$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa File: f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa (raw, json) Hash identifier: +PA698jM+K2zCNZdkqm3OxAAzZHASg4jB5cDi1IB+H0= Subject key identifier: 8B:41:BE:54:33:D9:87:97:47:B9:E7:E2:83:74:8F:DB:04:24:E3:77 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584A1E2AA73D8DCF24593F4E8900 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 21949 IP address blocks: 74.213.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a7:3d:8d:cf:24:59:3f:4e:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=1eceef8d-1a02-4832-8dea-4114d790d0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:c4:4a:32:97:b6:ef:54:3a:11:f1:c2:34: 91:3d:ec:70:18:a2:ea:43:46:94:d9:3f:7a:73:e3: d6:b2:37:84:ae:91:c2:0d:9e:1e:32:0a:8b:e3:f0: 90:fa:88:f4:19:ae:12:8e:1f:36:b8:5d:9a:2c:01: 08:72:1a:00:dc:5b:92:85:2e:d0:e0:3a:ca:dd:4c: d8:38:04:3c:66:d4:07:6d:a9:8b:03:32:e3:f0:1e: e7:3c:e0:5b:4b:32:ce:44:46:5a:06:61:4f:e0:ba: b3:c6:b1:57:ea:a9:79:54:c0:69:4b:4d:c2:72:df: d7:2a:46:10:14:bc:1b:b8:8a:a3:a7:65:57:e2:96: 3c:c2:c7:05:65:93:b4:e3:bc:3e:76:76:03:a0:d3: 44:72:82:53:27:81:d9:fd:b1:fe:53:9d:7a:cf:01: 56:09:64:3c:f0:20:1b:a4:70:fa:9f:4b:d6:09:da: 48:ca:34:8d:06:ca:44:1c:57:4c:89:dc:c4:3b:01: 60:bf:6e:75:e9:b4:e5:c2:34:d8:c9:dc:91:2a:fb: 2a:14:73:e2:08:fd:eb:89:80:da:e6:a3:85:34:a3: ee:e6:5a:ed:cc:ff:0b:47:27:60:eb:49:bc:1e:d3: 7f:b0:9c:8e:39:e1:18:fe:22:13:4a:55:e5:e7:78: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:41:BE:54:33:D9:87:97:47:B9:E7:E2:83:74:8F:DB:04:24:E3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f9f8dcd8-21f5-3031-a1aa-f1bf0f9bb5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 74.213.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:9d:d9:c3:c8:69:fc:fc:91:bb:d7:4b:b2:07:00:6d:32:8d: f6:f4:66:ad:70:30:70:ca:97:20:a2:95:f9:20:9a:f4:c2:fc: 51:29:f8:7b:9c:be:56:99:a9:87:55:1d:33:c2:01:f1:a4:7a: c6:92:06:a2:24:a3:be:26:58:76:d7:5d:56:48:5f:d9:31:31: 31:55:11:91:9d:5f:cf:0f:00:23:06:8b:ef:e0:e2:9a:6d:f3: 62:1f:9a:61:36:b5:17:23:23:1c:65:3b:ae:a2:1b:48:23:31: e6:32:43:7b:f2:e2:08:30:31:5d:57:d0:42:6d:93:48:6c:10: 36:36:c9:c3:36:cd:03:50:66:04:12:c1:e5:26:15:6a:16:53: 27:0b:3c:06:4e:4f:8d:10:28:03:a7:a3:e2:17:a1:44:ce:8c: bf:c3:07:9c:32:62:31:b1:d8:a8:65:1f:ab:bc:f6:cc:81:75: 27:69:a8:17:35:c9:ab:02:00:f5:ab:74:69:e8:4e:9a:5c:a0: 1b:e5:32:71:c9:a4:aa:45:ab:1a:d4:4c:58:89:bc:43:8a:31: 2a:41:4d:f7:d5:06:d2:f0:2a:e0:2d:24:ce:03:d0:4c:ab:db: 08:66:df:8f:8a:23:ea:c6:59:ec:d4:d0:38:9c:7d:e9:c4:53: ca:93:ec:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqc9jc8kWT9OiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk MWVjZWVmOGQtMWEwMi00ODMyLThkZWEtNDExNGQ3OTBkMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT3ESjKXtu9UOhHxwjSRPexwGKLqQ0aU2T96 c+PWsjeErpHCDZ4eMgqL4/CQ+oj0Ga4Sjh82uF2aLAEIchoA3FuShS7Q4DrK3UzY OAQ8ZtQHbamLAzLj8B7nPOBbSzLOREZaBmFP4LqzxrFX6ql5VMBpS03Cct/XKkYQ FLwbuIqjp2VX4pY8wscFZZO047w+dnYDoNNEcoJTJ4HZ/bH+U516zwFWCWQ88CAb pHD6n0vWCdpIyjSNBspEHFdMidzEOwFgv2516bTlwjTYydyRKvsqFHPiCP3riYDa 5qOFNKPu5lrtzP8LRydg60m8HtN/sJyOOeEY/iITSlXl53ie+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItBvlQz2YeXR7nn4oN0j9sEJON3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjlmOGRjZDgtMjFmNS0z MDMxLWExYWEtZjFiZjBmOWJiNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCStWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEed2cPIafz8kbvXS7IHAG0yjfb0Zq1wMHDKlyCilfkgmvTC/FEp+Huc vlaZqYdVHTPCAfGkesaSBqIko74mWHbXXVZIX9kxMTFVEZGdX88PACMGi+/g4ppt 82IfmmE2tRcjIxxlO66iG0gjMeYyQ3vy4ggwMV1X0EJtk0hsEDY2ycM2zQNQZgQS weUmFWoWUycLPAZOT40QKAOno+IXoUTOjL/DB5wyYjGx2KhlH6u89syBdSdpqBc1 yasCAPWrdGnoTppcoBvlMnHJpKpFqxrUTFiJvEOKMSpBTffVBtLwKuAtJM4D0Eyr 2whm34+KI+rGWezU0DicfenEU8qT7Kk= -----END CERTIFICATE-----Generated at Tue Jul 1 10:01:37 2025 by rpki-client