$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/1aaec51b-2152-3168-9852-cba07d173eb3.roa File: 1aaec51b-2152-3168-9852-cba07d173eb3.roa (raw, json) Hash identifier: ooeVDYsK1JuKqDh+Xv1YJ0ZmldOChzw7GKwczQmxYgA= Subject key identifier: D2:F5:BD:22:30:50:EE:6E:90:A9:4A:98:19:BD:4A:04:22:EB:A7:87 Certificate issuer: /CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a Certificate serial: 010D0C9F43285849CBCF9848FA31B2C44F5E3980 Authority key identifier: 4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/1aaec51b-2152-3168-9852-cba07d173eb3.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 74.112.132.0/24 maxlen: 24 74.112.133.0/24 maxlen: 24 74.112.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:98:48:fa:31:b2:c4:4f:5e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e06c5587-5b99-4fbf-8de6-e9c983f1495a Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=59ca3484-3a7b-4a4c-8445-9c67f267b0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:00:ea:7a:54:ad:8f:18:90:1c:6a:61:7d: dc:e1:dc:4c:3d:84:00:37:5b:06:4f:3a:33:62:2a: 5a:14:87:d2:4b:e3:d1:0a:49:fb:76:12:5a:42:0f: 8a:6b:5c:30:49:3b:5b:83:9f:52:e4:14:ef:a2:71: ac:9c:a4:a7:9f:45:86:1d:5c:de:d5:1f:cc:eb:b4: 85:d3:1b:27:c7:85:a0:8c:d3:b1:a7:b2:5b:7f:3e: b9:f9:2d:2d:9d:8f:65:d9:2d:cc:83:c9:58:d6:20: a9:31:9e:0b:d3:52:13:04:ef:b4:29:53:98:4d:be: 58:8d:30:b1:fa:9b:35:55:28:90:fc:b7:80:02:6a: 76:19:eb:c2:7d:7e:64:db:bf:69:0c:a8:79:91:21: 57:6b:42:94:94:56:c7:2f:eb:3a:dc:e5:88:9f:5f: 20:b6:78:24:67:17:46:b0:cf:69:be:9d:56:1c:e6: 69:ff:61:3a:53:1f:e7:60:0c:a3:27:50:df:b5:b6: 95:3f:03:15:5c:a1:84:01:a2:64:40:1c:c9:05:83: d3:43:92:29:dd:7c:80:5f:cf:46:d3:c0:3b:97:22: eb:fa:58:00:1a:ce:2d:7c:b5:c0:bc:48:3f:59:f1: 88:43:3f:02:02:6b:51:78:b4:ef:a3:a4:b1:65:69: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F5:BD:22:30:50:EE:6E:90:A9:4A:98:19:BD:4A:04:22:EB:A7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/1aaec51b-2152-3168-9852-cba07d173eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a/e06c5587-5b99-4fbf-8de6-e9c983f1495a.crl X509v3 Authority Key Identifier: keyid:4C:4A:60:E2:E3:1C:C2:4C:C5:C0:E5:83:03:1D:66:D9:8D:55:0C:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e06c5587-5b99-4fbf-8de6-e9c983f1495a.cer sbgp-ipAddrBlock: critical IPv4: 74.112.132.0-74.112.134.