$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa File: a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa (raw, json) Hash identifier: 3U9Zq6G4EQMNcKYfXOk1y9Y4DY61h2dD0zO9GAn9U8o= Subject key identifier: BE:C4:81:08:D3:B4:B0:62:D2:A2:2D:94:2C:25:22:15:CD:15:E4:00 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849AA4F67644DC2B8083D12CFE0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16433 IP address blocks: 74.123.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:67:64:4d:c2:b8:08:3d:12:cf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=f0dfb82a-ae79-4775-a7a8-34dc3363f89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:46:e3:82:a3:0b:ae:43:32:f3:1d:18:21: 2f:96:4f:55:28:3a:db:82:9a:42:f2:55:8f:54:12: 9e:43:fd:7a:8f:9a:09:d1:46:16:a2:23:75:c1:0d: 8f:69:d2:2c:39:10:dc:cf:24:aa:c5:42:37:85:d7: 90:d9:ff:10:a7:88:0f:22:bd:31:c5:82:93:76:f2: 6d:dd:88:1f:8e:0e:54:1b:95:a8:23:ac:4b:ce:08: 5b:5b:27:12:b4:59:a4:bc:fd:2e:a8:95:b3:67:b6: 8e:14:3a:f3:99:6b:ec:c3:50:5a:ea:c3:29:a1:0e: c1:3b:1e:24:c7:5e:93:c5:b1:a1:35:12:f9:dc:00: 44:db:08:35:77:56:3d:35:ba:25:20:54:6d:5c:fe: 23:03:25:cb:fd:ba:ca:d4:fc:31:8e:59:e5:03:53: b4:28:28:1e:4f:4a:33:52:e4:f0:29:8f:e4:4e:08: 46:8d:04:c2:fc:25:64:9f:89:12:77:7f:96:c8:59: e0:2d:bb:c2:a6:d6:b1:a9:87:b2:65:44:ec:dc:1a: f0:48:d2:81:0b:42:27:80:c9:5a:7c:03:5b:80:41: 1a:13:4d:c0:fb:e3:da:2d:85:aa:18:b5:f9:5d:f0: 12:ef:70:73:fe:ef:97:8e:f6:b8:32:78:1d:3d:85: 14:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C4:81:08:D3:B4:B0:62:D2:A2:2D:94:2C:25:22:15:CD:15:E4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/a94a2b6b-903e-37cb-bde7-c9b85ed72c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 74.123.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d6:56:77:75:22:2c:f2:88:ad:1e:d6:40:d4:70:db:de:e2: 54:68:7c:54:e8:9a:2f:b4:f0:60:de:61:1b:64:8b:4a:be:d1: a7:9a:f9:c0:93:25:9f:0a:1a:92:8f:70:72:b6:d1:91:73:b6: 19:ff:e3:79:b4:e5:68:57:1a:e4:ae:79:d2:e7:24:ea:11:a9: 37:6e:02:b4:c3:aa:b9:38:04:7b:9a:56:73:88:75:9e:24:28: cb:68:1e:60:56:6b:c8:69:17:48:41:32:84:64:58:1f:1f:d2: 8f:c1:72:e2:22:98:39:41:d9:4e:86:de:ff:9d:3e:dc:3e:e7: c7:0e:5f:67:66:9e:49:bd:33:1d:fa:c7:29:38:7f:b5:7b:0b: f6:be:5d:fb:56:2a:9e:78:1f:c1:05:8d:38:c4:29:65:25:d4: e3:79:c0:d8:34:26:54:07:bc:41:4a:7d:46:f2:89:36:c3:77: 39:e2:87:fe:68:97:62:9b:79:08:7f:fc:25:29:8b:5f:a3:04: c3:46:fa:24:35:c9:03:4a:8e:95:1d:23:38:d2:f9:b6:5c:39: 5c:cb:70:fc:41:cd:02:31:20:46:9e:36:36:b1:bd:ee:bf:e4: 19:8a:38:13:0e:36:a2:a2:ec:5b:03:b5:cc:54:7f:6e:ab:66: 68:8f:9a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2dkTcK4CD0Sz+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ZjBkZmI4MmEtYWU3OS00Nzc1LWE3YTgtMzRkYzMzNjNmODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHVG44KjC65DMvMdGCEvlk9VKDrbgppC8lWP VBKeQ/16j5oJ0UYWoiN1wQ2PadIsORDczySqxUI3hdeQ2f8Qp4gPIr0xxYKTdvJt 3Ygfjg5UG5WoI6xLzghbWycStFmkvP0uqJWzZ7aOFDrzmWvsw1Ba6sMpoQ7BOx4k x16TxbGhNRL53ABE2wg1d1Y9NbolIFRtXP4jAyXL/brK1PwxjlnlA1O0KCgeT0oz UuTwKY/kTghGjQTC/CVkn4kSd3+WyFngLbvCptaxqYeyZUTs3BrwSNKBC0IngMla fANbgEEaE03A++PaLYWqGLX5XfAS73Bz/u+Xjva4MngdPYUUaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7EgQjTtLBi0qItlCwlIhXNFeQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYTk0YTJiNmItOTAzZS0z N2NiLWJkZTctYzliODVlZDcyYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfWVnd1IizyiK0e1kDUcNve4lRofFTomi+08GDeYRtki0q+0aea+cCT JZ8KGpKPcHK20ZFzthn/43m05WhXGuSuedLnJOoRqTduArTDqrk4BHuaVnOIdZ4k KMtoHmBWa8hpF0hBMoRkWB8f0o/BcuIimDlB2U6G3v+dPtw+58cOX2dmnkm9Mx36 xyk4f7V7C/a+XftWKp54H8EFjTjEKWUl1ON5wNg0JlQHvEFKfUbyiTbDdznih/5o l2KbeQh//CUpi1+jBMNG+iQ1yQNKjpUdIzjS+bZcOVzLcPxBzQIxIEaeNjaxve6/ 5BmKOBMONqKi7FsDtcxUf26rZmiPmnk= -----END CERTIFICATE-----Generated at Mon Apr 28 23:26:27 2025 by rpki-client