$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa File: 408f67a4-965c-3201-9f19-0975f3af94df.roa (raw, json) Hash identifier: e872zkd0NK4chxoeP7xbC3G2iF3mgwFurJAHY42YbZs= Subject key identifier: 28:96:2D:1E:F7:73:2D:C2:93:7D:C9:FC:1A:F2:0F:FC:95:AF:EB:F2 Certificate issuer: /CN=b9ea3438-4142-4de2-a912-7b081a51b42d Certificate serial: 010D0C9F43285849BDDA3BEDF64276F1D8AD5300 Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 47870 IP address blocks: 74.116.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:3b:ed:f6:42:76:f1:d8:ad:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=85b0bf5c-4c0b-489f-89e1-73a22fb1862d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a5:ae:81:b5:98:c9:1f:2f:05:c0:62:13:9d: 7e:e9:9e:ed:57:be:30:61:66:70:9e:cb:1c:5d:fa: 4a:12:a2:cd:48:8b:c3:bf:db:ab:e5:2b:65:78:14: 8a:73:3c:e0:c2:0a:1f:60:cf:bc:cb:df:9a:2b:ef: 40:1c:65:e0:78:2d:65:43:82:e2:7b:54:f2:0a:a8: a8:b9:93:18:b0:f1:72:e4:f2:ee:58:df:41:ff:ab: de:05:3d:f0:20:99:03:f7:50:8c:fb:2a:51:b7:0b: cc:6e:2c:e5:95:b7:0c:bc:2b:3a:2c:40:3c:9c:2f: 64:ae:91:9e:b4:e1:d2:10:e8:11:aa:b4:7f:89:1c: 56:48:fd:4b:73:be:fc:fe:a0:6d:bc:c7:00:3a:1d: 74:fc:d9:59:7d:88:d7:b1:8b:9c:18:95:96:21:31: c4:79:3a:bf:4b:57:32:b2:c9:d0:0c:11:9f:a6:9f: 98:02:7e:32:d7:fc:16:c2:30:3d:40:4d:4e:da:f3: e4:9b:4d:ca:e6:56:65:ac:ed:40:d5:ad:c1:d4:65: 1c:ab:2d:ca:ab:61:e9:3f:70:af:f5:e0:64:fd:76: 7a:7c:1b:74:e7:f7:31:e3:f6:b9:50:a7:1b:f1:77: ff:23:c5:9b:57:6c:66:59:38:57:f9:25:d7:5b:6e: f0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:96:2D:1E:F7:73:2D:C2:93:7D:C9:FC:1A:F2:0F:FC:95:AF:EB:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/408f67a4-965c-3201-9f19-0975f3af94df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl X509v3 Authority Key Identifier: keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer sbgp-ipAddrBlock: critical IPv4: 74.116.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4f:17:49:e8:1f:ce:c4:bd:fc:17:a9:0d:d5:e0:08:10:ce: 7d:87:5b:e2:40:3b:e9:1b:07:44:6d:bd:e5:8b:b3:a1:a0:7d: 74:dd:a8:74:2d:41:a8:fe:5f:41:42:b5:0a:d2:a2:3e:d4:69: 33:30:39:76:20:42:97:ad:8d:0e:55:cc:25:07:53:7e:b4:ca: 3c:dc:01:82:9a:90:65:fa:2a:3d:1d:c5:87:e5:fe:8f:4b:db: cb:4a:b5:d6:42:83:8d:2f:aa:3a:4d:60:1b:ca:aa:8f:6f:09: fe:16:58:df:4a:0f:d7:02:98:bd:90:44:b9:37:40:fa:17:75: 3b:78:46:88:a6:8d:17:39:5d:a5:27:f3:21:5e:e7:c3:7f:e1: c9:35:de:fa:90:3a:29:4e:ba:3f:0b:bd:ef:b6:07:fa:67:39: 5b:69:f0:76:9e:da:6a:2e:a2:e8:9e:a5:73:9d:11:76:a0:59: 1b:98:4e:8f:ae:42:e1:7a:22:2d:67:a1:b8:83:34:c5:a3:65: f3:b9:99:1d:56:18:dd:c4:ea:c1:51:87:9a:b7:96:09:9a:bd: dd:a9:c9:82:08:62:bf:c3:b4:c2:7e:e1:49:16:4f:54:14:f5: 12:c2:b8:7c:67:36:27:6d:ce:97:aa:25:c5:11:8a:38:1c:3d: 3a:1f:d6:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jvt9kJ28ditUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjllYTM0MzgtNDE0Mi00ZGUyLWE5MTItN2IwODFhNTFi NDJkMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk ODViMGJmNWMtNGMwYi00ODlmLTg5ZTEtNzNhMjJmYjE4NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6WugbWYyR8vBcBiE51+6Z7tV74wYWZwnssc XfpKEqLNSIvDv9ur5StleBSKczzgwgofYM+8y9+aK+9AHGXgeC1lQ4Lie1TyCqio uZMYsPFy5PLuWN9B/6veBT3wIJkD91CM+ypRtwvMbizllbcMvCs6LEA8nC9krpGe tOHSEOgRqrR/iRxWSP1Lc778/qBtvMcAOh10/NlZfYjXsYucGJWWITHEeTq/S1cy ssnQDBGfpp+YAn4y1/wWwjA9QE1O2vPkm03K5lZlrO1A1a3B1GUcqy3Kq2HpP3Cv 9eBk/XZ6fBt05/cx4/a5UKcb8Xf/I8WbV2xmWThX+SXXW27w3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiWLR73cy3Ck33J/BryD/yVr+vyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVh MzQzOC00MTQyLTRkZTItYTkxMi03YjA4MWE1MWI0MmQvNDA4ZjY3YTQtOTY1Yy0z MjAxLTlmMTktMDk3NWYzYWY5NGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjllYTM0MzgtNDE0Mi00ZGUyLWE5 MTItN2IwODFhNTFiNDJkL2I5ZWEzNDM4LTQxNDItNGRlMi1hOTEyLTdiMDgxYTUx YjQyZC5jcmwwHwYDVR0jBBgwFoAUJDliXoh2ePZzmBGt5EgWbTk2r20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOWVhMzQzOC00MTQyLTRkZTItYTkxMi03YjA4 MWE1MWI0MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBPF0noH87EvfwXqQ3V4AgQzn2HW+JAO+kbB0RtveWLs6GgfXTdqHQt Qaj+X0FCtQrSoj7UaTMwOXYgQpetjQ5VzCUHU360yjzcAYKakGX6Kj0dxYfl/o9L 28tKtdZCg40vqjpNYBvKqo9vCf4WWN9KD9cCmL2QRLk3QPoXdTt4RoimjRc5XaUn 8yFe58N/4ck13vqQOilOuj8Lve+2B/pnOVtp8Hae2mououiepXOdEXagWRuYTo+u QuF6Ii1nobiDNMWjZfO5mR1WGN3E6sFRh5q3lgmavd2pyYIIYr/DtMJ+4UkWT1QU 9RLCuHxnNidtzpeqJcURijgcPTof1gw= -----END CERTIFICATE-----Generated at Sun May 11 05:38:43 2025 by rpki-client