$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/6d8da565-c27c-3497-9b40-6b91741ca4b1.roa File: 6d8da565-c27c-3497-9b40-6b91741ca4b1.roa (raw, json) Hash identifier: D07gRM8MGqg5OUXrGqgzfHBHUBTtB56pRffEFDKYeYE= Subject key identifier: 05:F4:A3:4B:39:38:BC:AA:AC:DB:72:39:60:C1:BE:57:88:E2:2F:D9 Certificate issuer: /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Certificate serial: 010D0C9F43285849B2CD399E3217B3C0D99E6700 Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/6d8da565-c27c-3497-9b40-6b91741ca4b1.roa Signing time: Wed 30 Apr 2025 14:01:13 +0000 ROA not before: Wed 30 Apr 2025 14:01:13 +0000 ROA not after: Tue 29 Jul 2025 14:01:13 +0000 asID: 21898 IP address blocks: 74.209.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:cd:39:9e:32:17:b3:c0:d9:9e:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d Validity Not Before: Apr 30 14:01:13 2025 GMT Not After : Jul 29 14:01:13 2025 GMT Subject: CN=043d9f2b-28b7-45f1-b67e-0a1832d7ee38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:8f:7c:61:7a:3a:17:1b:6e:5d:99:5d:60: a4:19:e3:72:16:86:44:ed:d6:cb:82:e2:63:e2:a9: 1f:da:93:b4:94:71:fe:b9:0c:ba:99:9d:fc:29:2e: c8:f3:a6:0e:45:7e:4a:a8:a9:40:95:6a:c4:fc:b0: b6:23:63:d7:1f:96:75:fa:53:81:38:9a:45:b6:f5: e3:2a:a7:56:c3:b4:3c:7e:1e:28:d6:d1:76:c7:9e: 9f:63:25:7b:45:7c:18:2d:81:0a:0d:b7:7b:68:35: 57:ec:41:f6:1e:60:fe:22:4a:4b:1a:bd:6e:51:65: 94:ff:e3:92:ba:96:a0:cd:67:b5:ac:7a:e4:c5:18: c9:31:b7:8f:5f:13:d0:cf:0d:90:90:a2:13:f9:0b: 9f:e0:92:f2:a3:22:6b:ec:d3:a4:ca:6b:25:42:08: e7:ed:54:b8:a7:ec:ee:26:21:b0:8c:84:1f:f6:24: 19:08:e1:10:a8:b8:10:3c:21:a5:4a:0a:bc:95:bb: 67:16:5e:d0:7f:28:53:24:09:dc:fc:f8:89:0d:0f: 7b:f6:31:0e:39:40:ca:26:71:86:1c:22:65:fa:49: aa:26:06:81:fc:bb:f1:09:48:67:ed:69:14:53:44: 54:12:73:98:4b:40:61:d7:ff:e1:ca:89:ab:a6:b9: 84:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F4:A3:4B:39:38:BC:AA:AC:DB:72:39:60:C1:BE:57:88:E2:2F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/6d8da565-c27c-3497-9b40-6b91741ca4b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl X509v3 Authority Key Identifier: keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer sbgp-ipAddrBlock: critical IPv4: 74.209.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:86:ce:5e:4d:ac:66:9a:44:8d:8a:45:bc:f8:c3:3f:6d:68: a1:cf:26:ce:e9:fb:73:5b:24:e1:7a:6d:ad:01:02:8c:39:7a: e6:68:b5:d8:7c:98:7d:74:b8:7e:1e:c9:b0:5c:6c:db:08:b3: 8e:d8:7d:66:06:2d:ea:c0:62:c8:d9:7a:33:2e:ad:ba:11:b5: 38:68:f7:cc:da:81:f8:f7:61:05:c3:da:a3:94:10:d8:ec:75: 0e:da:42:a5:59:33:6b:f2:40:17:40:0a:bc:2c:94:1c:35:dd: 25:92:af:e9:67:11:2c:f4:f7:e1:c3:53:d4:e4:e6:5a:1e:93: f2:fa:ad:39:65:3a:18:5d:0f:74:92:02:58:06:82:f7:fb:1e: f7:ca:50:2a:0f:2f:a3:99:dd:7c:85:41:00:84:8d:b3:d1:5f: fc:53:5c:3d:82:b4:2b:6b:fd:75:c9:94:58:5d:19:38:3f:0e: 6e:79:fd:e4:bf:40:ab:00:ba:3b:55:0b:24:b8:26:3c:af:30: 5d:13:7e:6a:be:fa:79:3b:2b:73:63:18:50:b6:07:6d:d3:53: 90:ad:e3:67:8b:1c:c1:ca:78:d2:db:77:4b:24:ef:fb:30:f7: 49:d8:07:60:05:75:4a:71:d9:fe:f8:c4:75:8e:55:8a:ae:e1: ee:74:d5:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyzTmeMhezwNmeZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczZTEwNTQtNWY0Yi00YWE1LTllNTUtMWM1Yzg3ZmI3 MDlkMB4XDTI1MDQzMDE0MDExM1oXDTI1MDcyOTE0MDExM1owLzEtMCsGA1UEAxMk MDQzZDlmMmItMjhiNy00NWYxLWI2N2UtMGExODMyZDdlZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjmPfGF6Ohcbbl2ZXWCkGeNyFoZE7dbLguJj 4qkf2pO0lHH+uQy6mZ38KS7I86YORX5KqKlAlWrE/LC2I2PXH5Z1+lOBOJpFtvXj KqdWw7Q8fh4o1tF2x56fYyV7RXwYLYEKDbd7aDVX7EH2HmD+IkpLGr1uUWWU/+OS upagzWe1rHrkxRjJMbePXxPQzw2QkKIT+Quf4JLyoyJr7NOkymslQgjn7VS4p+zu JiGwjIQf9iQZCOEQqLgQPCGlSgq8lbtnFl7QfyhTJAnc/PiJDQ979jEOOUDKJnGG HCJl+kmqJgaB/LvxCUhn7WkUU0RUEnOYS0Bh1//hyomrprmEJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX0o0s5OLyqrNtyOWDBvleI4i/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNl MTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVjODdmYjcwOWQvNmQ4ZGE1NjUtYzI3Yy0z NDk3LTliNDAtNmI5MTc0MWNhNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzczZTEwNTQtNWY0Yi00YWE1LTll NTUtMWM1Yzg3ZmI3MDlkL2M3M2UxMDU0LTVmNGItNGFhNS05ZTU1LTFjNWM4N2Zi NzA5ZC5jcmwwHwYDVR0jBBgwFoAUrzLMgojaa/ENvSnJtECK+OjGFtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNzNlMTA1NC01ZjRiLTRhYTUtOWU1NS0xYzVj ODdmYjcwOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAStFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWGzl5NrGaaRI2KRbz4wz9taKHPJs7p+3NbJOF6ba0BAow5euZotdh8 mH10uH4eybBcbNsIs47YfWYGLerAYsjZejMurboRtTho98zagfj3YQXD2qOUENjs dQ7aQqVZM2vyQBdACrwslBw13SWSr+lnESz09+HDU9Tk5loek/L6rTllOhhdD3SS AlgGgvf7HvfKUCoPL6OZ3XyFQQCEjbPRX/xTXD2CtCtr/XXJlFhdGTg/Dm55/eS/ QKsAujtVCyS4JjyvMF0Tfmq++nk7K3NjGFC2B23TU5Ct42eLHMHKeNLbd0sk7/sw 90nYB2AFdUpx2f74xHWOVYqu4e501dc= -----END CERTIFICATE-----Generated at Tue May 13 06:44:27 2025 by rpki-client