$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/360a93b8-4808-3416-8901-048610835692.roa File: 360a93b8-4808-3416-8901-048610835692.roa (raw, json) Hash identifier: WJvSQgT0kJZOY9aeqBrKB/KnW+Sl/nK+RB+5DwwMMuo= Subject key identifier: 21:0F:99:CC:B0:50:4E:92:ED:20:8C:4D:0C:65:0D:63:A0:F0:46:12 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584979744118BCE092D0E77E6D00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/360a93b8-4808-3416-8901-048610835692.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 398420 IP address blocks: 74.126.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:41:18:bc:e0:92:d0:e7:7e:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=cc414def-b824-4fda-989d-ba636b0b42f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:4d:b2:b7:af:56:c5:11:1d:86:ba:36:18: 36:17:d3:4c:83:83:6b:e8:b2:3e:8a:c9:61:8f:96: 82:af:9b:0f:62:88:dd:dc:23:2b:e0:f4:a6:75:1a: 92:30:b5:b5:32:13:3d:ce:56:0f:52:0e:fa:20:10: cd:64:69:26:59:98:d9:49:2d:6b:10:5a:b0:cd:9c: a0:a1:16:32:cd:02:11:10:cd:44:e1:52:f2:65:e9: 23:bb:de:f9:5c:f8:90:d3:34:40:2c:7f:88:b3:f9: 8b:0c:bd:d0:05:cc:31:6b:50:09:3b:9c:98:92:ac: 18:0a:49:43:1d:a0:c1:1c:11:e4:9d:91:d3:60:a6: ec:c6:31:98:97:34:f0:02:e8:9a:39:ea:d7:31:14: fb:fd:cb:8d:fd:ef:ef:8a:54:33:30:43:25:3d:fd: d0:c3:2b:d3:3d:43:75:0e:dc:b5:d6:f3:4a:05:ce: 84:5d:7e:13:19:67:7d:31:50:d6:89:eb:f7:9f:f4: a8:e2:e3:26:94:2c:cb:be:3e:3f:01:dc:85:9f:ff: 1c:41:af:39:df:ab:15:cf:a9:11:7c:3e:da:80:55: 0f:65:3c:ab:e1:fc:6e:d5:76:b8:d3:ac:e1:74:1e: 98:5e:20:f9:5e:af:9f:a8:e9:10:2c:9d:f8:14:54: c9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0F:99:CC:B0:50:4E:92:ED:20:8C:4D:0C:65:0D:63:A0:F0:46:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/360a93b8-4808-3416-8901-048610835692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:c6:5c:53:57:47:21:91:53:ea:06:6f:8b:54:07:68:1f:f2: 8a:84:e3:8a:5c:d3:96:af:e9:be:fd:85:9f:c3:63:b1:f6:93: d5:14:db:e0:e2:87:04:04:b4:6e:4a:61:dd:85:40:d1:21:2a: cd:6e:b8:d3:2e:a3:34:01:1d:55:eb:42:6d:e8:2a:79:74:c6: fe:77:c5:e1:ca:f8:a6:bb:f3:1e:64:60:a9:78:8b:99:9e:27: 05:d1:6d:86:f2:1a:b3:c0:e3:fd:b1:17:96:4b:6f:37:0f:9b: ca:3d:9e:c1:65:be:28:1c:41:9e:dc:83:91:4e:ac:dd:5d:1d: b8:45:31:0b:4f:06:71:aa:da:6e:8a:13:c2:a1:02:b8:4e:ab: 9c:80:d8:98:e0:41:ef:21:a7:3c:16:12:38:06:8d:82:f8:ba: b6:27:be:c0:3c:ba:5d:4b:9b:98:13:d5:fe:f2:f6:f2:2d:18: 43:b7:32:1b:4c:41:35:47:cc:b8:73:67:63:f7:df:e1:6a:e1: 0b:a3:57:28:83:ad:89:55:90:7d:eb:a9:f1:87:7c:3f:46:05: 99:95:ee:1a:3d:bc:92:ff:3d:28:8a:dc:6d:b4:29:92:2c:7e: 9f:f0:3d:17:10:d2:99:5e:b1:79:76:af:34:e2:e5:45:a1:bf: 97:c8:9c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEEYvOCS0Od+bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk Y2M0MTRkZWYtYjgyNC00ZmRhLTk4OWQtYmE2MzZiMGI0MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07pNsrevVsURHYa6Nhg2F9NMg4Nr6LI+islh j5aCr5sPYojd3CMr4PSmdRqSMLW1MhM9zlYPUg76IBDNZGkmWZjZSS1rEFqwzZyg oRYyzQIREM1E4VLyZekju975XPiQ0zRALH+Is/mLDL3QBcwxa1AJO5yYkqwYCklD HaDBHBHknZHTYKbsxjGYlzTwAuiaOerXMRT7/cuN/e/vilQzMEMlPf3QwyvTPUN1 Dty11vNKBc6EXX4TGWd9MVDWiev3n/So4uMmlCzLvj4/AdyFn/8cQa8536sVz6kR fD7agFUPZTyr4fxu1Xa406zhdB6YXiD5Xq+fqOkQLJ34FFTJrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEPmcywUE6S7SCMTQxlDWOg8EYSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMzYwYTkzYjgtNDgwOC0z NDE2LTg5MDEtMDQ4NjEwODM1NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLGXFNXRyGRU+oGb4tUB2gf8oqE44pc05av6b79hZ/DY7H2k9UU2+Di hwQEtG5KYd2FQNEhKs1uuNMuozQBHVXrQm3oKnl0xv53xeHK+Ka78x5kYKl4i5me JwXRbYbyGrPA4/2xF5ZLbzcPm8o9nsFlvigcQZ7cg5FOrN1dHbhFMQtPBnGq2m6K E8KhArhOq5yA2JjgQe8hpzwWEjgGjYL4urYnvsA8ul1Lm5gT1f7y9vItGEO3MhtM QTVHzLhzZ2P33+Fq4QujVyiDrYlVkH3rqfGHfD9GBZmV7ho9vJL/PSiK3G20KZIs fp/wPRcQ0plesXl2rzTi5UWhv5fInEQ= -----END CERTIFICATE-----Generated at Tue May 13 02:23:40 2025 by rpki-client