$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71726844-e01f-3238-aa40-484e8213af7f.roa File: 71726844-e01f-3238-aa40-484e8213af7f.roa (raw, json) Hash identifier: 7h+nTltmv2j9xTUUPStFSY1h2HN6EqB5U+ykOfFOalU= Subject key identifier: B5:3E:C2:6E:E7:87:31:DB:B7:A7:B9:1B:EF:1D:2F:EC:73:2B:91:24 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4E91314B8F865D975C05F80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71726844-e01f-3238-aa40-484e8213af7f.roa Signing time: Fri 25 Apr 2025 14:36:01 +0000 ROA not before: Fri 25 Apr 2025 14:36:01 +0000 ROA not after: Thu 24 Jul 2025 14:36:01 +0000 asID: 15169 IP address blocks: 74.114.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:e9:13:14:b8:f8:65:d9:75:c0:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 14:36:01 2025 GMT Not After : Jul 24 14:36:01 2025 GMT Subject: CN=7f5a090e-4ec8-4a6e-8f9a-6f39e658ed88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:a5:78:d2:f8:c8:a8:2f:e4:aa:aa:19:6f: 5a:1e:e0:65:30:c5:fd:53:a1:81:ab:2c:a5:9e:e2: 3c:e6:7f:68:2e:ed:1f:71:71:d1:d9:b6:1a:91:11: 52:62:b4:40:69:2d:02:6a:b3:ad:64:59:3d:6f:99: c9:1f:d6:5d:81:73:2c:14:a6:f6:b1:bd:25:c9:5d: bb:25:25:95:cf:31:0a:c5:34:56:c5:d9:d1:3c:41: 1f:1a:bc:a2:92:59:ac:88:c4:27:90:aa:b4:d6:8a: b6:25:37:7b:dd:c1:e5:0e:65:2f:17:fe:23:84:13: 98:24:33:6b:4b:20:c4:18:27:94:c8:64:9e:5e:2d: 85:20:96:97:24:fe:3b:d9:5c:04:9d:47:18:bf:6a: 68:86:36:92:51:04:b8:ba:52:8e:f7:8e:cc:87:66: 80:30:0c:2c:9a:b5:91:80:8b:0f:23:b0:1f:8a:22: 48:16:4c:ae:cf:3c:36:61:30:c3:ed:9a:df:de:54: c0:22:f6:0a:c3:92:93:01:54:54:a0:65:45:44:e8: ba:b7:74:a8:b6:43:b2:01:59:41:23:12:d4:14:32: 17:a6:0d:07:64:99:21:ed:01:95:07:9f:6e:6b:ae: 6f:54:27:cd:bd:b9:86:d9:59:c8:f3:06:68:44:1f: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3E:C2:6E:E7:87:31:DB:B7:A7:B9:1B:EF:1D:2F:EC:73:2B:91:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71726844-e01f-3238-aa40-484e8213af7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 74.114.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d1:a9:be:84:37:04:3d:dc:43:64:f1:a4:cb:49:b9:fb:18: ac:88:43:7d:06:70:86:38:73:41:60:de:5e:f7:0f:9f:18:33: 8e:f1:fb:1d:31:22:61:de:32:22:38:b9:dc:6e:06:11:97:98: 2e:7d:4f:b0:10:4b:33:53:6e:98:62:48:c4:53:ca:f8:db:20: dc:c1:45:a9:b8:87:9d:65:7f:6b:ef:17:75:8f:b7:31:a7:28: c4:91:78:55:62:a7:fc:71:33:92:42:a8:77:ee:62:df:22:10: 4e:77:3b:25:86:14:65:35:fd:09:bb:30:ca:9e:6a:2f:25:28: 75:02:b9:27:3c:77:f0:b8:ef:5c:02:74:32:8a:d5:48:7d:81: be:96:51:85:b5:d0:fd:3a:0e:f4:26:2e:b1:a3:b1:f1:a7:3d: 84:05:1b:97:73:62:23:e7:73:46:3b:9d:d3:e9:f6:56:c1:18: 00:fe:26:f3:8e:0b:29:86:98:52:1d:c5:1d:6f:00:c2:4e:89: 8a:52:39:3b:02:48:0f:bd:08:8d:63:b1:11:45:39:ca:e9:e7: ac:40:49:6f:cc:8c:26:d5:68:35:ac:7c:bb:51:14:3c:b7:8f: 8c:24:be:89:65:09:7e:5e:e3:e8:2b:bb:24:93:bc:a6:58:e3: 55:d3:94:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmk6RMUuPhl2XXAX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTE0MzYwMVoXDTI1MDcyNDE0MzYwMVowLzEtMCsGA1UEAxMk N2Y1YTA5MGUtNGVjOC00YTZlLThmOWEtNmYzOWU2NThlZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZaleNL4yKgv5KqqGW9aHuBlMMX9U6GBqyyl nuI85n9oLu0fcXHR2bYakRFSYrRAaS0CarOtZFk9b5nJH9ZdgXMsFKb2sb0lyV27 JSWVzzEKxTRWxdnRPEEfGryiklmsiMQnkKq01oq2JTd73cHlDmUvF/4jhBOYJDNr SyDEGCeUyGSeXi2FIJaXJP472VwEnUcYv2pohjaSUQS4ulKO947Mh2aAMAwsmrWR gIsPI7AfiiJIFkyuzzw2YTDD7Zrf3lTAIvYKw5KTAVRUoGVFROi6t3SotkOyAVlB IxLUFDIXpg0HZJkh7QGVB59ua65vVCfNvbmG2VnI8wZoRB8tqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU+wm7nhzHbt6e5G+8dL+xzK5EkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzE3MjY4NDQtZTAxZi0z MjM4LWFhNDAtNDg0ZTgyMTNhZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbRqb6ENwQ93ENk8aTLSbn7GKyIQ30GcIY4c0Fg3l73D58YM47x+x0x ImHeMiI4udxuBhGXmC59T7AQSzNTbphiSMRTyvjbINzBRam4h51lf2vvF3WPtzGn KMSReFVip/xxM5JCqHfuYt8iEE53OyWGFGU1/Qm7MMqeai8lKHUCuSc8d/C471wC dDKK1Uh9gb6WUYW10P06DvQmLrGjsfGnPYQFG5dzYiPnc0Y7ndPp9lbBGAD+JvOO CymGmFIdxR1vAMJOiYpSOTsCSA+9CI1jsRFFOcrp56xASW/MjCbVaDWsfLtRFDy3 j4wkvollCX5e4+gruySTvKZY41XTlGg= -----END CERTIFICATE-----Generated at Sun Apr 27 12:58:59 2025 by rpki-client