$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc89003d-0379-3e0a-a7d6-43da48cd2a8e.roa File: dc89003d-0379-3e0a-a7d6-43da48cd2a8e.roa (raw, json) Hash identifier: 1BsAaRLj5wf3NJcTGGYQoyhm7e/LRklmH1v0dcivZtI= Subject key identifier: 1A:26:B2:49:91:23:CA:1F:B4:B0:70:B7:D9:FB:13:42:D7:57:F8:F5 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F432858499C59F9B0679720E174801030 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc89003d-0379-3e0a-a7d6-43da48cd2a8e.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 397223 IP address blocks: 204.74.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:f9:b0:67:97:20:e1:74:80:10:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=e062b6e4-1c5a-430d-b513-11342dc47211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1a:96:74:fb:51:84:46:83:1b:9b:32:fb:6d: e2:df:0e:a8:1f:e2:58:ce:f2:41:a2:e7:1e:61:e6: 66:98:b6:9c:eb:de:75:dd:0e:f6:66:37:ab:35:62: 41:8c:b3:11:39:9b:13:e0:52:b9:10:55:3f:85:d6: 1c:26:c5:df:85:bf:de:82:f2:8f:47:65:a4:35:f9: d8:b8:67:ea:cb:18:f5:a7:41:47:20:34:47:ac:51: 3e:97:ca:e9:a4:c6:46:1b:fe:bb:28:cd:8e:87:ec: f1:57:bc:99:a5:23:17:81:ca:92:e2:03:7d:7d:e4: 6f:05:69:9a:2a:f3:07:5a:03:c7:4d:b5:cb:a6:50: 99:33:39:5a:0f:e6:e5:55:7a:1b:d6:81:e9:52:1f: be:12:e9:7e:a1:0b:4e:e2:4d:f2:c8:56:26:06:04: 7d:88:e3:eb:12:3f:9f:fb:30:d8:01:1f:6f:0b:63: 23:e7:7b:05:38:a4:15:41:de:ac:db:0d:52:df:f9: e1:51:ea:8d:9a:9d:a3:7c:56:d0:b4:14:b7:72:f3: 0e:78:76:f9:91:49:64:0a:17:a9:bb:55:00:ca:93: a5:b5:cc:81:b4:8e:75:7f:f4:97:73:3f:87:f2:7c: 22:a0:85:57:70:22:16:5c:15:dc:b3:f5:d0:31:a9: 2a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:26:B2:49:91:23:CA:1F:B4:B0:70:B7:D9:FB:13:42:D7:57:F8:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dc89003d-0379-3e0a-a7d6-43da48cd2a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.74.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b0:e3:cb:a7:8f:ba:e1:99:b6:1a:07:9f:69:bb:96:e6:d2: f3:28:24:17:1e:bf:2b:ec:79:1c:5a:a4:b5:31:33:4d:2d:07: ac:ef:da:55:a0:ff:21:d2:b8:a0:c3:93:57:94:6b:6c:55:26: 2a:b1:10:41:b6:8d:0b:71:5d:58:50:3e:22:01:da:c0:98:91: 3f:83:2d:a5:f6:db:f1:9e:e5:81:0a:ea:1c:06:0f:57:0e:2a: b9:ae:28:5b:1c:9b:a3:92:32:af:25:67:38:6a:68:54:25:0f: b7:1a:cc:75:56:bd:b1:6f:17:2d:a2:61:7c:6c:0f:a0:a1:d4: 1a:5f:ff:5a:f3:ec:17:9a:eb:61:0a:c9:0d:b8:53:01:d4:2b: cb:9e:55:81:5f:71:19:31:1c:b1:13:26:f7:c1:7d:01:09:20: d4:49:39:d9:66:27:16:2c:81:b3:19:3c:d0:e6:ac:22:24:0b: 02:76:9f:46:d6:08:3d:df:06:64:7d:03:25:15:df:ce:84:db: 42:5d:11:82:b1:cd:56:e7:6d:48:d4:ef:b1:52:e0:f9:81:cd: b8:1a:5a:9f:db:5e:3f:3f:22:78:47:6d:63:14:25:40:43:c7: 10:a8:bf:29:23:f7:89:a4:dc:9d:8e:62:5f:a4:5c:1c:d2:d0: d5:fc:26:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcWfmwZ5cg4XSAEDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ZTA2MmI2ZTQtMWM1YS00MzBkLWI1MTMtMTEzNDJkYzQ3MjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xqWdPtRhEaDG5sy+23i3w6oH+JYzvJBouce YeZmmLac69513Q72ZjerNWJBjLMROZsT4FK5EFU/hdYcJsXfhb/egvKPR2WkNfnY uGfqyxj1p0FHIDRHrFE+l8rppMZGG/67KM2Oh+zxV7yZpSMXgcqS4gN9feRvBWma KvMHWgPHTbXLplCZMzlaD+blVXob1oHpUh++Eul+oQtO4k3yyFYmBgR9iOPrEj+f +zDYAR9vC2Mj53sFOKQVQd6s2w1S3/nhUeqNmp2jfFbQtBS3cvMOeHb5kUlkChep u1UAypOltcyBtI51f/SXcz+H8nwioIVXcCIWXBXcs/XQMakquwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBomskmRI8oftLBwt9n7E0LXV/j1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZGM4OTAwM2QtMDM3OS0z ZTBhLWE3ZDYtNDNkYTQ4Y2QyYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFew48unj7rhmbYaB59pu5bm0vMoJBcevyvseRxapLUxM00tB6zv2lWg /yHSuKDDk1eUa2xVJiqxEEG2jQtxXVhQPiIB2sCYkT+DLaX22/Ge5YEK6hwGD1cO KrmuKFscm6OSMq8lZzhqaFQlD7cazHVWvbFvFy2iYXxsD6Ch1Bpf/1rz7Bea62EK yQ24UwHUK8ueVYFfcRkxHLETJvfBfQEJINRJOdlmJxYsgbMZPNDmrCIkCwJ2n0bW CD3fBmR9AyUV386E20JdEYKxzVbnbUjU77FS4PmBzbgaWp/bXj8/InhHbWMUJUBD xxCovykj94mk3J2OYl+kXBzS0NX8JpQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:16 2025 by rpki-client