$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa File: 74f2a10b-925e-38b0-81ad-f1d909f42057.roa (raw, json) Hash identifier: MCq7z8nZ56yfpzN/q5xflsL9BInq6lIp+Yo4tGNOEpA= Subject key identifier: A6:5F:F1:5F:47:F2:9C:7E:94:F2:FD:CB:2B:7D:9E:AD:1A:7E:7E:36 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858493C092C9F44A355FCC3563A00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 35908 IP address blocks: 74.222.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:2c:9f:44:a3:55:fc:c3:56:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=5f2d39b3-3c2b-4995-8c52-842afa40c9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1f:d8:20:ae:1c:f3:fe:61:4b:4d:77:d9:07: 24:9c:e1:30:7e:36:09:94:81:63:81:56:d7:e6:05: 73:13:cf:98:97:a0:f4:e1:2d:e2:20:fb:24:ad:a8: 28:39:15:2b:97:ef:d1:9e:2b:86:20:09:ae:4e:cc: 60:1b:85:ee:80:17:57:fc:63:47:46:95:bc:7a:3d: 3b:c8:af:e2:de:29:27:5d:3a:34:b8:32:57:88:8e: 2a:ef:db:4d:5c:be:db:f2:90:3e:1f:43:4c:12:9f: 48:70:c5:c6:0a:4a:af:c2:a9:1f:94:35:fa:0d:42: c4:c4:2e:c8:ec:db:0c:e5:76:c4:3d:7c:58:f0:70: 33:45:7d:86:7f:42:ee:43:3d:b4:ad:5b:52:9d:d4: dc:27:a6:7b:78:18:77:2f:89:d5:c3:02:fe:79:5b: 77:05:81:46:85:f8:3a:b1:53:0f:11:c3:d3:b4:74: 38:9b:80:a6:09:66:0c:2f:37:cb:52:8c:d9:3a:18: f6:28:9f:85:57:fd:59:e7:4b:c8:ab:74:88:97:eb: 64:df:a6:2c:e7:b9:b2:a2:3c:55:69:0e:bd:65:e8: 29:3c:50:82:0f:75:18:9c:b6:ec:87:c4:17:ee:e3: d1:02:2d:24:19:3c:8e:4a:e4:ef:90:11:7e:51:d9: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5F:F1:5F:47:F2:9C:7E:94:F2:FD:CB:2B:7D:9E:AD:1A:7E:7E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/74f2a10b-925e-38b0-81ad-f1d909f42057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 74.222.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4b:f4:0a:4f:00:09:e7:38:c1:c8:ec:ee:dc:40:3c:ac:95: 9d:8d:45:e9:63:10:6d:bf:c1:2c:df:4d:01:63:1f:dd:e0:2f: 15:87:21:b6:2b:8d:75:c2:90:df:bb:45:56:8e:ec:68:05:f5: 6d:e9:30:10:2e:fe:87:c8:07:82:54:10:8b:f9:3f:ad:a6:92: c0:f4:c8:a5:43:7d:68:12:b7:4a:a5:58:c4:84:8c:71:a8:d1: d9:02:25:40:f7:a1:7d:a5:b4:d4:d2:d3:35:cc:4b:09:21:0c: 0a:f6:69:1e:12:17:be:22:7d:98:31:34:f5:eb:cf:e0:7a:5a: ec:71:a3:80:e9:fc:09:76:19:2d:6c:16:de:da:2e:44:ae:dc: 67:37:b3:2e:28:8e:58:35:b3:e9:b1:e7:b3:d0:1c:a5:5f:3e: d2:80:be:ff:f5:d4:e3:97:09:4e:7d:d2:38:5b:85:02:97:50: 83:03:20:87:6d:5d:7f:c6:43:a5:d0:96:fa:e0:31:26:d8:ba: 0c:81:e8:77:6b:14:29:e0:94:14:79:a6:4a:1b:8a:8e:79:24: 9a:23:98:2a:83:4d:7b:c6:a4:3f:f4:67:31:9a:18:50:cc:10: 24:fa:b4:54:bf:af:91:0d:e7:f7:95:10:70:27:ae:5f:c1:d4: 5f:bd:08:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSyfRKNV/MNWOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NWYyZDM5YjMtM2MyYi00OTk1LThjNTItODQyYWZhNDBjOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB/YIK4c8/5hS0132QcknOEwfjYJlIFjgVbX 5gVzE8+Yl6D04S3iIPskragoORUrl+/RniuGIAmuTsxgG4XugBdX/GNHRpW8ej07 yK/i3iknXTo0uDJXiI4q79tNXL7b8pA+H0NMEp9IcMXGCkqvwqkflDX6DULExC7I 7NsM5XbEPXxY8HAzRX2Gf0LuQz20rVtSndTcJ6Z7eBh3L4nVwwL+eVt3BYFGhfg6 sVMPEcPTtHQ4m4CmCWYMLzfLUozZOhj2KJ+FV/1Z50vIq3SIl+tk36Ys57myojxV aQ69ZegpPFCCD3UYnLbsh8QX7uPRAi0kGTyOSuTvkBF+Udm6GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZf8V9H8px+lPL9yyt9nq0afn42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNzRmMmExMGItOTI1ZS0z OGIwLTgxYWQtZjFkOTA5ZjQyMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSt6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFL9ApPAAnnOMHI7O7cQDyslZ2NReljEG2/wSzfTQFjH93gLxWHIbYr jXXCkN+7RVaO7GgF9W3pMBAu/ofIB4JUEIv5P62mksD0yKVDfWgSt0qlWMSEjHGo 0dkCJUD3oX2ltNTS0zXMSwkhDAr2aR4SF74ifZgxNPXrz+B6Wuxxo4Dp/Al2GS1s Ft7aLkSu3Gc3sy4ojlg1s+mx57PQHKVfPtKAvv/11OOXCU590jhbhQKXUIMDIIdt XX/GQ6XQlvrgMSbYugyB6HdrFCnglBR5pkobio55JJojmCqDTXvGpD/0ZzGaGFDM ECT6tFS/r5EN5/eVEHAnrl/B1F+9CHI= -----END CERTIFICATE-----Generated at Sat May 10 21:02:14 2025 by rpki-client