$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/f15006e2-b451-3ec6-8046-7a16333e00fc.roa File: f15006e2-b451-3ec6-8046-7a16333e00fc.roa (raw, json) Hash identifier: aVlUAEuDJEmsX+voZbww0x9CI8qp2niLKJVVVXYtjHc= Subject key identifier: 5D:EC:F9:1C:8F:89:95:DA:2C:32:36:E3:EF:BC:4D:4D:F8:D5:FF:79 Certificate issuer: /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Certificate serial: 010D0C9F43285849BB0F714C0D248BEFEAE94800 Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/f15006e2-b451-3ec6-8046-7a16333e00fc.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 18486 IP address blocks: 74.220.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:71:4c:0d:24:8b:ef:ea:e9:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=3cb539ae-69fb-4ae6-9d5e-40084b70ba48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:41:da:d6:55:e0:c8:93:ae:76:aa:e0:a1: be:21:6c:d9:71:44:9c:58:ac:99:37:b0:90:78:2b: c6:4a:db:93:8f:19:e1:f7:9a:6b:bd:ad:84:6c:54: f3:41:d9:5f:77:99:33:b4:cd:4e:23:cb:7b:c3:46: b8:27:6b:9b:27:be:98:c4:0d:44:09:41:c8:e9:39: eb:29:64:69:6c:2e:9a:90:d9:e1:81:70:55:0a:17: 05:92:4a:33:87:ce:c2:bd:e7:6d:7a:e5:78:8c:ee: 34:75:a3:49:b0:fb:33:c9:c4:73:b5:04:2e:6e:63: 69:b7:5b:db:c8:05:ef:ac:16:a6:91:b3:eb:ec:cd: 18:a3:e9:01:20:31:ce:3a:e9:f5:7d:0b:15:a3:54: a3:24:47:ac:5e:0b:9a:48:b0:f8:4c:77:21:94:17: 35:1d:50:3d:5d:e3:96:e1:cd:37:51:77:54:58:aa: ec:cb:15:42:10:2f:32:1b:dd:5a:70:ff:90:96:3a: 33:ad:e1:90:ac:1f:2e:4e:f7:41:05:f8:5c:bf:4b: 6f:66:01:3d:31:f9:53:d9:56:d3:14:f8:9a:1d:15: 39:8f:54:ea:bc:f9:f5:7f:b2:90:0f:a6:d2:e3:43: d3:15:47:0d:25:63:1c:d3:e1:51:2f:2b:73:0b:3c: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EC:F9:1C:8F:89:95:DA:2C:32:36:E3:EF:BC:4D:4D:F8:D5:FF:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/f15006e2-b451-3ec6-8046-7a16333e00fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl X509v3 Authority Key Identifier: keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer sbgp-ipAddrBlock: critical IPv4: 74.220.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4d:2d:86:3c:0d:63:63:49:32:46:39:f7:cb:51:fc:d0:02: e8:73:35:0e:25:2c:36:7a:06:1f:a3:73:ee:30:ac:b3:ec:5b: 10:a4:38:c1:b8:e0:0d:4d:99:c2:ad:af:ab:74:f0:cb:c6:d1: db:f8:5c:32:8c:83:0a:ed:a3:7a:e6:5e:ed:fa:15:6c:48:a4: 1b:93:b6:c0:4c:81:b1:df:81:28:8c:9c:65:22:2e:f0:00:3a: 39:bd:7a:12:07:d0:54:11:51:66:68:0a:47:75:0f:6d:bc:6b: cf:81:1f:b5:b9:b7:95:7f:5a:d0:36:89:3c:8f:d4:e7:09:1b: c9:ea:35:93:48:23:0d:2e:f8:0e:87:73:7a:4b:f0:01:32:40: 57:a9:93:f8:03:a7:80:29:53:1a:6e:42:d8:48:4f:27:e7:eb: 9a:bc:54:43:67:19:8e:61:d7:79:b0:f2:66:bd:44:ce:02:80: 91:17:83:9c:e2:12:ff:c7:f6:ef:45:5c:e5:da:e5:c8:6a:13: 4a:10:cf:04:51:bb:9c:f1:10:cb:1b:99:04:06:79:fa:97:e6: f1:39:36:78:de:2f:05:56:31:b9:49:55:96:b5:f5:5a:d1:6c: 7b:09:53:c4:09:bc:4d:0c:24:41:94:ee:e9:c9:e8:3f:54:e3: f3:cf:cf:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3FMDSSL7+rpSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmI2MzM4ZTgtM2I5OC00NWMwLTkzNmEtZjc1MzJkMTRj MTZiMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk M2NiNTM5YWUtNjlmYi00YWU2LTlkNWUtNDAwODRiNzBiYTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+5B2tZV4MiTrnaq4KG+IWzZcUScWKyZN7CQ eCvGStuTjxnh95prva2EbFTzQdlfd5kztM1OI8t7w0a4J2ubJ76YxA1ECUHI6Tnr KWRpbC6akNnhgXBVChcFkkozh87CvedteuV4jO40daNJsPszycRztQQubmNpt1vb yAXvrBamkbPr7M0Yo+kBIDHOOun1fQsVo1SjJEesXguaSLD4THchlBc1HVA9XeOW 4c03UXdUWKrsyxVCEC8yG91acP+QljozreGQrB8uTvdBBfhcv0tvZgE9MflT2VbT FPiaHRU5j1TqvPn1f7KQD6bS40PTFUcNJWMc0+FRLytzCzwgIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3s+RyPiZXaLDI24++8TU341f95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYz MzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUzMmQxNGMxNmIvZjE1MDA2ZTItYjQ1MS0z ZWM2LTgwNDYtN2ExNjMzM2UwMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmI2MzM4ZTgtM2I5OC00NWMwLTkz NmEtZjc1MzJkMTRjMTZiL2JiNjMzOGU4LTNiOTgtNDVjMC05MzZhLWY3NTMyZDE0 YzE2Yi5jcmwwHwYDVR0jBBgwFoAUNPbX9h2WrJ6QQudVuREQXgnNTIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjYzMzhlOC0zYjk4LTQ1YzAtOTM2YS1mNzUz MmQxNGMxNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5NLYY8DWNjSTJGOffLUfzQAuhzNQ4lLDZ6Bh+jc+4wrLPsWxCkOMG4 4A1NmcKtr6t08MvG0dv4XDKMgwrto3rmXu36FWxIpBuTtsBMgbHfgSiMnGUiLvAA Ojm9ehIH0FQRUWZoCkd1D228a8+BH7W5t5V/WtA2iTyP1OcJG8nqNZNIIw0u+A6H c3pL8AEyQFepk/gDp4ApUxpuQthITyfn65q8VENnGY5h13mw8ma9RM4CgJEXg5zi Ev/H9u9FXOXa5chqE0oQzwRRu5zxEMsbmQQGefqX5vE5NnjeLwVWMblJVZa19VrR bHsJU8QJvE0MJEGU7unJ6D9U4/PPz5E= -----END CERTIFICATE-----Generated at Sun May 11 16:40:09 2025 by rpki-client