$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/6c921613-8127-36b7-a11e-66ef6fa49a0a.roa File: 6c921613-8127-36b7-a11e-66ef6fa49a0a.roa (raw, json) Hash identifier: s36RqCXITOEJgKwuxhm8hXKrEuNYpjCmGjoaYRVc7HU= Subject key identifier: ED:8D:81:4A:ED:EC:DF:CB:0B:42:24:E6:6E:5E:0D:7F:E2:6C:32:22 Certificate issuer: /CN=f90be2e1-b57b-4e04-bd16-0b4a08488878 Certificate serial: 010D0C9F4328584A07D52B37CAD12299BD6D6540 Authority key identifier: 0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/6c921613-8127-36b7-a11e-66ef6fa49a0a.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 32161 IP address blocks: 74.119.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2b:37:ca:d1:22:99:bd:6d:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90be2e1-b57b-4e04-bd16-0b4a08488878 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=e57cfa60-efd8-4bfa-a79f-dd569d4f5d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:22:4f:ee:f8:22:96:f2:69:5e:97:f4:fa:aa: f5:9c:66:37:e8:3d:c2:d4:f9:85:57:13:65:f6:06: f8:89:10:12:67:e6:57:f9:8b:cf:07:57:23:00:28: 31:74:10:ec:cd:ac:50:55:52:00:af:af:cd:e5:14: 1e:0c:ed:a8:c4:78:10:e5:59:1f:50:6a:c8:50:34: cf:94:1e:af:f8:e3:f9:9d:a4:71:58:c7:08:4b:39: 35:a9:df:25:b1:aa:dc:f7:6d:53:14:ce:59:17:57: 80:46:26:44:ed:9f:95:4c:03:c7:54:9d:78:37:c9: 84:75:c0:52:c4:fd:cb:71:51:d7:68:63:d6:0a:c3: 3f:d6:bb:00:40:73:48:ce:8c:4f:a9:e9:69:fc:ba: c6:2c:54:6c:0c:8d:c6:40:5b:76:33:79:9c:af:6d: 9e:e7:44:9a:93:ee:9b:d3:44:bd:ab:fb:a0:7d:a1: 1f:70:bb:b5:8c:50:6f:92:b1:68:87:41:73:ed:69: cb:d5:a9:2c:e7:d0:74:e8:a7:81:e2:cf:ac:a0:38: 73:6d:b2:7a:1d:1e:0b:c1:0e:0b:35:b9:74:50:27: 4c:b9:23:8b:35:02:4f:a1:f4:83:04:58:0d:cc:22: 70:20:61:b5:f2:9d:2a:c8:e7:b5:95:97:f2:b6:da: 58:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8D:81:4A:ED:EC:DF:CB:0B:42:24:E6:6E:5E:0D:7F:E2:6C:32:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/6c921613-8127-36b7-a11e-66ef6fa49a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.crl X509v3 Authority Key Identifier: keyid:0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer sbgp-ipAddrBlock: critical IPv4: 74.119.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ba:e4:74:6e:13:93:47:32:44:f5:6d:88:92:f3:b1:cc:11: 6b:b5:3d:cf:79:d5:69:b0:e9:d3:e0:5b:0b:f4:54:3b:17:3c: 80:12:07:42:48:3d:4c:e6:90:82:6a:23:3b:83:19:4f:2a:4b: be:bb:ac:a8:3d:fa:f3:3e:d7:06:7b:98:6d:93:4d:a5:61:5e: 2a:07:97:1c:fc:d9:e1:82:99:4b:55:4a:ad:2a:48:54:52:14: 56:1f:ce:9e:e2:78:b7:34:1c:72:0f:2e:6a:e4:47:70:d2:4d: df:03:cf:7a:29:4e:e8:70:f5:33:03:2a:f2:da:1c:1d:dd:ea: 6b:48:c8:59:ff:30:3f:95:ae:22:12:05:14:00:84:06:ec:f7: 6e:ca:34:91:f3:b9:eb:27:44:32:ea:aa:e7:da:18:8a:33:df: 34:b0:4c:93:34:1b:9d:eb:f6:02:45:1d:d3:5a:a7:5f:6d:36: ad:93:2d:0f:4d:2f:a0:a5:64:c7:0a:c3:26:b3:5c:9e:e7:d9: 2d:e1:98:2f:37:84:e6:5f:e0:9d:01:5f:18:8b:54:e8:8b:20: 19:d7:b8:be:5e:6a:26:d2:5f:fb:fa:75:c9:f6:f9:05:3c:ea: 18:85:12:a4:fe:28:12:f0:d4:26:f9:a2:6a:09:40:e6:53:ba: 77:b3:03:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1Ss3ytEimb1tZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjkwYmUyZTEtYjU3Yi00ZTA0LWJkMTYtMGI0YTA4NDg4 ODc4MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZTU3Y2ZhNjAtZWZkOC00YmZhLWE3OWYtZGQ1NjlkNGY1ZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCJP7vgilvJpXpf0+qr1nGY36D3C1PmFVxNl 9gb4iRASZ+ZX+YvPB1cjACgxdBDszaxQVVIAr6/N5RQeDO2oxHgQ5VkfUGrIUDTP lB6v+OP5naRxWMcISzk1qd8lsarc921TFM5ZF1eARiZE7Z+VTAPHVJ14N8mEdcBS xP3LcVHXaGPWCsM/1rsAQHNIzoxPqelp/LrGLFRsDI3GQFt2M3mcr22e50Sak+6b 00S9q/ugfaEfcLu1jFBvkrFoh0Fz7WnL1aks59B06KeB4s+soDhzbbJ6HR4LwQ4L Nbl0UCdMuSOLNQJPofSDBFgNzCJwIGG18p0qyOe1lZfyttpYVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2NgUrt7N/LC0Ik5m5eDX/ibDIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTBi ZTJlMS1iNTdiLTRlMDQtYmQxNi0wYjRhMDg0ODg4NzgvNmM5MjE2MTMtODEyNy0z NmI3LWExMWUtNjZlZjZmYTQ5YTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjkwYmUyZTEtYjU3Yi00ZTA0LWJk MTYtMGI0YTA4NDg4ODc4L2Y5MGJlMmUxLWI1N2ItNGUwNC1iZDE2LTBiNGEwODQ4 ODg3OC5jcmwwHwYDVR0jBBgwFoAUDkjkwy7AO1HuS5tunGDBUoUbeI8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTBiZTJlMS1iNTdiLTRlMDQtYmQxNi0wYjRh MDg0ODg4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASncfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKK65HRuE5NHMkT1bYiS87HMEWu1Pc951Wmw6dPgWwv0VDsXPIASB0JI PUzmkIJqIzuDGU8qS767rKg9+vM+1wZ7mG2TTaVhXioHlxz82eGCmUtVSq0qSFRS FFYfzp7ieLc0HHIPLmrkR3DSTd8Dz3opTuhw9TMDKvLaHB3d6mtIyFn/MD+VriIS BRQAhAbs927KNJHzuesnRDLqqufaGIoz3zSwTJM0G53r9gJFHdNap19tNq2TLQ9N L6ClZMcKwyazXJ7n2S3hmC83hOZf4J0BXxiLVOiLIBnXuL5eaibSX/v6dcn2+QU8 6hiFEqT+KBLw1Cb5omoJQOZTunezA1c= -----END CERTIFICATE-----Generated at Sun Jun 15 15:41:36 2025 by rpki-client