$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa File: 84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa (raw, json) Hash identifier: Opth+UjZhmGbuemTE9D/zTnL/j58cnFAwNfW6R4/9bM= Subject key identifier: AA:87:07:1A:C1:11:F6:D1:5B:DF:86:98:BA:DD:63:8C:83:90:2B:48 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285849797440D9DD371F3574D68D80 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 398420 IP address blocks: 74.126.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:40:d9:dd:37:1f:35:74:d6:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=02bd6974-0dfb-4b95-b56d-c4c7d53ee7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:3d:33:14:0c:1f:44:5f:d9:d9:84:40:dd: 91:8e:49:0b:09:30:5d:9c:c6:48:a6:06:00:f8:71: 10:d9:d3:88:98:b0:d5:b3:dc:8c:9f:ab:4c:17:dc: ab:43:db:cf:e8:49:a2:bf:d9:2c:9e:81:9b:88:91: 0c:80:64:06:2f:8f:30:ae:64:9d:5e:61:6a:a4:dc: 86:fe:5d:bb:9c:61:3e:76:83:f4:12:77:f3:bd:13: b0:d7:15:a0:84:43:dd:a0:9b:5f:03:e1:6d:e6:3f: bd:27:c4:b8:0b:17:57:2b:e7:00:ea:ca:71:1e:69: 94:30:16:e6:4a:80:24:be:dc:f9:55:e0:51:e3:74: 8c:ae:3e:92:09:67:c0:6d:67:dc:38:9f:51:b2:c0: 2b:9e:1f:70:ca:e8:9b:f2:b2:23:26:a7:65:2f:0c: 8d:49:86:33:b2:d5:27:1f:93:7d:14:90:d0:eb:fd: 8a:d9:9e:da:29:09:8c:c8:05:84:9b:f9:cb:3e:35: c8:5f:08:76:53:62:f0:5f:00:e8:69:2a:71:e0:cb: a7:6c:7a:40:7c:d5:e4:54:66:f5:c4:4e:68:99:1d: 4c:03:1b:37:1b:06:8c:bf:69:5d:73:03:f9:28:80: 06:bb:dc:b2:ad:11:04:b0:65:7b:6b:a7:e8:91:46: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:87:07:1A:C1:11:F6:D1:5B:DF:86:98:BA:DD:63:8C:83:90:2B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/84e5e7fe-bf1f-31d5-9386-4bcacf5c2084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:bc:b9:21:53:b8:55:62:aa:88:df:48:1e:b8:a7:70:e4:3e: a8:b3:74:b9:11:33:f0:de:2e:35:84:cb:79:89:59:a7:58:51: 3d:7b:09:d6:db:ab:0d:f6:98:7e:42:f6:a6:8a:18:c5:63:52: 49:6c:d3:a4:37:7c:80:99:32:7b:1a:3d:53:47:83:cd:43:ac: 2e:af:90:19:2a:01:36:cd:9b:de:4e:7a:2e:37:da:e6:3d:7d: 79:6d:64:6a:a2:9c:9d:f6:7f:50:c2:37:01:5f:43:2a:f8:af: b2:a3:75:7c:9d:1f:e3:83:3e:a4:bc:c5:72:92:26:47:52:34: 7a:ec:8a:9c:d8:16:fe:d5:6a:29:20:6e:61:41:7b:de:c0:0f: 1d:43:a5:ae:15:ed:9f:f8:d9:a3:c6:45:c9:34:92:70:ed:08: b9:79:a8:fc:c8:38:02:ed:40:67:5d:9a:6a:55:91:54:3d:fb: 38:77:a4:48:07:14:80:a4:43:28:d5:00:6e:bd:36:d5:22:ba: b5:41:c1:86:16:30:94:7b:43:09:e7:04:58:9d:d0:1f:72:73: 29:08:6e:a6:07:00:78:a7:9d:8c:2b:7d:6f:20:a9:c2:4d:78: 1f:72:f8:29:e1:fa:90:64:4d:a3:fc:34:fd:10:e4:de:7f:b3: b9:91:41:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEDZ3TcfNXTWjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk MDJiZDY5NzQtMGRmYi00Yjk1LWI1NmQtYzRjN2Q1M2VlN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEU9MxQMH0Rf2dmEQN2RjkkLCTBdnMZIpgYA +HEQ2dOImLDVs9yMn6tMF9yrQ9vP6Emiv9ksnoGbiJEMgGQGL48wrmSdXmFqpNyG /l27nGE+doP0EnfzvROw1xWghEPdoJtfA+Ft5j+9J8S4CxdXK+cA6spxHmmUMBbm SoAkvtz5VeBR43SMrj6SCWfAbWfcOJ9RssArnh9wyuib8rIjJqdlLwyNSYYzstUn H5N9FJDQ6/2K2Z7aKQmMyAWEm/nLPjXIXwh2U2LwXwDoaSpx4MunbHpAfNXkVGb1 xE5omR1MAxs3GwaMv2ldcwP5KIAGu9yyrREEsGV7a6fokUZUxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqHBxrBEfbRW9+GmLrdY4yDkCtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvODRlNWU3ZmUtYmYxZi0z MWQ1LTkzODYtNGJjYWNmNWMyMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn6iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+8uSFTuFViqojfSB64p3DkPqizdLkRM/DeLjWEy3mJWadYUT17Cdbb qw32mH5C9qaKGMVjUkls06Q3fICZMnsaPVNHg81DrC6vkBkqATbNm95Oei432uY9 fXltZGqinJ32f1DCNwFfQyr4r7KjdXydH+ODPqS8xXKSJkdSNHrsipzYFv7Vaikg bmFBe97ADx1Dpa4V7Z/42aPGRck0knDtCLl5qPzIOALtQGddmmpVkVQ9+zh3pEgH FICkQyjVAG69NtUiurVBwYYWMJR7QwnnBFid0B9ycykIbqYHAHinnYwrfW8gqcJN eB9y+Cnh+pBkTaP8NP0Q5N5/s7mRQd0= -----END CERTIFICATE-----Generated at Sun May 11 21:00:16 2025 by rpki-client