$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa File: 8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa (raw, json) Hash identifier: 58D/pRtzrsRqpE88W96LXi1P9/n7o4uiMzpMOsEpSm8= Subject key identifier: D9:CB:98:C8:57:81:D3:FC:E0:40:63:7F:D4:3C:0E:0A:6E:8E:B1:13 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584A374ACF12E9778965B4E52A80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 16509 IP address blocks: 74.121.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:cf:12:e9:77:89:65:b4:e5:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=0bf79e1a-cb19-457b-91a3-1ea4b3dd1839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:1a:a1:f3:72:07:ea:ed:b1:18:40:f1:63: 1f:1f:a8:59:e5:28:be:df:f3:60:95:48:8d:72:3e: dc:88:75:cb:ec:20:ef:c2:a6:f5:f4:7f:5b:91:b4: 3e:48:de:0c:ba:c7:b3:84:c6:14:c1:c7:52:cd:49: df:4e:33:2d:c2:e9:12:b7:d5:b1:77:ad:52:f2:3e: 8c:19:34:28:bb:5a:f5:e2:01:72:fe:fb:f8:67:6f: 3f:b4:3e:29:22:52:d0:96:cf:0a:4b:f8:ed:34:62: f7:b1:7d:5a:08:f6:1a:8c:8a:8d:ec:a1:5c:e7:67: 52:76:a0:98:89:c8:33:9a:03:0c:c1:84:77:c7:fe: 21:96:b5:1d:51:e0:49:a3:15:dd:18:7e:d1:fc:5d: 05:b2:1b:0a:e3:53:c9:24:fd:8a:0f:99:26:ad:fe: c5:fa:c6:c4:50:40:77:0c:ed:a5:15:8d:8c:e7:ba: 52:91:eb:53:f2:7f:e6:f4:2e:c7:4e:52:31:45:7f: 44:76:e9:68:ea:1f:1d:74:0d:fb:52:48:90:7c:24: e6:8e:9d:20:c3:70:9e:7a:6b:d4:2f:b1:c3:f9:03: 8c:eb:eb:57:bb:fa:6a:10:39:9c:8f:ad:d8:ab:a0: a2:ae:ce:96:bc:6d:bf:b6:f8:e2:cd:dd:21:15:cd: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:98:C8:57:81:D3:FC:E0:40:63:7F:D4:3C:0E:0A:6E:8E:B1:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/8c93c9c3-d8bc-36ac-8a74-6df8e69f69f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 74.121.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:45:18:b7:d5:c0:05:34:5b:2c:57:6c:70:b7:93:5a:6d:35: 2c:a1:e0:c4:4b:c5:f3:eb:ee:96:cc:3c:20:c5:9a:d4:32:ec: 32:e0:f6:b8:91:61:71:7d:f5:98:25:9d:35:7c:c3:9b:bb:5c: a0:41:43:ce:56:16:0c:96:e3:2c:d0:42:cd:73:3d:24:e5:2d: 3b:67:08:96:42:df:b7:94:50:c7:bc:ee:18:9c:b0:dc:2f:f9: 1d:b5:15:c0:8c:07:d5:c6:dc:70:42:10:df:82:a6:ed:e1:95: 58:7b:fa:3d:b9:75:57:07:5d:1a:94:e3:91:ca:bf:27:67:4a: 57:20:58:80:1b:37:c7:8e:00:ce:49:b4:ec:73:06:b6:f2:e4: c0:46:aa:d9:4b:8f:9c:7b:57:a8:94:a7:87:27:63:f5:ab:c6: 34:43:e7:48:82:9c:03:0a:ab:35:27:a8:aa:4d:52:89:a8:69: 05:b5:46:f6:61:08:a6:78:7a:a3:cb:a6:2c:d9:db:44:25:a0: e8:7c:6c:48:f6:52:da:4b:bb:0b:9f:1a:be:e4:71:06:2c:8d: a1:85:88:76:0a:80:8d:23:e7:85:1f:2f:82:26:8f:02:1c:23: 00:ae:8f:5c:fa:3c:6e:13:31:83:11:c3:56:0a:97:70:bf:d1: 07:9b:94:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3Ss8S6XeJZbTlKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk MGJmNzllMWEtY2IxOS00NTdiLTkxYTMtMWVhNGIzZGQxODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/YaofNyB+rtsRhA8WMfH6hZ5Si+3/NglUiN cj7ciHXL7CDvwqb19H9bkbQ+SN4MusezhMYUwcdSzUnfTjMtwukSt9Wxd61S8j6M GTQou1r14gFy/vv4Z28/tD4pIlLQls8KS/jtNGL3sX1aCPYajIqN7KFc52dSdqCY icgzmgMMwYR3x/4hlrUdUeBJoxXdGH7R/F0FshsK41PJJP2KD5kmrf7F+sbEUEB3 DO2lFY2M57pSketT8n/m9C7HTlIxRX9Edulo6h8ddA37UkiQfCTmjp0gw3CeemvU L7HD+QOM6+tXu/pqEDmcj63Yq6Cirs6WvG2/tvjizd0hFc0ScQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnLmMhXgdP84EBjf9Q8DgpujrETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOGM5M2M5YzMtZDhiYy0z NmFjLThhNzQtNmRmOGU2OWY2OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnk1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlFGLfVwAU0WyxXbHC3k1ptNSyh4MRLxfPr7pbMPCDFmtQy7DLg9riR YXF99ZglnTV8w5u7XKBBQ85WFgyW4yzQQs1zPSTlLTtnCJZC37eUUMe87hicsNwv +R21FcCMB9XG3HBCEN+Cpu3hlVh7+j25dVcHXRqU45HKvydnSlcgWIAbN8eOAM5J tOxzBrby5MBGqtlLj5x7V6iUp4cnY/WrxjRD50iCnAMKqzUnqKpNUomoaQW1RvZh CKZ4eqPLpizZ20QloOh8bEj2UtpLuwufGr7kcQYsjaGFiHYKgI0j54UfL4ImjwIc IwCuj1z6PG4TMYMRw1YKl3C/0QeblGE= -----END CERTIFICATE-----Generated at Sun Jun 29 04:34:50 2025 by rpki-client