$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa File: 71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa (raw, json) Hash identifier: DYOKRWC4/OWmV4sUnRoyQh5HjbaaMqA3z3mrrIbFq0k= Subject key identifier: 05:23:8A:B0:AF:68:46:E1:82:B8:9E:23:81:33:20:3E:A9:8C:6D:2D Certificate issuer: /CN=596b4033-5941-4cf0-b653-ae8f2b41c5e7 Certificate serial: 010D0C9F43285849A1EF7270DAB42D94306CB200 Authority key identifier: 89:E4:82:64:7B:68:AE:88:72:7C:95:8A:20:9A:06:F5:9D:33:21:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 23097 IP address blocks: 74.80.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:72:70:da:b4:2d:94:30:6c:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=596b4033-5941-4cf0-b653-ae8f2b41c5e7 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=5bf9fb9a-8cfd-47ff-8c03-54fc06c83248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c3:6a:8d:f5:99:f2:0f:00:55:8d:48:e3:ba: 5d:97:dd:1b:db:e8:dd:27:97:d2:41:bb:1c:cf:70: 22:eb:b8:5f:e1:c8:59:bf:63:85:23:49:0b:5e:31: 78:ea:94:76:dc:7f:cd:1b:ef:07:bb:cf:db:d9:01: 73:2e:34:a0:31:2b:88:1b:da:03:fd:99:ad:56:48: 1d:5c:95:e0:5d:a8:8a:d2:8e:12:e7:e4:ec:e8:bc: b2:fe:7a:60:14:4f:32:fa:12:e9:f8:68:98:a1:f2: 36:5b:3c:20:60:9e:34:91:50:36:67:87:bd:20:59: 38:4b:e0:16:d4:0b:85:f8:8a:60:3c:ba:14:98:c7: 62:e4:03:36:82:48:98:e0:62:9f:8f:e8:52:2d:5c: 74:ef:67:92:4b:8e:7f:d1:25:76:08:50:cc:b2:b9: f5:9d:20:bb:14:2e:a5:03:44:4d:39:7b:2f:a8:37: bd:ca:ab:fe:59:70:7d:6e:90:6e:46:00:98:d0:4b: 14:52:cf:bf:34:3c:bc:5f:68:b6:1c:3f:44:4b:36: f6:8b:aa:70:3c:24:1f:37:b9:8b:69:9e:82:06:09: 92:fb:d8:2a:32:61:71:16:45:80:e6:81:fb:6a:d5: 2d:49:96:6c:65:d8:08:65:1d:ea:a0:99:0d:86:d2: 0d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:23:8A:B0:AF:68:46:E1:82:B8:9E:23:81:33:20:3E:A9:8C:6D:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.crl X509v3 Authority Key Identifier: keyid:89:E4:82:64:7B:68:AE:88:72:7C:95:8A:20:9A:06:F5:9D:33:21:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer sbgp-ipAddrBlock: critical IPv4: 74.80.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e7:d2:2d:e9:f2:1a:98:02:bc:52:f8:81:0c:85:41:61:9d: 8a:64:60:ee:cc:0e:fc:6a:22:9f:c8:e2:c1:9a:24:4d:03:4b: 15:3d:1c:58:52:85:38:65:12:64:6b:1a:c2:a7:db:a1:5e:54: 7f:51:e4:b6:a5:5d:db:ee:55:e0:98:f0:41:d5:bc:a5:25:3f: ab:f9:fb:ca:22:89:4b:75:d5:eb:bc:62:6b:9f:d2:a5:62:b6: d3:86:26:e3:d2:8f:1d:8c:94:e9:d1:73:67:f5:32:f6:5c:e2: b1:6a:ea:b0:9a:df:d8:b3:d6:b6:fe:97:f8:88:b1:f4:17:d8: bf:7c:1d:ce:6d:f2:bd:a1:9b:f5:3c:20:77:bd:51:93:88:cd: 2e:a7:c0:19:d4:dd:4f:41:fb:9d:2c:1c:01:e7:ba:14:ff:ff: d2:52:da:a3:92:e8:43:e6:ed:39:f1:5b:6d:81:7f:83:6e:ad: b8:0d:45:ba:12:49:cd:52:33:fb:70:47:7f:b1:09:9d:95:bd: 48:98:e0:01:6e:0d:f6:a8:bc:3a:14:ae:ba:89:0c:06:de:94: 5c:e4:c9:f9:3b:b2:50:3c:00:84:19:b8:ca:98:63:d5:d8:41: fa:49:a2:9b:21:42:c7:4b:53:ed:4a:e7:6d:ff:39:53:c8:c6: 43:53:70:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73Jw2rQtlDBssgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTk2YjQwMzMtNTk0MS00Y2YwLWI2NTMtYWU4ZjJiNDFj NWU3MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NWJmOWZiOWEtOGNmZC00N2ZmLThjMDMtNTRmYzA2YzgzMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcNqjfWZ8g8AVY1I47pdl90b2+jdJ5fSQbsc z3Ai67hf4chZv2OFI0kLXjF46pR23H/NG+8Hu8/b2QFzLjSgMSuIG9oD/ZmtVkgd XJXgXaiK0o4S5+Ts6Lyy/npgFE8y+hLp+GiYofI2WzwgYJ40kVA2Z4e9IFk4S+AW 1AuF+IpgPLoUmMdi5AM2gkiY4GKfj+hSLVx072eSS45/0SV2CFDMsrn1nSC7FC6l A0RNOXsvqDe9yqv+WXB9bpBuRgCY0EsUUs+/NDy8X2i2HD9ESzb2i6pwPCQfN7mL aZ6CBgmS+9gqMmFxFkWA5oH7atUtSZZsZdgIZR3qoJkNhtINJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUjirCvaEbhgrieI4EzID6pjG0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81OTZi NDAzMy01OTQxLTRjZjAtYjY1My1hZThmMmI0MWM1ZTcvNzE0MDdlYzgtY2MxYy0z M2VlLWFiOWQtMjgxZGRhZjAzMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTk2YjQwMzMtNTk0MS00Y2YwLWI2 NTMtYWU4ZjJiNDFjNWU3LzU5NmI0MDMzLTU5NDEtNGNmMC1iNjUzLWFlOGYyYjQx YzVlNy5jcmwwHwYDVR0jBBgwFoAUieSCZHtorohyfJWKIJoG9Z0zIZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81OTZiNDAzMy01OTQxLTRjZjAtYjY1My1hZThm MmI0MWM1ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzn0i3p8hqYArxS+IEMhUFhnYpkYO7MDvxqIp/I4sGaJE0DSxU9HFhS hThlEmRrGsKn26FeVH9R5LalXdvuVeCY8EHVvKUlP6v5+8oiiUt11eu8Ymuf0qVi ttOGJuPSjx2MlOnRc2f1MvZc4rFq6rCa39iz1rb+l/iIsfQX2L98Hc5t8r2hm/U8 IHe9UZOIzS6nwBnU3U9B+50sHAHnuhT//9JS2qOS6EPm7TnxW22Bf4NurbgNRboS Sc1SM/twR3+xCZ2VvUiY4AFuDfaovDoUrrqJDAbelFzkyfk7slA8AIQZuMqYY9XY QfpJopshQsdLU+1K523/OVPIxkNTcOM= -----END CERTIFICATE-----Generated at Sat May 10 07:59:00 2025 by rpki-client