$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa File: d708040c-ac45-37b8-b457-55cee02af123.roa (raw, json) Hash identifier: qD88NFIlwm02y0F5Gf1PBdYkSdqloXwF79oWgtKIsY4= Subject key identifier: 19:63:B1:F3:0F:EA:0A:FD:A2:AB:C4:68:96:4E:8F:62:92:85:38:EB Certificate issuer: /CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c Certificate serial: 010D0C9F43285849DF5A5E9009E6DD0E66EB7EF0 Authority key identifier: 38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 31898 IP address blocks: 74.81.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5e:90:09:e6:dd:0e:66:eb:7e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb8cf5dc-7c68-4e9d-850f-eb01a742b74c Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=6150cc0f-5f5b-4326-bab1-9fedf4455ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:30:f6:19:77:e6:a1:07:46:a2:bc:0a:5f: 85:6f:0a:3f:aa:b2:f0:2b:1d:ee:27:1c:dd:52:3d: 31:bc:7d:d4:b2:38:2a:a5:c7:5d:68:3d:3d:87:95: 34:26:e5:e8:30:14:ef:52:b3:d8:fb:32:00:a5:23: 82:29:c5:da:97:59:ab:3f:e6:04:2a:4c:fa:58:d9: 62:37:45:21:cc:89:fe:55:6d:3b:1b:97:c7:87:c6: f1:d5:78:41:10:c4:49:93:f8:db:a6:00:54:97:5f: 03:a5:d3:b9:fd:61:0e:3c:4f:7f:bc:4b:dd:c7:22: 4b:a6:bb:51:64:56:c9:39:c0:05:ad:38:e0:88:d3: f3:33:77:2e:9b:db:db:31:cc:5d:b3:59:80:84:5f: b5:31:af:d1:08:4c:97:ce:85:60:3c:d4:13:8f:e7: 8d:0f:fa:81:db:06:cf:ed:44:b0:00:ce:c5:f5:32: b9:d6:46:4c:61:bd:07:1c:12:3d:59:d5:11:9f:ab: 40:a5:02:e2:d1:2f:0f:3d:04:83:22:7a:f6:1b:e5: 99:01:15:cb:dc:0b:7a:d4:5e:32:84:3c:42:0b:11: 0b:cc:f8:22:87:b8:73:a0:89:11:e1:28:1a:82:39: 14:2a:60:d2:29:aa:d1:0d:fd:22:74:ba:53:9f:2a: 2b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:63:B1:F3:0F:EA:0A:FD:A2:AB:C4:68:96:4E:8F:62:92:85:38:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/d708040c-ac45-37b8-b457-55cee02af123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.crl X509v3 Authority Key Identifier: keyid:38:C4:C5:DF:59:2E:DB:A9:20:81:98:7E:54:F2:B8:68:DC:17:8E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fb8cf5dc-7c68-4e9d-850f-eb01a742b74c.cer sbgp-ipAddrBlock: critical IPv4: 74.81.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3d:ba:39:91:36:21:ed:3b:72:63:dd:3b:c2:8a:a5:03:f5: 6a:af:52:ff:29:3f:fa:0d:30:28:11:9d:0c:03:01:17:e6:bd: 9e:6e:a0:56:91:f1:64:48:7b:ae:c3:83:82:c0:7c:26:0d:95: e1:df:5d:71:2e:9d:5f:53:c9:9b:6a:0d:63:41:a4:ce:a4:37: d1:6b:d5:8a:05:25:65:88:ad:f8:15:cd:bb:51:8c:6e:d6:2d: 66:29:db:8a:79:8e:84:97:e7:fe:c7:3e:d8:f9:ec:7d:6c:9d: 8c:12:ec:2b:f8:b1:c4:c6:30:47:bc:0b:7b:a5:d8:82:f3:ec: 68:47:99:d3:8b:af:11:2a:a8:2d:b0:52:e7:ac:76:81:f1:51: 63:01:14:a9:63:97:80:a8:bf:5b:95:1f:da:f4:c6:7d:88:e7: 0f:ff:39:a8:11:c1:9f:c6:c1:c2:8c:09:e3:ed:fc:89:df:90: a1:f3:c7:87:4f:89:d9:1a:21:55:0c:14:71:45:12:af:89:96: a1:4e:d1:5d:1b:f2:a6:35:42:a6:70:71:32:f7:03:51:1c:34: c4:ff:64:b2:2f:4f:07:7e:58:62:a8:04:54:94:c4:e0:fb:ae: 15:c7:31:77:89:7b:54:a8:52:4b:ca:66:56:9f:cf:5f:ac:8e: b1:a3:07:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWl6QCebdDmbrfvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI4Y2Y1ZGMtN2M2OC00ZTlkLTg1MGYtZWIwMWE3NDJi NzRjMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk NjE1MGNjMGYtNWY1Yi00MzI2LWJhYjEtOWZlZGY0NDU1Y2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc4w9hl35qEHRqK8Cl+Fbwo/qrLwKx3uJxzd Uj0xvH3UsjgqpcddaD09h5U0JuXoMBTvUrPY+zIApSOCKcXal1mrP+YEKkz6WNli N0UhzIn+VW07G5fHh8bx1XhBEMRJk/jbpgBUl18DpdO5/WEOPE9/vEvdxyJLprtR ZFbJOcAFrTjgiNPzM3cum9vbMcxds1mAhF+1Ma/RCEyXzoVgPNQTj+eND/qB2wbP 7USwAM7F9TK51kZMYb0HHBI9WdURn6tApQLi0S8PPQSDInr2G+WZARXL3At61F4y hDxCCxELzPgih7hzoIkR4SgagjkUKmDSKarRDf0idLpTnyorJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBljsfMP6gr9oqvEaJZOj2KShTjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYjhj ZjVkYy03YzY4LTRlOWQtODUwZi1lYjAxYTc0MmI3NGMvZDcwODA0MGMtYWM0NS0z N2I4LWI0NTctNTVjZWUwMmFmMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmI4Y2Y1ZGMtN2M2OC00ZTlkLTg1 MGYtZWIwMWE3NDJiNzRjL2ZiOGNmNWRjLTdjNjgtNGU5ZC04NTBmLWViMDFhNzQy Yjc0Yy5jcmwwHwYDVR0jBBgwFoAUOMTF31ku26kggZh+VPK4aNwXjrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYjhjZjVkYy03YzY4LTRlOWQtODUwZi1lYjAx YTc0MmI3NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlG9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg9ujmRNiHtO3Jj3TvCiqUD9WqvUv8pP/oNMCgRnQwDARfmvZ5uoFaR 8WRIe67Dg4LAfCYNleHfXXEunV9TyZtqDWNBpM6kN9Fr1YoFJWWIrfgVzbtRjG7W LWYp24p5joSX5/7HPtj57H1snYwS7Cv4scTGMEe8C3ul2ILz7GhHmdOLrxEqqC2w UuesdoHxUWMBFKljl4Cov1uVH9r0xn2I5w//OagRwZ/GwcKMCePt/InfkKHzx4dP idkaIVUMFHFFEq+JlqFO0V0b8qY1QqZwcTL3A1EcNMT/ZLIvTwd+WGKoBFSUxOD7 rhXHMXeJe1SoUkvKZlafz1+sjrGjByg= -----END CERTIFICATE-----Generated at Sun Jun 15 12:14:23 2025 by rpki-client