$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7473a689-03f2-3b6d-9bc9-c5819c80585e.roa File: 7473a689-03f2-3b6d-9bc9-c5819c80585e.roa (raw, json) Hash identifier: KykPJQ3R/9kbHeAYYZHEj456WhsR5FqsDLZBUfIGAdY= Subject key identifier: A3:54:A8:B5:25:9E:88:71:83:E6:78:46:A7:1B:C8:35:08:13:5D:B1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F432858495EEEF2B6DDDFE47C93761B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7473a689-03f2-3b6d-9bc9-c5819c80585e.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 26008 IP address blocks: 74.121.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:f2:b6:dd:df:e4:7c:93:76:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=555a2742-22de-4528-992d-568df4b93bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8a:8f:0e:03:b2:e8:0f:f7:58:80:ea:19:c1: f6:6c:37:75:a6:10:7c:f7:f3:bb:5d:3c:a1:28:09: e7:2a:0c:78:38:17:61:a0:cc:b2:f9:39:9b:53:dd: 24:ff:22:c4:89:c3:a0:ff:cd:31:a0:b1:b9:90:8a: ab:51:6f:0d:9b:e9:f1:dd:64:42:4a:d9:d1:0e:3e: 9c:c0:5a:3f:63:a4:a0:4b:64:d3:7b:13:75:9c:3b: 61:f4:d2:6b:1c:4f:35:76:2e:80:76:fc:68:3c:55: 4b:7c:f4:56:73:39:7d:2f:c2:1a:e7:f2:98:de:37: 2e:f9:a2:e2:02:4c:23:74:15:ad:d8:b6:d5:8a:ac: e5:be:c1:17:ab:fa:0b:63:39:18:8b:a6:b9:8c:e1: 3a:1d:77:aa:91:08:c6:5d:10:3c:5a:a0:67:a5:ba: 71:d6:18:e7:61:77:2b:42:cb:e2:91:72:99:35:a6: d5:01:b2:8a:d7:8c:3a:e6:c5:24:47:c7:e9:85:6f: 05:b7:6b:88:d4:04:98:49:d3:bc:4f:0f:e3:4f:16: f9:c3:ca:27:33:48:c7:99:79:c2:6a:3a:fa:fd:a0: 1c:da:35:40:0a:88:2a:ef:26:74:cf:7d:49:ff:58: ab:5c:03:a9:ab:01:55:d8:f2:86:72:26:64:2c:ec: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:54:A8:B5:25:9E:88:71:83:E6:78:46:A7:1B:C8:35:08:13:5D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7473a689-03f2-3b6d-9bc9-c5819c80585e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 74.121.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b0:9e:d7:af:4a:ab:56:25:d9:5b:24:51:99:85:74:e4:e7: b4:cc:7c:f4:7c:91:eb:32:c6:b0:59:b0:d5:b7:51:ec:d2:b0: 60:f7:94:76:c7:5c:d1:f3:7b:37:61:a8:47:d2:4b:c0:fe:33: ce:5f:a5:90:60:00:77:df:c4:d4:f4:eb:8d:29:51:70:69:3a: 40:93:8d:2e:df:2e:09:f6:2c:d5:c0:47:58:d3:10:f6:a4:07: 53:7b:f6:62:83:98:ff:cb:8c:33:e2:32:d5:e1:f9:82:da:49: 03:5d:10:3f:2a:3d:14:bb:00:61:76:c0:c2:6f:0b:74:ce:66: bc:6d:41:2e:9a:da:aa:c1:c7:32:7c:5e:01:66:a8:87:23:82: d9:73:1a:59:1d:05:4f:08:89:8c:bb:89:8e:ed:ae:0e:2e:70: 39:b8:51:dc:5c:78:76:8b:3e:2d:66:63:b5:ed:06:ea:d7:52: 64:8a:20:f0:47:8f:55:51:86:27:43:0a:ca:5e:05:8f:4c:5a: 06:34:f6:07:e2:c7:36:8c:d1:71:35:32:26:de:6b:4e:7e:1f: 1d:fd:9d:b6:57:76:d0:be:f3:a2:ce:cc:00:bd:30:ff:82:cc: 03:a9:64:18:47:4c:0a:4d:68:83:76:9a:d6:a8:2a:fd:54:a2: 71:16:b3:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vK23d/kfJN2GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk NTU1YTI3NDItMjJkZS00NTI4LTk5MmQtNTY4ZGY0YjkzYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIqPDgOy6A/3WIDqGcH2bDd1phB89/O7XTyh KAnnKgx4OBdhoMyy+TmbU90k/yLEicOg/80xoLG5kIqrUW8Nm+nx3WRCStnRDj6c wFo/Y6SgS2TTexN1nDth9NJrHE81di6AdvxoPFVLfPRWczl9L8Ia5/KY3jcu+aLi AkwjdBWt2LbViqzlvsEXq/oLYzkYi6a5jOE6HXeqkQjGXRA8WqBnpbpx1hjnYXcr QsvikXKZNabVAbKK14w65sUkR8fphW8Ft2uI1ASYSdO8Tw/jTxb5w8onM0jHmXnC ajr6/aAc2jVACogq7yZ0z31J/1irXAOpqwFV2PKGciZkLOyYQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNUqLUlnohxg+Z4RqcbyDUIE12xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzQ3M2E2ODktMDNmMi0z YjZkLTliYzktYzU4MTljODA1ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSnl8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIewntevSqtWJdlbJFGZhXTk57TMfPR8kesyxrBZsNW3UezSsGD3lHbH XNHzezdhqEfSS8D+M85fpZBgAHffxNT0640pUXBpOkCTjS7fLgn2LNXAR1jTEPak B1N79mKDmP/LjDPiMtXh+YLaSQNdED8qPRS7AGF2wMJvC3TOZrxtQS6a2qrBxzJ8 XgFmqIcjgtlzGlkdBU8IiYy7iY7trg4ucDm4UdxceHaLPi1mY7XtBurXUmSKIPBH j1VRhidDCspeBY9MWgY09gfixzaM0XE1Mibea05+Hx39nbZXdtC+86LOzAC9MP+C zAOpZBhHTApNaIN2mtaoKv1UonEWs5I= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:55 2025 by rpki-client