$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b66951a0-8987-3e4a-b3f3-8e8f51671429.roa File: b66951a0-8987-3e4a-b3f3-8e8f51671429.roa (raw, json) Hash identifier: b2K0U6Dk0+ILM6BALvFCmj+bG7tKU0uQRGH6ZUX5OB8= Subject key identifier: A9:A6:2C:70:8D:F1:51:FF:61:46:F4:72:89:46:8B:C5:2C:1A:0A:D2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF4396681943ABF759CD30 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b66951a0-8987-3e4a-b3f3-8e8f51671429.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397229 IP address blocks: 204.74.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:43:96:68:19:43:ab:f7:59:cd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=2599faef-1854-4aa9-951a-a467b476bba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b8:74:10:08:4c:06:fe:48:2c:67:45:81:0f: cf:b7:03:2c:d8:d0:fa:b9:25:c2:27:c0:a0:ad:10: 1d:3e:7c:05:53:c6:fa:bd:7f:b9:4b:20:9b:26:fc: c3:73:fa:d2:f9:51:f9:60:64:3b:f1:9d:f0:73:86: e7:53:3c:d0:99:14:af:79:5a:5a:c3:b7:2c:cc:26: 2f:49:36:37:ed:52:9d:83:14:6e:a2:aa:71:7e:6c: 17:0e:93:6f:f1:fe:b0:a0:08:72:bd:56:03:f2:23: d1:eb:41:ed:07:1f:c8:df:67:63:7d:91:73:07:8d: 23:84:f0:4c:76:58:5b:a5:20:f6:15:09:15:5e:ba: 69:e9:e0:f8:83:51:ae:be:24:13:1b:cf:2b:8d:b4: 90:4b:d8:f6:1a:b7:11:cb:d4:29:51:69:12:2d:ff: f5:bc:0a:d4:a7:60:0d:a8:b3:13:66:52:09:00:f2: 38:c2:20:c4:15:ab:9d:b1:30:72:59:c4:7d:eb:5b: 54:4e:ea:4b:1c:9b:e0:bb:3f:26:da:28:9a:f8:9b: 50:5a:50:26:d6:fb:e2:22:8b:5c:39:8c:0a:97:ea: ca:61:0e:f4:82:03:b2:f4:c3:76:d4:9f:f1:5c:9e: cb:bf:22:95:31:04:31:8c:3b:3e:c6:6a:c2:74:4a: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A6:2C:70:8D:F1:51:FF:61:46:F4:72:89:46:8B:C5:2C:1A:0A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b66951a0-8987-3e4a-b3f3-8e8f51671429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1d:a1:aa:6c:83:72:7c:1f:d2:f7:4e:e1:e6:a6:72:60:db: 2f:c7:cc:76:4d:53:c3:b0:30:d5:d9:0d:fc:f7:c2:0b:ec:16: 83:b0:cb:1b:b6:46:f4:c6:2a:e4:c7:1a:6a:cd:b0:bf:de:5f: 13:70:28:5e:34:9e:69:a9:11:14:ba:92:8f:80:ad:d6:b8:b6: 9c:c7:96:de:1d:92:c8:64:22:b5:19:58:0e:47:25:ee:e5:ab: e9:1a:45:49:65:4c:29:79:4a:2b:aa:0c:0e:74:38:d5:59:b1: cf:6b:63:fc:0b:cf:a9:ce:ee:eb:5a:a7:f2:8f:03:34:02:f6: 3c:d5:93:c7:ae:f2:d9:32:5b:2f:d0:c7:43:a7:61:7e:61:4c: 87:0a:97:04:18:36:8c:30:3d:23:c1:69:8e:1d:a2:26:24:91: 63:8c:b3:d5:f3:ba:1f:d3:26:c2:25:74:f3:2d:ce:ee:09:6a: 01:03:dd:23:63:e1:ab:fa:bd:87:3f:d6:a6:c0:97:55:ae:05: 6c:fd:90:39:01:6d:22:4c:8e:24:c3:de:60:32:91:27:28:30: 7c:9a:7a:ec:0e:5a:20:61:41:69:46:85:82:7f:f9:eb:48:0c: 1a:19:86:9d:ce:6c:c5:ec:6e:66:84:e6:cf:44:62:5f:bd:01: 0b:c9:e2:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz0OWaBlDq/dZzTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MjU5OWZhZWYtMTg1NC00YWE5LTk1MWEtYTQ2N2I0NzZiYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLh0EAhMBv5ILGdFgQ/PtwMs2ND6uSXCJ8Cg rRAdPnwFU8b6vX+5SyCbJvzDc/rS+VH5YGQ78Z3wc4bnUzzQmRSveVpaw7cszCYv STY37VKdgxRuoqpxfmwXDpNv8f6woAhyvVYD8iPR60HtBx/I32djfZFzB40jhPBM dlhbpSD2FQkVXrpp6eD4g1GuviQTG88rjbSQS9j2GrcRy9QpUWkSLf/1vArUp2AN qLMTZlIJAPI4wiDEFaudsTByWcR961tUTupLHJvguz8m2iia+JtQWlAm1vviIotc OYwKl+rKYQ70ggOy9MN21J/xXJ7LvyKVMQQxjDs+xmrCdEqUfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmmLHCN8VH/YUb0colGi8UsGgrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjY2OTUxYTAtODk4Ny0z ZTRhLWIzZjMtOGU4ZjUxNjcxNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUdoapsg3J8H9L3TuHmpnJg2y/HzHZNU8OwMNXZDfz3wgvsFoOwyxu2 RvTGKuTHGmrNsL/eXxNwKF40nmmpERS6ko+Arda4tpzHlt4dkshkIrUZWA5HJe7l q+kaRUllTCl5SiuqDA50ONVZsc9rY/wLz6nO7utap/KPAzQC9jzVk8eu8tkyWy/Q x0OnYX5hTIcKlwQYNowwPSPBaY4doiYkkWOMs9Xzuh/TJsIldPMtzu4JagED3SNj 4av6vYc/1qbAl1WuBWz9kDkBbSJMjiTD3mAykScoMHyaeuwOWiBhQWlGhYJ/+etI DBoZhp3ObMXsbmaE5s9EYl+9AQvJ4uc= -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:57 2025 by rpki-client