$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa File: 952be825-45a2-31b9-be3f-703b38227bd4.roa (raw, json) Hash identifier: 6su2bTcThllftY+ZPDuzncmWG+3KW4hlts9qblphuDs= Subject key identifier: 72:D3:B4:67:22:AC:70:B7:B0:CE:87:AB:9B:AA:C6:B3:CA:6D:FB:A7 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285849A8E9DFF9EADCF30502D8E940 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 398420 IP address blocks: 74.126.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:df:f9:ea:dc:f3:05:02:d8:e9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=222a5145-42b8-4fcd-8f43-048f967cb187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:2f:4a:3b:bb:d6:5e:c6:8b:15:78:fa:e9: 15:5d:73:48:e2:c0:53:c6:fc:d8:93:bf:82:af:32: 94:25:71:79:4f:e6:4a:d3:05:b3:0b:9d:2b:d2:f7: dc:f6:fd:42:36:4f:1f:36:4e:8f:70:46:42:4d:c5: e4:fd:59:ef:9b:37:79:8c:35:a1:6e:d7:c8:34:e7: 30:ea:61:91:fc:e3:26:5b:7d:42:99:dd:14:ac:85: 12:96:9d:d1:55:00:73:98:15:b8:97:6f:7f:62:41: 48:56:bf:9c:1d:48:2c:0e:58:99:e0:ea:70:47:3f: ee:90:4b:ba:03:23:b8:db:2e:0d:af:30:4c:86:a5: 1b:5d:59:6d:21:08:0d:34:9e:42:26:a3:45:8f:ff: aa:1d:79:3f:4c:0a:2f:71:ba:df:bf:e9:4f:8a:85: 80:5e:12:28:69:b3:75:78:9d:3d:a7:f9:2a:5d:c4: 3e:60:8d:a6:8c:e3:e6:8e:22:30:be:ee:e1:53:f5: 4c:cd:68:34:0a:f9:d4:c7:1a:a3:47:f1:bb:a6:f2: 8b:cc:aa:16:0c:72:7b:51:65:d5:e6:06:fe:29:02: 7f:2e:0c:3d:b0:bd:30:25:32:84:47:34:26:30:78: 7b:08:63:bb:c9:49:23:26:ee:55:00:ea:68:dd:68: 09:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D3:B4:67:22:AC:70:B7:B0:CE:87:AB:9B:AA:C6:B3:CA:6D:FB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/952be825-45a2-31b9-be3f-703b38227bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 74.126.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b1:fe:0d:99:35:71:4e:69:3a:6a:bf:b9:c1:ae:dc:f7:bb: 31:43:a2:1f:2f:ee:0b:0e:19:8b:f2:8b:4a:22:27:47:58:b9: 45:fb:40:0f:ef:ef:18:fe:e8:bb:58:c9:9b:21:9f:04:81:19: 6b:d4:76:8a:54:d9:81:11:86:05:76:5e:c7:67:73:20:bc:31: cd:5c:53:7b:16:40:8e:c4:0e:a6:5c:5f:2f:48:5b:cd:d1:a7: 0e:70:a7:cd:12:78:ed:87:0a:1d:ae:29:29:50:d4:0a:e1:da: 30:6d:12:e2:b7:de:4a:9c:81:35:92:22:ad:08:2e:ef:63:18: 2b:44:71:c2:f3:97:97:f5:46:dc:e8:ba:24:79:6c:f4:03:fd: de:5d:09:29:a1:a8:0d:b1:ef:9a:c6:6e:73:f6:9c:32:dc:5d: a2:07:c1:89:56:19:1b:99:d3:92:43:79:d8:e1:d1:3f:bc:24: f0:1d:99:f9:d5:a7:35:ca:d1:b0:77:e2:91:21:46:a5:b8:50: 28:38:49:cf:60:39:b8:0e:9d:95:04:eb:e9:b3:12:68:fe:1b: 1f:8f:a2:f9:cb:30:fc:86:d8:4d:04:f0:9d:b2:64:e6:50:a3: 09:0d:6c:04:0b:ba:89:01:d7:e6:02:5c:48:7b:63:4f:51:c7: 7e:4f:34:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6d/56tzzBQLY6UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk MjIyYTUxNDUtNDJiOC00ZmNkLThmNDMtMDQ4Zjk2N2NiMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvgvSju71l7GixV4+ukVXXNI4sBTxvzYk7+C rzKUJXF5T+ZK0wWzC50r0vfc9v1CNk8fNk6PcEZCTcXk/Vnvmzd5jDWhbtfINOcw 6mGR/OMmW31Cmd0UrIUSlp3RVQBzmBW4l29/YkFIVr+cHUgsDliZ4OpwRz/ukEu6 AyO42y4NrzBMhqUbXVltIQgNNJ5CJqNFj/+qHXk/TAovcbrfv+lPioWAXhIoabN1 eJ09p/kqXcQ+YI2mjOPmjiIwvu7hU/VMzWg0CvnUxxqjR/G7pvKLzKoWDHJ7UWXV 5gb+KQJ/Lgw9sL0wJTKERzQmMHh7CGO7yUkjJu5VAOpo3WgJ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLTtGcirHC3sM6Hq5uqxrPKbfunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvOTUyYmU4MjUtNDVhMi0z MWI5LWJlM2YtNzAzYjM4MjI3YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESn6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmx/g2ZNXFOaTpqv7nBrtz3uzFDoh8v7gsOGYvyi0oiJ0dYuUX7QA/v 7xj+6LtYyZshnwSBGWvUdopU2YERhgV2XsdncyC8Mc1cU3sWQI7EDqZcXy9IW83R pw5wp80SeO2HCh2uKSlQ1Arh2jBtEuK33kqcgTWSIq0ILu9jGCtEccLzl5f1Rtzo uiR5bPQD/d5dCSmhqA2x75rGbnP2nDLcXaIHwYlWGRuZ05JDedjh0T+8JPAdmfnV pzXK0bB34pEhRqW4UCg4Sc9gObgOnZUE6+mzEmj+Gx+PovnLMPyG2E0E8J2yZOZQ owkNbAQLuokB1+YCXEh7Y09Rx35PNHE= -----END CERTIFICATE-----Generated at Sun May 11 22:24:59 2025 by rpki-client