$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa File: d708040c-ac45-37b8-b457-55cee02af123.roa (raw, json) Hash identifier: sPUMXBVL+9dmIs03dMCQAG+criPmROSIOf15M6Kv5Uo= Subject key identifier: 97:68:ED:FB:89:2E:87:D3:E0:52:04:91:30:6B:09:71:8F:DD:CA:4E Certificate issuer: /CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c Certificate serial: 010D0C9F4328584900214EF684C5DDAB4DA34C80 Authority key identifier: 38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 31898 IP address blocks: 74.81.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:4e:f6:84:c5:dd:ab:4d:a3:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=c4d80bea-37d7-43c1-853a-19dd16661e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:e1:c5:db:97:8b:63:5f:8e:d6:e5:d5:4c: b4:be:3a:b3:b0:51:a9:9a:38:05:63:76:cd:09:b7: 1a:01:ee:83:52:e9:50:2c:99:97:ad:32:a9:36:4a: 4f:9e:5a:21:fe:f8:57:8b:50:3f:e8:42:1d:7a:d8: 4c:de:89:5b:1f:6e:ff:d1:e2:42:16:d8:8d:56:49: 10:f2:70:cc:bb:34:f3:d9:ad:55:96:45:e9:7c:63: 74:0e:b1:8b:a9:da:d8:d3:3f:b0:22:92:70:41:28: 0b:e8:e3:80:f3:b0:61:47:03:39:ee:7b:28:45:a6: e8:41:50:d6:89:7e:b3:d2:0b:56:26:e8:ae:3e:61: e1:e6:e5:34:56:14:e2:5e:25:bb:72:4e:89:18:24: 2b:9c:d3:19:d7:e5:e9:e9:4c:7b:56:70:63:5b:ab: b1:41:2b:c7:5d:87:2a:74:c7:a0:c5:da:68:7f:c0: b2:f7:8e:fb:5d:39:4b:50:db:00:c8:67:59:25:20: e6:2b:01:27:e0:31:ec:2d:46:57:5f:5c:5e:bd:e9: 10:66:6c:de:07:42:34:14:1e:9c:8f:b9:7b:b5:67: a1:f1:9a:fb:c6:da:3b:61:38:26:d0:f2:c2:cc:16: ec:44:cf:4f:a2:3b:e2:8b:14:b7:0f:26:0c:54:24: 12:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:68:ED:FB:89:2E:87:D3:E0:52:04:91:30:6B:09:71:8F:DD:CA:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl X509v3 Authority Key Identifier: keyid:38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer sbgp-ipAddrBlock: critical IPv4: 74.81.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:91:f2:d3:35:48:1f:96:cd:bd:1e:49:68:8d:1c:4a:1c:8a: 40:77:f2:db:d3:86:e3:26:7a:21:d0:69:c2:d9:71:e3:35:73: 70:95:54:6f:0a:e0:be:49:2a:51:13:e7:6b:f6:4b:29:17:07: 46:7c:49:42:dc:33:1e:f2:ed:24:ae:91:7b:16:60:70:72:a8: fb:0c:4e:df:f9:5b:c2:00:a4:3e:d5:d8:c3:b9:de:0a:97:90: 6f:0b:67:f8:da:f6:fe:a4:9d:58:14:f7:68:0b:bb:74:7f:8b: e5:58:a8:af:cf:28:cd:11:d9:8e:8e:6b:86:ed:74:b7:12:20: a6:67:f3:de:62:f3:a4:76:5f:11:72:19:c6:e3:b5:3e:89:62: 77:96:d8:ce:a9:e4:36:c5:d4:06:09:f5:19:94:b9:12:21:83: 77:1b:4f:ce:be:bd:f8:be:89:fa:1a:37:1b:43:ee:9e:d4:1d: ff:50:0f:b9:24:e3:08:3f:89:70:99:da:96:f7:37:50:7e:18: 80:56:b1:78:ba:8c:fe:39:16:d6:21:a8:71:6b:4a:63:32:2b: 8b:af:54:af:56:ba:da:8b:61:3c:cf:38:a6:3b:44:47:10:c7: 90:d2:e6:54:9b:d9:92:d3:8c:9e:ad:f3:9a:63:c3:bf:a6:0f: 17:23:97:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIU72hMXdq02jTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI4Y2Y1ZGMtN2M2OC00ZTlkLTg1MGYtZWIwMWE3NDJi NzRjMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk YzRkODBiZWEtMzdkNy00M2MxLTg1M2EtMTlkZDE2NjYxZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0vhxduXi2Nfjtbl1Uy0vjqzsFGpmjgFY3bN CbcaAe6DUulQLJmXrTKpNkpPnloh/vhXi1A/6EIdethM3olbH27/0eJCFtiNVkkQ 8nDMuzTz2a1VlkXpfGN0DrGLqdrY0z+wIpJwQSgL6OOA87BhRwM57nsoRaboQVDW iX6z0gtWJuiuPmHh5uU0VhTiXiW7ck6JGCQrnNMZ1+Xp6Ux7VnBjW6uxQSvHXYcq dMegxdpof8Cy9477XTlLUNsAyGdZJSDmKwEn4DHsLUZXX1xevekQZmzeB0I0FB6c j7l7tWeh8Zr7xto7YTgm0PLCzBbsRM9PojviixS3DyYMVCQSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdo7fuJLofT4FIEkTBrCXGP3cpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYjhj ZjVkYy03YzY4LTRlOWQtODUwZi1lYjAxYTc0MmI3NGMvZDcwODA0MGMtYWM0NS0z N2I4LWI0NTctNTVjZWUwMmFmMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmI4Y2Y1ZGMtN2M2OC00ZTlkLTg1 MGYtZWIwMWE3NDJiNzRjL2ZiOGNmNWRjLTdjNjgtNGU5ZC04NTBmLWViMDFhNzQy Yjc0Yy5jcmwwHwYDVR0jBBgwFoAUOMTF31ku26kggZh+VPK4aNwXjrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYjhjZjVkYy03YzY4LTRlOWQtODUwZi1lYjAx YTc0MmI3NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmR8tM1SB+Wzb0eSWiNHEocikB38tvThuMmeiHQacLZceM1c3CVVG8K 4L5JKlET52v2SykXB0Z8SULcMx7y7SSukXsWYHByqPsMTt/5W8IApD7V2MO53gqX kG8LZ/ja9v6knVgU92gLu3R/i+VYqK/PKM0R2Y6Oa4btdLcSIKZn895i86R2XxFy GcbjtT6JYneW2M6p5DbF1AYJ9RmUuRIhg3cbT86+vfi+ifoaNxtD7p7UHf9QD7kk 4wg/iXCZ2pb3N1B+GIBWsXi6jP45FtYhqHFrSmMyK4uvVK9WutqLYTzPOKY7REcQ x5DS5lSb2ZLTjJ6t85pjw7+mDxcjl9I= -----END CERTIFICATE-----Generated at Sat Apr 26 17:47:38 2025 by rpki-client