$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa File: 6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa (raw, json) Hash identifier: bIr4UqsHqXk/vFX/gTauPVRqD/wZPqNgRZKOppEKrig= Subject key identifier: 7A:90:55:86:3B:BD:88:2C:E7:28:41:1D:10:53:48:8A:6F:A6:72:95 Certificate issuer: /CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Certificate serial: 010D0C9F4328584A119AAD4F8000BC1195ECADB8 Authority key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 19528 IP address blocks: 74.209.184.0/22 maxlen: 24 74.209.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:ad:4f:80:00:bc:11:95:ec:ad:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=94f5dd95-6ea8-4dee-a8bd-83432e1e4f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b5:71:ee:8c:0f:50:b5:df:bc:b2:48:4c:e4: 20:ca:2b:11:8f:7b:51:10:18:30:41:71:7e:db:c2: b9:41:62:e9:e2:98:eb:d7:98:ae:9c:60:9c:d2:12: e3:c7:a0:65:8d:aa:44:42:f8:4e:39:b6:5e:6f:83: 64:43:29:d5:3a:08:c7:a2:be:d9:34:b2:2d:74:32: 76:a5:34:88:0d:34:a0:c4:85:2d:8f:0f:6b:7d:ef: b1:a1:5e:be:22:65:b4:79:e2:41:c2:14:06:af:7a: 93:6f:13:b7:81:6b:af:81:2a:be:bd:38:5f:07:33: d9:14:d4:f8:fa:ff:7d:6d:b5:01:aa:e6:e1:8a:6d: 00:79:c0:4e:ff:ec:39:03:29:aa:84:dc:6a:3e:63: 9a:e7:4c:8c:07:35:11:3f:1e:71:ec:33:9c:52:10: 02:73:43:12:6e:aa:00:7f:38:1d:58:1e:49:ac:e3: 49:9a:8e:1f:99:5b:05:ed:63:ec:5c:61:83:dc:a9: 2a:62:b6:98:f0:6a:5c:77:f0:8b:3c:10:a3:e1:89: 07:d1:8d:98:dc:bb:6a:ac:f5:0e:6a:18:b9:22:ce: f9:46:74:b5:31:31:be:07:30:22:cb:42:2a:2a:93: 58:db:e6:11:31:f4:cd:72:39:21:ce:1e:c1:22:24: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:90:55:86:3B:BD:88:2C:E7:28:41:1D:10:53:48:8A:6F:A6:72:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/6d45b3b7-23a0-3c55-a676-4b26bda9394d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.crl X509v3 Authority Key Identifier: keyid:D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer sbgp-ipAddrBlock: critical IPv4: 74.209.184.0-74.209.188.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:c7:73:b5:26:99:f7:a6:c1:36:9f:dc:04:4e:31:0b:0b:bb: f6:6b:a8:09:8c:4a:a1:21:c9:85:a2:9d:c0:ed:fe:4f:2f:53: 5e:2f:e9:d3:6a:2d:29:7e:fe:63:4c:44:42:fc:c7:03:f3:03: 85:aa:04:dd:c3:0c:e1:05:0e:41:ac:fc:a5:f7:49:fc:5f:be: 6b:a8:e3:47:31:27:7b:11:b0:83:b5:d6:40:5b:07:51:7f:9a: 2f:fd:57:18:18:9b:25:53:ba:6c:a8:ff:1e:7b:ac:29:b0:2b: f0:30:43:dc:d4:54:92:e8:4e:e2:21:85:34:a4:b0:a5:a8:bf: f0:4f:21:11:4b:9d:e4:42:0d:09:a0:d8:a1:a4:df:b5:98:5f: 15:1b:ed:97:ac:2f:9c:a3:34:dc:50:f4:90:b6:b5:69:cf:32: 95:35:68:be:c0:e0:d7:17:7f:d2:bf:fa:14:91:ab:54:88:65: bb:aa:2f:1e:70:cf:ac:1b:2f:73:87:62:2f:4f:54:34:60:35: 61:70:12:6e:53:fc:f3:fe:7f:dc:4d:86:0f:c9:84:67:df:7a: 2a:27:02:af:e9:72:d0:a1:cb:56:40:ed:48:54:87:19:bf:ec: 82:b3:2f:7a:d5:eb:52:26:a5:a2:7e:47:e4:ad:3f:f6:88:91: ef:10:e4:87 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEoRmq1PgAC8EZXsrbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1 N2RmMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk OTRmNWRkOTUtNmVhOC00ZGVlLWE4YmQtODM0MzJlMWU0ZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLVx7owPULXfvLJITOQgyisRj3tREBgwQXF+ 28K5QWLp4pjr15iunGCc0hLjx6BljapEQvhOObZeb4NkQynVOgjHor7ZNLItdDJ2 pTSIDTSgxIUtjw9rfe+xoV6+ImW0eeJBwhQGr3qTbxO3gWuvgSq+vThfBzPZFNT4 +v99bbUBqubhim0AecBO/+w5AymqhNxqPmOa50yMBzURPx5x7DOcUhACc0MSbqoA fzgdWB5JrONJmo4fmVsF7WPsXGGD3KkqYraY8Gpcd/CLPBCj4YkH0Y2Y3LtqrPUO ahi5Is75RnS1MTG+BzAiy0IqKpNY2+YRMfTNcjkhzh7BIiQnPwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHqQVYY7vYgs5yhBHRBTSIpvpnKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Rj YTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvNmQ0NWIzYjctMjNhMC0z YzU1LWE2NzYtNGIyNmJkYTkzOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNkY2E3MTUtYjNhZC00OTg1LWI2 ZmQtMGJkNzMwODI1N2RmLzJjZGNhNzE1LWIzYWQtNDk4NS1iNmZkLTBiZDczMDgy NTdkZi5jcmwwHwYDVR0jBBgwFoAU1Ewlr4qLF1EhKxI+/D4HEqe6+XswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3 MzA4MjU3ZGYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANK0bgD BABK0bwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAq8dztSaZ96bBNp/cBE4xCwu79muoCYxKoSHJhaKdwO3+ Ty9TXi/p02otKX7+Y0xEQvzHA/MDhaoE3cMM4QUOQaz8pfdJ/F++a6jjRzEnexGw g7XWQFsHUX+aL/1XGBibJVO6bKj/HnusKbAr8DBD3NRUkuhO4iGFNKSwpai/8E8h EUud5EINCaDYoaTftZhfFRvtl6wvnKM03FD0kLa1ac8ylTVovsDg1xd/0r/6FJGr VIhlu6ovHnDPrBsvc4diL09UNGA1YXASblP88/5/3E2GD8mEZ996KicCr+ly0KHL VkDtSFSHGb/sgrMvetXrUialon5H5K0/9oiR7xDkhw== -----END CERTIFICATE-----Generated at Mon Jun 30 14:43:51 2025 by rpki-client