$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa File: 4a94a50c-a556-39b0-83af-a1d6940051da.roa (raw, json) Hash identifier: eEPH6qM5rcU92iSWHI22vREx+0wXmRwkrwE8TitZQfQ= Subject key identifier: 6B:DB:99:9F:10:1D:39:AF:0F:07:A8:23:A7:83:C0:0D:2D:57:A6:82 Certificate issuer: /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Certificate serial: 010D0C9F43285849BDDA2107A89451ABCE3B3480 Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 18491 IP address blocks: 74.220.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:21:07:a8:94:51:ab:ce:3b:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=3c85f06a-1d1c-43d4-8916-7869e1b3bbf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dd:85:57:80:e5:3a:06:68:11:f8:c2:4a:86: 40:f4:ef:a3:2b:9e:9a:07:37:4c:b6:35:2a:08:94: ee:32:8a:12:6b:11:1e:1b:b2:5f:c2:6d:7e:9c:18: c3:b8:72:32:f4:34:60:bd:03:11:f3:16:6f:35:5b: fd:38:74:8e:34:57:cd:32:62:7b:59:50:0f:8a:fe: 93:e1:fb:f2:e7:87:fc:d2:6d:21:79:c4:eb:e4:70: 8f:6d:da:0f:5c:54:b5:89:65:e4:3c:c1:49:2a:db: 37:fc:19:d8:45:da:9a:e0:9e:2c:b0:96:29:dc:53: 81:ee:d5:56:7f:02:58:a0:f3:3f:72:d6:42:69:a9: bf:60:b7:da:a1:e5:f4:5a:f5:c6:2b:a1:38:a4:34: d6:3d:7f:61:43:81:cb:8a:c7:d8:f1:f0:ef:15:f1: 57:95:7e:aa:e1:0f:ff:8b:a1:22:67:f2:d1:88:2e: 88:24:e6:31:40:6a:fb:03:fe:80:ab:66:c4:34:92: e3:c7:00:c0:03:b6:ad:df:5f:29:68:f9:b0:ce:93: 3c:20:7c:71:96:a0:24:ef:43:26:e6:6c:9a:1f:87: 56:6b:02:66:d2:5b:5d:86:e9:1e:01:ff:7c:d0:24: 06:fd:10:4b:67:91:54:60:6b:f8:bb:58:f1:f7:09: 26:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DB:99:9F:10:1D:39:AF:0F:07:A8:23:A7:83:C0:0D:2D:57:A6:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4a94a50c-a556-39b0-83af-a1d6940051da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl X509v3 Authority Key Identifier: keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer sbgp-ipAddrBlock: critical IPv4: 74.220.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:db:9e:67:8f:59:94:ce:b5:16:bb:95:df:29:d1:da:cb:3e: 89:fe:96:32:f8:0a:27:f0:e5:2e:d0:64:23:fc:7e:05:65:ee: 1a:18:85:a5:5b:3a:a8:84:a9:4c:89:76:d0:f7:ec:be:5b:96: 47:40:d7:46:a8:97:f1:16:9f:c7:b6:d5:7b:26:2f:4a:aa:d8: c7:97:75:ab:7e:cc:e5:a0:a6:11:c2:11:06:cb:3a:99:14:94: a8:0c:1c:1e:07:8d:30:c5:20:b4:ce:81:5d:bc:67:0f:28:66: 62:41:ce:dd:a2:e5:b6:a1:fb:73:91:10:d7:22:a6:10:20:96: 0c:10:a3:e8:2f:6c:4d:39:e9:26:d4:c8:8b:e1:11:19:03:24: 64:c1:fc:f1:3d:02:4f:46:18:5d:64:df:15:ae:05:6d:01:13: fd:9a:d0:4c:3f:38:b2:d3:c5:4b:f2:48:26:c2:e7:c6:99:10: 3b:8e:7c:3a:0d:f8:1d:a0:de:95:57:10:23:96:da:4d:71:81: a0:24:21:22:f3:45:6e:e0:90:25:01:b3:58:01:21:35:c3:6a: 97:c0:5a:6f:3b:bb:44:a6:51:6f:b3:94:32:d1:fc:3a:c7:2e: c9:9c:ca:94:41:55:a6:41:da:d3:a8:dd:f1:59:7b:c1:68:34: 77:f3:72:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iEHqJRRq847NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2MzM4ZTgtM2I5OC00NWMwLTkzNmEtZjc1MzJkMTRj MTZiMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk M2M4NWYwNmEtMWQxYy00M2Q0LTg5MTYtNzg2OWUxYjNiYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN2FV4DlOgZoEfjCSoZA9O+jK56aBzdMtjUq CJTuMooSaxEeG7Jfwm1+nBjDuHIy9DRgvQMR8xZvNVv9OHSONFfNMmJ7WVAPiv6T 4fvy54f80m0hecTr5HCPbdoPXFS1iWXkPMFJKts3/BnYRdqa4J4ssJYp3FOB7tVW fwJYoPM/ctZCaam/YLfaoeX0WvXGK6E4pDTWPX9hQ4HLisfY8fDvFfFXlX6q4Q// i6EiZ/LRiC6IJOYxQGr7A/6Aq2bENJLjxwDAA7at318paPmwzpM8IHxxlqAk70Mm 5myaH4dWawJm0ltdhukeAf980CQG/RBLZ5FUYGv4u1jx9wkmlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvbmZ8QHTmvDweoI6eDwA0tV6aCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYz MzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUzMmQxNGMxNmIvNGE5NGE1MGMtYTU1Ni0z OWIwLTgzYWYtYTFkNjk0MDA1MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmI2MzM4ZTgtM2I5OC00NWMwLTkz NmEtZjc1MzJkMTRjMTZiL2JiNjMzOGU4LTNiOTgtNDVjMC05MzZhLWY3NTMyZDE0 YzE2Yi5jcmwwHwYDVR0jBBgwFoAUNPbX9h2WrJ6QQudVuREQXgnNTIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYzMzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUz MmQxNGMxNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHbnmePWZTOtRa7ld8p0drLPon+ljL4Cifw5S7QZCP8fgVl7hoYhaVb OqiEqUyJdtD37L5blkdA10aol/EWn8e21XsmL0qq2MeXdat+zOWgphHCEQbLOpkU lKgMHB4HjTDFILTOgV28Zw8oZmJBzt2i5bah+3ORENciphAglgwQo+gvbE056SbU yIvhERkDJGTB/PE9Ak9GGF1k3xWuBW0BE/2a0Ew/OLLTxUvySCbC58aZEDuOfDoN +B2g3pVXECOW2k1xgaAkISLzRW7gkCUBs1gBITXDapfAWm87u0SmUW+zlDLR/DrH LsmcypRBVaZB2tOo3fFZe8FoNHfzco8= -----END CERTIFICATE-----Generated at Mon May 12 17:30:02 2025 by rpki-client