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ce:06:e2:4f:c4:67:5a:51:5e:28:6a:f3:fb:f5:79:d4:15: 53:4d:4f:ee:10:42:e5:fb:d8:2e:ba:be:75:14:a9:99:06:cf: de:e9:f5:41:5d:a1:4e:4d:b8:33:63:a6:c5:b0:36:5b:37:fe: 64:c3:c5:e0:dc:65:32:e5:3f:b6:5c:9f:c3:3d:1c:44:10:50: 9c:4c:43:b0:76:e3:14:b2:67:be:45:85:0e:c2:2e:9d:d5:0e: 31:7e:53:16:10:e6:3c:23:37:18:18:79:59:e4:45:70:21:00: cf:2a:67:5c:1d:df:61:8b:ec:8f:7b:49:83:0a:bc:59:a5:2c: b7:56:53:bd:4d:18:26:ae:87:6d:1c:86:8f:5b:49:d2:a5:b6: c6:3b:bf:b9:fa:cb:b7:75:b4:75:51:85:5a:f5:38:1a:d5:c0: 89:7b:7d:00:ea:97:bf:2e:95:13:69:9f:99:13:ca:60:a8:1e: 08:10:79:da:17:31:b0:55:87:80:c9:98:0c:d4:2e:24:30:3a: 42:b7:ac:73:4f:d3:f7:14:9f:e0:dd:0f:71:64:b3:c4:b8:e6: f5:30:8a:ef:10:de:d2:f7:4e:8b:f0:73:21:63:a1:49:0c:86: 1d:d2:48:bb:47:4c:9a:ca:41:5c:94:bd:65:cc:9b:fd:ff:15: af:92:c8:40 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnLz5hI+jGyxE9eOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA2YzU1ODctNWI5OS00ZmJmLThkZTYtZTljOTgzZjE0 OTVhMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NTljYTM0ODQtM2E3Yi00YTRjLTg0NDUtOWM2N2YyNjdiMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCIA6npUrY8YkBxqYX3c4dxMPYQAN1sGTzoz YipaFIfSS+PRCkn7dhJaQg+Ka1wwSTtbg59S5BTvonGsnKSnn0WGHVze1R/M67SF 0xsnx4WgjNOxp7Jbfz65+S0tnY9l2S3Mg8lY1iCpMZ4L01ITBO+0KVOYTb5YjTCx +ps1VSiQ/LeAAmp2GevCfX5k279pDKh5kSFXa0KUlFbHL+s63OWIn18gtngkZxdG sM9pvp1WHOZp/2E6Ux/nYAyjJ1DftbaVPwMVXKGEAaJkQBzJBYPTQ5Ip3XyAX89G 08A7lyLr+lgAGs4tfLXAvEg/WfGIQz8CAmtReLTvo6SxZWmuJQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNL1vSIwUO5ukKlKmBm9SgQi66eHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMDZj NTU4Ny01Yjk5LTRmYmYtOGRlNi1lOWM5ODNmMTQ5NWEvMWFhZWM1MWItMjE1Mi0z MTY4LTk4NTItY2JhMDdkMTczZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTA2YzU1ODctNWI5OS00ZmJmLThk ZTYtZTljOTgzZjE0OTVhL2UwNmM1NTg3LTViOTktNGZiZi04ZGU2LWU5Yzk4M2Yx NDk1YS5jcmwwHwYDVR0jBBgwFoAUTEpg4uMcwkzFwOWDAx1m2Y1VDKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMDZjNTU4Ny01Yjk5LTRmYmYtOGRlNi1lOWM5 ODNmMTQ5NWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJKcIQD BABKcIYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZM4G4k/EZ1pRXihq8/v1edQVU01P7hBC5fvYLrq+dRSp mQbP3un1QV2hTk24M2OmxbA2Wzf+ZMPF4NxlMuU/tlyfwz0cRBBQnExDsHbjFLJn vkWFDsIundUOMX5TFhDmPCM3GBh5WeRFcCEAzypnXB3fYYvsj3tJgwq8WaUst1ZT vU0YJq6HbRyGj1tJ0qW2xju/ufrLt3W0dVGFWvU4GtXAiXt9AOqXvy6VE2mfmRPK YKgeCBB52hcxsFWHgMmYDNQuJDA6Qresc0/T9xSf4N0PcWSzxLjm9TCK7xDe0vdO i/BzIWOhSQyGHdJIu0dMmspBXJS9Zcyb/f8Vr5LIQA== -----END CERTIFICATE-----Generated at Sat May 10 14:00:02 2025 by rpki-client