:94:8f:03:27:72:ce:3d:62:8b:c3:38:dc:70: 5e:48:76:ed:0f:10:a2:e7:62:7a:db:ec:4e:24:c0:2e:0a:55: f3:2b:38:8f:44:51:60:a9:63:45:26:ec:95:e2:85:ed:ae:82: 1c:5d:40:d6:ea:4c:75:39:a5:84:7e:a0:7d:f9:7e:25:a5:51: 76:2d:48:37:3d:ac:cc:5c:44:4c:09:c9:bf:48:2b:22:65:a4: f0:d7:29:2e:4e:c7:2d:b5:cb:38:0a:26:4e:7d:b3:fd:d9:eb: d6:66:07:8c:30:93:97:e1:dc:f7:7d:30:3a:e0:8c:15:4b:aa: 9b:f3:5a:27:d6:c9:ac:82:e3:a7:49:45:6c:ea:2c:d9:67:63: 24:1b:cd:cb:4d:92:40:2a:4c:73:d9:74:12:74:d1:9a:49:7e: 22:57:9f:73:27:93:7a:82:40:5c:f1:95:73:8a:30:d6:2a:c2: ce:7f:88:de:c6:a3:ac:67:68:ef:63:99:ee:16:63:16:58:af: 4c:0f:9e:f9:39:f3:d2:f5:04:20:4d:ed:09:6c:c2:19:90:2a: 51:20:b9:73:05:16:8f:62:53:39:0a:1e:54:3e:84:5c:15:ae: bc:42:81:e2:34:61:bb:2d:31:ad:4a:45:33:c4:16:4e:e5:4b: b5:31:06:27 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEoA2r9EPt38E1DuQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1 OWZkMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YzZlMTkzZGMtYjk0Yy00YjVhLWFjMjgtMWJiYzAwYTgyMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUnAjVbkKTP4o9paz5/rRbt56+WQStXQ6OKh 7HutNoWtFYUAPvtkCMuKdoApGjsiUXHiO1rUFOCvIRFa96bHWPDsq6lVBEiNjtfK cdgHWBkV9ckJjp868BHANTQ66XeAIFHHZlgkotj/92AS+jVqbbF9p5zdzVOzLJpn Z5Um7zIwRjfNMk+QGDDPI4DOGLLtQ6+2VvQFeEiTqtjhSHryJwfDK8NdQxfIoFtK GzBrubaWk8AZrrIgnHicmLsPkqlet3E8NoPKQG0KYM114GxE2skUg2HJgGfZJkxq iL0beiW+7wbmPfIPLz8+M1zyg2GPreYq+GmzNVxz8fzPxtWUKwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP6bHVKnQeGjicyH96hWeENJoHlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFj NGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvNmRmYWJiMTctNDQzNy0z YzY2LTk5NmEtN2FjYzA1Nzk4NjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxYzRkMjAtNWI1Yi00MDczLTgz YjctNTI5YTgyYzE1OWZkL2RmMWM0ZDIwLTViNWItNDA3My04M2I3LTUyOWE4MmMx NTlmZC5jcmwwHwYDVR0jBBgwFoAUNrw0KynM+RarIlemQ3NzemhZ61cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01Mjlh ODJjMTU5ZmQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABKyHcD BABKyHgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAU4qenY+UjwMncs49YovDONxwXkh27Q8QoudietvsTiTA LgpV8ys4j0RRYKljRSbsleKF7a6CHF1A1upMdTmlhH6gffl+JaVRdi1INz2szFxE TAnJv0grImWk8NcpLk7HLbXLOAomTn2z/dnr1mYHjDCTl+Hc930wOuCMFUuqm/Na J9bJrILjp0lFbOos2WdjJBvNy02SQCpMc9l0EnTRmkl+IlefcyeTeoJAXPGVc4ow 1irCzn+I3sajrGdo72OZ7hZjFlivTA+e+Tnz0vUEIE3tCWzCGZAqUSC5cwUWj2JT OQoeVD6EXBWuvEKB4jRhuy0xrUpFM8QWTuVLtTEGJw== -----END CERTIFICATE-----Generated at Sat Jun 14 19:03:00 2025 by rpki-client