$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa File: b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa (raw, json) Hash identifier: 6+nhFmof8Mc+p25AmnLAccC9BSuzjc/gB0MoTTCP6v0= Subject key identifier: F0:80:F5:0D:45:47:4D:01:92:C2:91:BD:79:2D:47:F0:45:27:59:D8 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F432858499AF487BEEF39E64F358DAF80 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 394437 IP address blocks: 74.124.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:87:be:ef:39:e6:4f:35:8d:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=fb32db5c-cf0b-4ddd-a43e-6d17031eb97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:6c:7e:c2:88:57:d2:65:72:4d:c3:a0:2e: a1:4b:66:79:fc:cc:99:ee:7a:3f:c8:38:cf:60:f0: 71:fd:33:4d:f6:ac:7e:94:03:2b:73:eb:b4:c1:43: bb:22:63:77:15:de:7a:5b:b8:1b:cf:80:49:75:90: 3d:41:a7:ea:40:00:23:50:47:72:77:be:1a:90:cb: c1:3e:9f:2b:15:9c:9e:c9:6c:08:ca:c7:5f:ff:90: 83:eb:50:a0:e2:5e:dd:60:bf:40:1c:f8:da:5a:38: 88:2f:d0:22:85:00:d8:31:57:50:7c:c7:08:cf:0d: 0b:51:87:e1:f1:4e:be:f7:f3:25:46:29:90:a1:b0: 44:27:b9:73:d2:7c:27:2f:53:15:e2:c0:70:32:5c: 7d:75:17:69:54:64:d7:1a:ae:2a:98:e1:c0:cd:43: ad:b8:d6:97:10:39:59:90:e6:8a:2b:69:f4:f3:8e: 38:60:4c:8d:6f:ea:c2:6e:cf:18:46:c5:0a:da:a9: bb:ef:c0:d0:c6:95:34:1b:f5:4b:51:9c:21:20:2c: 07:40:2b:db:9e:f3:6c:c0:af:63:f3:f0:91:c1:d9: 47:ee:9b:af:1e:1d:9f:20:0d:57:62:3b:68:94:6c: 70:42:8d:bb:c4:45:30:40:6c:a9:60:c7:5f:4d:1a: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:80:F5:0D:45:47:4D:01:92:C2:91:BD:79:2D:47:F0:45:27:59:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b2a2e17c-c768-3d78-a38a-0f567cf1244a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 74.124.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:29:ba:8c:a2:7d:2d:70:26:90:ec:df:d6:87:a7:4c:93:e2: 64:2d:81:f5:34:1c:ea:86:31:a8:0d:ec:2a:dd:77:02:f7:44: ea:47:98:41:d6:d4:3b:74:e1:c6:74:cf:18:ed:01:5d:26:ea: 59:31:96:fa:1a:c1:52:b9:ad:9e:75:76:96:65:91:ee:c0:be: 47:2e:21:fc:89:23:ca:ec:5c:7e:cf:c0:81:a5:57:d4:7a:45: d0:a0:65:b5:46:b6:ed:95:6c:3d:be:3b:a2:40:14:c7:84:77: 1a:95:fe:0d:99:de:ea:96:d0:66:8c:fe:a8:66:16:5e:05:60: c2:cf:02:ee:6a:54:0f:94:a7:ec:93:ff:71:62:59:8b:c6:90: 19:0b:e1:4e:93:69:5f:16:e2:e6:b5:d8:5c:41:00:44:ce:58: 27:43:eb:48:88:73:1c:84:bb:bf:ee:5d:15:ba:77:48:58:0f: 0e:59:53:5e:49:83:6d:e4:0a:b3:71:1d:98:df:95:9a:26:99: 84:68:95:a4:01:f3:92:15:d9:4a:b9:a9:dc:96:f9:3c:8d:19: 64:55:f1:b7:60:06:c1:83:8c:88:f6:06:56:d6:c2:54:cd:35: 6a:c7:7d:79:eb:e9:32:bd:e4:ef:64:cf:37:e2:4a:fe:db:11: 12:9c:42:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Ie+7znmTzWNr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk ZmIzMmRiNWMtY2YwYi00ZGRkLWE0M2UtNmQxNzAzMWViOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4lsfsKIV9Jlck3DoC6hS2Z5/MyZ7no/yDjP YPBx/TNN9qx+lAMrc+u0wUO7ImN3Fd56W7gbz4BJdZA9QafqQAAjUEdyd74akMvB Pp8rFZyeyWwIysdf/5CD61Cg4l7dYL9AHPjaWjiIL9AihQDYMVdQfMcIzw0LUYfh 8U6+9/MlRimQobBEJ7lz0nwnL1MV4sBwMlx9dRdpVGTXGq4qmOHAzUOtuNaXEDlZ kOaKK2n08444YEyNb+rCbs8YRsUK2qm778DQxpU0G/VLUZwhICwHQCvbnvNswK9j 8/CRwdlH7puvHh2fIA1XYjtolGxwQo27xEUwQGypYMdfTRpgzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCA9Q1FR00BksKRvXktR/BFJ1nYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYjJhMmUxN2MtYzc2OC0z ZDc4LWEzOGEtMGY1NjdjZjEyNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkpuoyifS1wJpDs39aHp0yT4mQtgfU0HOqGMagN7CrddwL3ROpHmEHW 1Dt04cZ0zxjtAV0m6lkxlvoawVK5rZ51dpZlke7AvkcuIfyJI8rsXH7PwIGlV9R6 RdCgZbVGtu2VbD2+O6JAFMeEdxqV/g2Z3uqW0GaM/qhmFl4FYMLPAu5qVA+Up+yT /3FiWYvGkBkL4U6TaV8W4ua12FxBAETOWCdD60iIcxyEu7/uXRW6d0hYDw5ZU15J g23kCrNxHZjflZommYRolaQB85IV2Uq5qdyW+TyNGWRV8bdgBsGDjIj2BlbWwlTN NWrHfXnr6TK95O9kzzfiSv7bERKcQsw= -----END CERTIFICATE-----Generated at Tue Apr 29 14:26:22 2025 by rpki-client