$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa File: a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa (raw, json) Hash identifier: MbnhQcPI0NBpu6HV/s9NmrNOqxm990lD+KV2H63nXew= Subject key identifier: 54:2F:00:89:FE:5D:23:C0:09:FA:D2:9A:AB:53:4B:44:5E:24:F5:E8 Certificate issuer: /CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Certificate serial: 010D0C9F43285849DF5A5F6A87E9BA66367C2D80 Authority key identifier: D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 33465 IP address blocks: 74.51.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5f:6a:87:e9:ba:66:36:7c:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=e26e4f1a-7f4d-4568-8b7f-aaaad2c32636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:ee:6e:44:b8:b2:e7:4b:1c:0e:73:25:bb: 74:4f:a0:6a:6d:4a:12:0e:ed:fc:74:c2:7c:87:6f: 65:e1:41:c4:a7:5d:fe:33:57:fd:f6:0b:43:46:ab: 5c:ef:79:59:69:01:ba:19:27:9f:54:0e:a0:8f:4a: 11:20:19:ec:cb:fb:14:a0:ab:7a:5a:9b:b5:d0:fd: fe:f7:83:5c:bb:d8:a2:dc:7d:44:5c:ab:63:dc:07: 2f:55:c5:81:80:43:5b:e9:e8:79:25:e0:29:79:3c: 05:13:7e:4a:f0:c4:10:d5:fd:83:b9:a4:93:51:24: 0a:be:b7:5b:5b:a4:91:fc:85:6e:8a:40:24:0a:e1: ba:58:08:42:4e:2d:e8:ff:25:76:a8:e9:2b:5f:af: 6e:93:9b:33:98:4f:16:6e:a2:46:47:87:3a:ca:23: 35:d2:af:b2:b6:54:59:2c:4e:b2:a8:5c:e3:1d:00: 29:1a:14:f4:95:99:de:96:be:43:d9:3d:39:8f:3b: 95:a1:8b:ec:a6:48:9e:8a:7c:19:08:c9:5a:a7:e5: cf:2e:56:01:cb:2c:0e:ec:e1:15:ac:9a:7f:14:7e: 27:20:2b:38:7a:1f:2e:37:26:d2:5a:b6:87:28:74: 64:90:f1:c2:19:f1:e5:eb:f7:3c:3b:7c:80:c5:43: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2F:00:89:FE:5D:23:C0:09:FA:D2:9A:AB:53:4B:44:5E:24:F5:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/a3b24945-8ea5-310e-9ec6-a257dcf53f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.crl X509v3 Authority Key Identifier: keyid:D5:D9:87:C4:51:CF:76:02:76:15:6C:18:DA:C5:C6:0F:CD:C9:FD:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac57a4e4-4771-4b87-be6a-e3b27f5ac5dd.cer sbgp-ipAddrBlock: critical IPv4: 74.51.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:51:c8:fc:94:e7:b2:00:4c:3f:6d:b3:e1:54:a6:67:8d:1f: c5:80:91:1c:56:26:07:48:e6:53:94:15:ad:32:d2:e9:87:f7: c3:29:2a:8f:3c:82:b8:7c:77:45:78:1f:1c:60:d0:4b:fb:b1: 21:f2:0c:18:9e:7d:1a:5d:37:60:ab:06:23:a2:9c:bb:32:39: 1c:c2:c9:d9:5a:14:dd:f5:8d:48:78:6b:6f:39:c1:eb:15:6a: 33:84:c8:5c:c0:80:e3:04:ab:1c:2b:85:1c:34:1b:8c:8e:bb: 85:6b:43:b7:69:d2:a9:02:3f:f2:c0:c9:06:5c:9e:77:b7:4b: f4:4f:74:ce:9a:57:0c:f2:bd:19:0e:b6:5d:f6:17:13:17:2c: 09:b5:0e:03:95:4e:bc:84:e4:61:1a:97:04:65:a1:a9:75:5c: 3f:b7:f5:33:91:ce:d2:ed:e6:52:dc:d9:e5:d6:b8:0e:fe:80: ce:88:b3:99:7a:46:96:a6:cc:24:b6:af:d3:2b:0a:b2:8b:86: f8:00:f4:b8:73:55:58:ec:b8:d0:d5:25:f0:94:c3:01:99:81: 89:92:da:0f:04:df:41:f7:b7:6c:6c:4e:f5:f9:cc:15:5f:de: aa:db:78:bf:04:78:e8:f2:db:20:cf:1f:98:d8:df:bc:64:c2: b8:96:b7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWl9qh+m6ZjZ8LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM1N2E0ZTQtNDc3MS00Yjg3LWJlNmEtZTNiMjdmNWFj NWRkMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZTI2ZTRmMWEtN2Y0ZC00NTY4LThiN2YtYWFhYWQyYzMyNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssbubkS4sudLHA5zJbt0T6BqbUoSDu38dMJ8 h29l4UHEp13+M1f99gtDRqtc73lZaQG6GSefVA6gj0oRIBnsy/sUoKt6Wpu10P3+ 94Ncu9ii3H1EXKtj3AcvVcWBgENb6eh5JeApeTwFE35K8MQQ1f2DuaSTUSQKvrdb W6SR/IVuikAkCuG6WAhCTi3o/yV2qOkrX69uk5szmE8WbqJGR4c6yiM10q+ytlRZ LE6yqFzjHQApGhT0lZnelr5D2T05jzuVoYvspkieinwZCMlap+XPLlYByywO7OEV rJp/FH4nICs4eh8uNybSWraHKHRkkPHCGfHl6/c8O3yAxUOBBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQvAIn+XSPACfrSmqtTS0ReJPXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3 YTRlNC00NzcxLTRiODctYmU2YS1lM2IyN2Y1YWM1ZGQvYTNiMjQ5NDUtOGVhNS0z MTBlLTllYzYtYTI1N2RjZjUzZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWM1N2E0ZTQtNDc3MS00Yjg3LWJl NmEtZTNiMjdmNWFjNWRkL2FjNTdhNGU0LTQ3NzEtNGI4Ny1iZTZhLWUzYjI3ZjVh YzVkZC5jcmwwHwYDVR0jBBgwFoAU1dmHxFHPdgJ2FWwY2sXGD83J/ckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzU3YTRlNC00NzcxLTRiODctYmU2YS1lM2Iy N2Y1YWM1ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESjPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVRyPyU57IATD9ts+FUpmeNH8WAkRxWJgdI5lOUFa0y0umH98MpKo88 grh8d0V4Hxxg0Ev7sSHyDBiefRpdN2CrBiOinLsyORzCydlaFN31jUh4a285wesV ajOEyFzAgOMEqxwrhRw0G4yOu4VrQ7dp0qkCP/LAyQZcnne3S/RPdM6aVwzyvRkO tl32FxMXLAm1DgOVTryE5GEalwRloal1XD+39TORztLt5lLc2eXWuA7+gM6Is5l6 RpamzCS2r9MrCrKLhvgA9LhzVVjsuNDVJfCUwwGZgYmS2g8E30H3t2xsTvX5zBVf 3qrbeL8EeOjy2yDPH5jY37xkwriWt7Q= -----END CERTIFICATE-----Generated at Sun Jun 15 15:50:06 2025 by rpki-client