$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/a3bf2cc9-4b50-3b84-b8a4-708a744f3f84.roa File: a3bf2cc9-4b50-3b84-b8a4-708a744f3f84.roa (raw, json) Hash identifier: LdH7t0dXsao3nIC5FmRnsi6MdoGjkPoQlzWUbt0/0mw= Subject key identifier: 4F:9B:52:20:BB:EF:86:57:3D:FE:BF:88:F4:8E:E2:96:76:25:D8:A5 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F43285849A00B1FFA34C88BFDF913EF80 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/a3bf2cc9-4b50-3b84-b8a4-708a744f3f84.roa Signing time: Wed 23 Apr 2025 20:45:35 +0000 ROA not before: Wed 23 Apr 2025 20:45:35 +0000 ROA not after: Tue 22 Jul 2025 20:45:35 +0000 asID: 399575 IP address blocks: 74.85.208.0/20 maxlen: 20 74.85.208.0/24 maxlen: 24 74.85.209.0/24 maxlen: 24 74.85.210.0/23 maxlen: 23 74.85.212.0/23 maxlen: 23 74.85.214.0/23 maxlen: 23 74.85.216.0/23 maxlen: 23 74.85.218.0/23 maxlen: 23 74.85.220.0/23 maxlen: 23 74.85.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:0b:1f:fa:34:c8:8b:fd:f9:13:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Apr 23 20:45:35 2025 GMT Not After : Jul 22 20:45:35 2025 GMT Subject: CN=8e85eac4-97c8-43f2-b9b9-9bde15b71314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:94:e5:a4:b1:59:e6:fa:3e:e6:b0:00:85:98: 5c:40:b2:06:db:ae:03:28:7f:3e:f4:af:ed:bf:89: cb:9c:b5:b2:a1:d9:9c:71:fd:88:b8:e5:ed:43:65: cc:b7:79:69:e4:1a:c8:e4:00:3c:0b:f5:f7:eb:bd: 8b:c7:51:fb:3e:35:77:12:df:61:7a:0e:ef:46:5d: 79:ff:43:b0:cf:e9:78:05:a2:f0:f5:e1:9d:b8:78: c3:6f:e9:06:b7:85:16:f9:05:0e:8c:8a:d1:78:0b: 66:df:e3:8d:ce:21:f5:8a:5a:18:a2:42:14:92:16: ee:df:da:1e:ed:a7:88:01:91:3b:d3:b9:f8:88:50: 03:9b:97:78:54:f0:7a:39:80:0a:7e:25:52:86:51: 22:44:cc:05:5f:24:81:34:52:e9:13:98:44:54:4b: df:51:2a:df:a8:cf:b5:7d:29:67:bd:87:17:34:09: 1b:3a:8a:9a:42:91:5c:26:12:6c:5f:69:38:3a:74: cf:90:f1:cf:5f:7b:d9:9d:6a:a0:fb:c6:50:35:68: e0:f7:63:45:59:f6:02:c5:6c:e5:88:7b:c7:21:da: 53:f4:b7:af:f6:1b:92:87:93:a1:68:47:57:97:e6: 72:8a:3a:9d:8a:90:9a:4c:c9:c2:7b:c3:2f:38:01: a2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9B:52:20:BB:EF:86:57:3D:FE:BF:88:F4:8E:E2:96:76:25:D8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/a3bf2cc9-4b50-3b84-b8a4-708a744f3f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 74.85.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:11:d5:14:62:24:d4:61:01:ee:81:15:79:88:39:6b:61:6e: 3c:02:41:86:b3:fa:de:41:7e:7f:f8:f9:ea:40:4c:c7:c7:e8: 6d:b2:ac:c4:2a:8f:40:2f:49:39:c0:13:25:00:39:03:dd:a3: fd:84:28:39:5d:5d:e9:23:aa:cf:1c:63:3e:48:11:78:aa:0d: 4a:a4:d0:a0:d7:0a:4b:7a:36:23:9e:fc:27:6a:71:f0:80:a6: 87:15:10:72:72:3e:aa:fd:30:38:c4:26:8c:cf:0c:b5:ba:6d: 88:08:c5:7a:bd:82:41:7e:6c:2d:99:04:f7:94:b7:f7:cc:84: 30:cb:ad:bf:02:aa:e1:3d:f6:74:a7:0f:2d:8c:a9:31:b1:f0: 63:25:47:86:a8:81:86:40:f9:a6:9c:89:6f:e1:bf:d9:a6:1e: e3:1f:25:bc:ca:b4:d6:86:d1:3a:33:3b:31:0d:db:59:35:a4: b4:e5:22:0c:64:73:7b:16:60:da:19:4f:aa:e7:09:ba:2e:a4: 04:72:5c:fd:1e:9b:f6:fc:a2:b6:54:f1:a2:6a:42:24:9e:15: d8:86:42:83:72:1a:f7:28:fd:f0:43:7c:c9:17:9d:dd:65:80: a6:29:05:2f:4f:48:41:87:13:fc:08:4a:51:c7:89:04:79:22: 11:9c:24:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgCx/6NMiL/fkT74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDQyMzIwNDUzNVoXDTI1MDcyMjIwNDUzNVowLzEtMCsGA1UEAxMk OGU4NWVhYzQtOTdjOC00M2YyLWI5YjktOWJkZTE1YjcxMzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZTlpLFZ5vo+5rAAhZhcQLIG264DKH8+9K/t v4nLnLWyodmccf2IuOXtQ2XMt3lp5BrI5AA8C/X3672Lx1H7PjV3Et9heg7vRl15 /0Owz+l4BaLw9eGduHjDb+kGt4UW+QUOjIrReAtm3+ONziH1iloYokIUkhbu39oe 7aeIAZE707n4iFADm5d4VPB6OYAKfiVShlEiRMwFXySBNFLpE5hEVEvfUSrfqM+1 fSlnvYcXNAkbOoqaQpFcJhJsX2k4OnTPkPHPX3vZnWqg+8ZQNWjg92NFWfYCxWzl iHvHIdpT9Lev9huSh5OhaEdXl+ZyijqdipCaTMnCe8MvOAGijQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+bUiC774ZXPf6/iPSO4pZ2JdilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYTNiZjJjYzktNGI1MC0z Yjg0LWI4YTQtNzA4YTc0NGYzZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESlXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwR1RRiJNRhAe6BFXmIOWthbjwCQYaz+t5Bfn/4+epATMfH6G2yrMQq j0AvSTnAEyUAOQPdo/2EKDldXekjqs8cYz5IEXiqDUqk0KDXCkt6NiOe/CdqcfCA pocVEHJyPqr9MDjEJozPDLW6bYgIxXq9gkF+bC2ZBPeUt/fMhDDLrb8CquE99nSn Dy2MqTGx8GMlR4aogYZA+aaciW/hv9mmHuMfJbzKtNaG0TozOzEN21k1pLTlIgxk c3sWYNoZT6rnCboupARyXP0em/b8orZU8aJqQiSeFdiGQoNyGvco/fBDfMkXnd1l gKYpBS9PSEGHE/wISlHHiQR5IhGcJKU= -----END CERTIFICATE-----Generated at Tue Apr 29 16:21:25 2025 by rpki-client