$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/945146cc-65ed-36a2-ae21-a4c8ad11e413.roa File: 945146cc-65ed-36a2-ae21-a4c8ad11e413.roa (raw, json) Hash identifier: XHlqKGl7j0MtG/gyPKWbU0jquyFzb7WubaprJlzU+0k= Subject key identifier: 0C:FB:C8:32:95:58:5D:F8:FF:4F:50:3F:61:F7:9D:D3:0A:81:FA:89 Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6CCCF95483A900C9BF220 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/945146cc-65ed-36a2-ae21-a4c8ad11e413.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 15290 IP address blocks: 74.216.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:cc:cf:95:48:3a:90:0c:9b:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=aa4e705e-5ddd-4c44-92a7-a8565eafa2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:43:4c:bc:b7:06:83:cd:e2:21:99:64:b4:8e: 27:86:20:e7:75:bc:83:23:05:a4:ad:4f:a8:6d:0a: 0e:82:db:df:2c:8e:70:52:95:28:de:34:e0:c4:4c: 4e:9b:05:ea:77:c1:a9:be:68:4d:0e:78:00:8a:88: 5b:1d:7e:da:49:cd:70:f3:e8:50:cb:a3:23:57:3b: b8:4b:3d:31:3f:7e:ee:a1:9b:0a:d1:96:ec:c2:82: 96:ba:a5:0b:8f:40:52:13:c6:cf:b7:95:8d:b8:8b: 5d:e5:7d:c3:92:a5:71:e6:80:a4:48:bd:b1:49:c6: b8:c8:d8:0e:16:25:3d:8e:a4:7b:17:7d:de:f7:b7: 57:dd:cb:90:cb:f5:41:5c:78:a0:ec:c7:7b:9f:a4: 48:21:05:d4:e3:3e:28:d3:0d:76:81:72:d0:59:14: 31:fe:88:bf:2e:63:66:24:51:1e:36:23:93:be:5f: b4:78:37:25:58:4b:bb:7f:e4:ba:9b:98:23:08:1e: 07:7c:be:2a:a9:8a:fe:83:47:53:94:82:f5:60:19: 24:58:86:66:42:0b:90:64:1e:2f:06:93:60:75:eb: 52:15:7f:cc:95:3c:29:43:02:08:0b:9a:e0:00:6d: 9d:7b:d4:de:1d:9b:07:05:a8:d1:b0:d3:12:c8:2d: 4a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FB:C8:32:95:58:5D:F8:FF:4F:50:3F:61:F7:9D:D3:0A:81:FA:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/945146cc-65ed-36a2-ae21-a4c8ad11e413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv4: 74.216.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c7:d3:b9:c2:0f:97:b3:fd:d2:c0:9b:00:44:48:10:bb:c7: 67:c8:34:cc:e5:ed:0d:b4:db:d8:3d:97:d4:85:de:3e:99:30: 97:10:db:72:09:88:04:20:ca:3a:17:1b:2e:86:50:46:a5:bf: 11:d4:7b:2c:d3:d3:0a:91:3c:0f:ed:1d:c4:c3:1b:31:c5:ab: 05:be:82:7f:57:f1:cb:56:ed:b2:b1:95:5a:8a:1d:d7:cd:78: 4e:63:67:e6:b1:ca:6e:8b:35:55:c7:82:7e:33:1c:2b:3c:31: 29:13:3c:08:c3:7c:4c:79:5d:32:5a:39:5d:85:f5:4a:6d:3f: e2:ea:43:9e:f0:68:99:d1:92:43:a8:14:be:5a:f2:52:a9:af: 17:d5:2f:57:cd:6f:f4:af:b2:26:78:d6:03:c1:f3:78:e4:c3: 95:c3:56:72:19:bd:e3:a0:3c:3b:9c:d0:a4:12:f1:5b:94:95: 34:0e:3b:b9:72:7a:f0:36:2b:28:17:5b:ed:fc:5a:1a:ae:fc: e7:f1:bf:e7:e1:4e:98:0c:0a:e5:89:a4:d7:53:4b:fd:11:5a: 02:a9:9b:b0:3c:7d:4d:75:cf:4b:36:a1:ef:cc:1a:e8:84:39: 1e:81:1f:2f:3e:64:45:d2:89:aa:c1:7e:31:0f:3c:d9:37:6f: f8:1e:2e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapszPlUg6kAyb8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YWE0ZTcwNWUtNWRkZC00YzQ0LTkyYTctYTg1NjVlYWZhMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhENMvLcGg83iIZlktI4nhiDndbyDIwWkrU+o bQoOgtvfLI5wUpUo3jTgxExOmwXqd8GpvmhNDngAiohbHX7aSc1w8+hQy6MjVzu4 Sz0xP37uoZsK0ZbswoKWuqULj0BSE8bPt5WNuItd5X3DkqVx5oCkSL2xSca4yNgO FiU9jqR7F33e97dX3cuQy/VBXHig7Md7n6RIIQXU4z4o0w12gXLQWRQx/oi/LmNm JFEeNiOTvl+0eDclWEu7f+S6m5gjCB4HfL4qqYr+g0dTlIL1YBkkWIZmQguQZB4v BpNgdetSFX/MlTwpQwIIC5rgAG2de9TeHZsHBajRsNMSyC1KGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz7yDKVWF34/09QP2H3ndMKgfqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvOTQ1MTQ2Y2MtNjVlZC0z NmEyLWFlMjEtYTRjOGFkMTFlNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASthvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrH07nCD5ez/dLAmwBESBC7x2fINMzl7Q2029g9l9SF3j6ZMJcQ23IJ iAQgyjoXGy6GUEalvxHUeyzT0wqRPA/tHcTDGzHFqwW+gn9X8ctW7bKxlVqKHdfN eE5jZ+axym6LNVXHgn4zHCs8MSkTPAjDfEx5XTJaOV2F9UptP+LqQ57waJnRkkOo FL5a8lKprxfVL1fNb/SvsiZ41gPB83jkw5XDVnIZveOgPDuc0KQS8VuUlTQOO7ly evA2KygXW+38Whqu/Ofxv+fhTpgMCuWJpNdTS/0RWgKpm7A8fU11z0s2oe/MGuiE OR6BHy8+ZEXSiarBfjEPPNk3b/geLmU= -----END CERTIFICATE-----Generated at Sun Apr 27 16:05:43 2025 by rpki-client