$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa File: ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa (raw, json) Hash identifier: bTbJQO69YNI0fyPOM3/hq5Ic07zcxvpL2XayNEenPbI= Subject key identifier: 77:D1:E8:36:A0:7D:0C:92:AE:6F:19:E6:10:47:32:3D:12:8E:34:75 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F43285849552950B154988DA260095680 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 74.126.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:50:b1:54:98:8d:a2:60:09:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=1e3c9f5b-2d63-4354-8121-436dc2ba1043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:ce:ad:be:79:f3:29:d3:9a:ae:8a:fe:04: 31:c8:12:3d:36:9c:09:95:0e:c6:66:bf:fd:48:ac: da:ea:66:71:14:6f:c5:11:0d:63:28:90:c2:c4:e8: f6:f8:7e:31:57:82:0c:54:9f:d0:55:d3:83:5a:4b: 03:58:2b:36:e3:ab:fa:e0:be:7f:53:8d:a4:71:c0: 8b:29:ff:11:27:5e:5e:26:bd:df:09:a7:84:f4:d1: d4:1d:0c:7b:74:2d:03:f4:8e:cc:4b:a6:5e:7f:f8: 8a:01:3b:79:92:51:89:1e:48:36:a0:cc:10:16:68: a1:35:c2:18:06:e1:07:24:df:77:ba:63:37:a1:a0: a5:11:f2:b0:7b:c3:a2:ec:cf:d8:fe:08:b8:65:83: 8b:92:7e:7b:7d:20:13:f0:7e:61:c8:42:ef:6f:f9: 64:d6:12:13:6d:3a:5e:cd:67:e7:7b:de:3c:b7:54: 3c:00:67:c4:44:12:a7:66:c4:75:89:04:ca:f3:62: f4:44:c7:46:57:c1:dd:cd:3d:f0:f9:71:ab:e3:97: a6:ce:e3:4f:aa:89:8a:b1:c8:6b:f6:22:4a:0e:3c: 34:f8:b8:b7:bb:88:d4:9c:19:55:d9:29:dc:86:fc: a3:02:e8:6c:69:54:4b:dc:a7:4f:d3:34:76:54:00: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D1:E8:36:A0:7D:0C:92:AE:6F:19:E6:10:47:32:3D:12:8E:34:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/ac3fba6e-34d0-3467-9a92-b8b2f0ecd7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 74.126.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4b:da:a0:0b:0b:9a:d6:d4:f8:5c:e9:00:58:dc:bd:b6:3c: 85:44:6f:4c:97:74:fd:50:dc:c1:e3:09:13:3c:f2:16:15:7c: 9f:7e:a9:33:52:f9:a2:73:3c:ab:f0:28:2f:57:68:ed:7a:b9: 7e:b8:19:ed:e1:51:35:35:ae:96:40:0f:92:c3:d2:ec:af:d7: 5e:3e:08:0f:2e:7d:a5:d1:1c:6b:99:a6:90:64:51:5f:72:b8: 66:b6:69:8b:9b:f5:a6:ac:28:2f:cd:30:2c:04:7c:f1:3b:1a: 79:0f:a2:8f:de:9b:31:f6:2a:30:5e:2e:21:8f:63:4b:3d:87: 96:99:68:79:bf:31:a0:31:f2:5c:7e:25:47:4d:a3:8a:8f:35: e7:fc:31:33:e0:55:d1:21:8a:f4:90:47:85:8b:83:c4:73:40: 39:90:33:fb:76:11:58:07:d5:96:2b:d9:83:39:31:28:20:95: ed:f9:a1:14:df:60:cb:9a:3c:a9:38:5e:fe:44:7f:11:a4:2b: ca:93:e8:0e:d2:48:44:9a:95:83:82:48:8b:a1:9a:3a:3a:8f: e3:45:27:95:7a:bf:ab:ed:38:40:1e:59:4a:b8:de:6f:32:28: 9c:24:16:d5:05:cb:fe:f8:4f:09:cb:8d:d3:d4:70:22:7d:28: a8:e1:0c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVCxVJiNomAJVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk MWUzYzlmNWItMmQ2My00MzU0LTgxMjEtNDM2ZGMyYmExMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfnOrb558ynTmq6K/gQxyBI9NpwJlQ7GZr/9 SKza6mZxFG/FEQ1jKJDCxOj2+H4xV4IMVJ/QVdODWksDWCs246v64L5/U42kccCL Kf8RJ15eJr3fCaeE9NHUHQx7dC0D9I7MS6Zef/iKATt5klGJHkg2oMwQFmihNcIY BuEHJN93umM3oaClEfKwe8Oi7M/Y/gi4ZYOLkn57fSAT8H5hyELvb/lk1hITbTpe zWfne948t1Q8AGfERBKnZsR1iQTK82L0RMdGV8HdzT3w+XGr45emzuNPqomKschr 9iJKDjw0+Li3u4jUnBlV2SnchvyjAuhsaVRL3KdP0zR2VACV3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfR6DagfQySrm8Z5hBHMj0SjjR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYWMzZmJhNmUtMzRkMC0z NDY3LTlhOTItYjhiMmYwZWNkN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSn5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9L2qALC5rW1Phc6QBY3L22PIVEb0yXdP1Q3MHjCRM88hYVfJ9+qTNS +aJzPKvwKC9XaO16uX64Ge3hUTU1rpZAD5LD0uyv114+CA8ufaXRHGuZppBkUV9y uGa2aYub9aasKC/NMCwEfPE7GnkPoo/emzH2KjBeLiGPY0s9h5aZaHm/MaAx8lx+ JUdNo4qPNef8MTPgVdEhivSQR4WLg8RzQDmQM/t2EVgH1ZYr2YM5MSggle35oRTf YMuaPKk4Xv5EfxGkK8qT6A7SSESalYOCSIuhmjo6j+NFJ5V6v6vtOEAeWUq43m8y KJwkFtUFy/74TwnLjdPUcCJ9KKjhDFc= -----END CERTIFICATE-----Generated at Wed Apr 30 00:14:36 2025 by rpki-client