$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa File: 2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa (raw, json) Hash identifier: S4ANKo9HvoQJMNNepSoICt1qdcZrj4AhEgwPiS0V/Lc= Subject key identifier: 2C:5B:78:E5:B5:AA:DB:01:36:9B:88:B7:DF:87:EC:A8:85:00:C4:E2 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1F941BDD9287BD60DF1C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 68.113.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:f9:41:bd:d9:28:7b:d6:0d:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=3a2e5ae6-3056-451b-9df8-ac3fe6c3c060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:e9:2f:4f:ad:d8:62:34:9c:37:f3:c9:f9: d1:b7:fb:87:fe:b2:58:62:59:dc:6f:fb:92:6c:57: 3a:d8:88:65:02:06:45:42:48:84:c7:ae:db:1e:66: 60:9d:f4:76:94:5c:08:3a:a2:1c:60:cc:e5:52:6a: 13:2a:21:25:ea:4c:1c:57:61:d2:64:b9:a1:53:a0: 0c:01:03:65:6e:0a:d5:3c:05:cc:14:8e:85:21:ef: d3:2f:35:b9:c8:10:26:ec:a7:25:95:09:dd:2b:d4: 4c:52:5e:c6:02:45:3f:9c:92:4a:48:d1:c6:05:5d: f3:34:d5:cf:32:04:4c:ed:3b:21:1d:7e:80:44:1a: 1a:c7:e3:ff:3f:b5:11:01:31:ea:a8:47:be:fb:f3: 03:74:ed:43:00:41:cb:80:84:b3:ce:4e:b5:51:4e: ba:f9:ee:00:20:34:61:f1:15:14:99:7b:48:0d:d0: 26:a9:37:e9:5a:f7:ab:49:f0:2a:26:ec:f2:d2:40: 3b:ec:35:01:6d:db:bc:98:eb:ce:e3:d0:9d:97:bb: c7:32:b0:b4:ad:8e:40:10:5c:1d:ee:ff:bb:20:b5: af:f6:be:6f:e3:fd:9a:d9:a1:d0:4a:45:07:72:bc: 9a:8b:e7:12:27:ab:99:c5:59:4b:28:a1:83:42:13: a3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5B:78:E5:B5:AA:DB:01:36:9B:88:B7:DF:87:EC:A8:85:00:C4:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2db9fe16-0682-310b-a7ab-4b829ddb16b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.113.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:36:a2:f7:fc:df:21:6e:2b:6e:35:bd:36:47:a0:d1:9c:a7: 48:50:0b:f4:d1:50:5c:5e:0c:85:ba:7e:01:70:1b:36:1e:02: 48:08:00:f8:55:68:cb:5c:1c:e2:2c:f8:a5:2a:42:35:75:b0: 4d:26:5b:d6:ea:52:c9:29:62:09:1d:74:5a:b5:52:58:0b:2f: 74:7c:52:49:ca:c4:2f:98:57:1c:0b:98:7b:0b:cc:34:26:df: b9:7f:02:95:62:d3:82:e0:c7:e6:8c:75:91:3d:f6:8a:2b:8e: d5:74:d6:2c:ab:a5:9b:39:93:20:74:8b:09:02:dc:75:ee:fe: 61:51:9b:cf:05:6e:33:94:51:f1:69:6a:e1:2d:d2:62:a5:e3: 9b:67:49:6f:90:d3:89:91:87:3b:0f:b5:32:ea:38:ab:02:97: 19:08:c8:7c:dc:bc:db:5b:21:f7:e3:70:4e:95:9f:a1:b3:0c: 19:3c:cc:77:6c:66:e8:5f:dd:2e:14:90:c1:95:b4:f0:70:9e: 31:ca:f3:0f:9b:db:95:4b:64:bd:56:1c:9e:a5:fe:e1:99:9a: 48:10:1a:9a:43:b4:2b:91:4c:f2:a1:14:c8:68:2b:15:d9:e4: 9f:32:73:cc:ad:60:57:e2:b8:44:82:84:55:e4:e6:c0:62:34: 5e:fd:7d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0flBvdkoe9YN8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk M2EyZTVhZTYtMzA1Ni00NTFiLTlkZjgtYWMzZmU2YzNjMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJvpL0+t2GI0nDfzyfnRt/uH/rJYYlncb/uS bFc62IhlAgZFQkiEx67bHmZgnfR2lFwIOqIcYMzlUmoTKiEl6kwcV2HSZLmhU6AM AQNlbgrVPAXMFI6FIe/TLzW5yBAm7KcllQndK9RMUl7GAkU/nJJKSNHGBV3zNNXP MgRM7TshHX6ARBoax+P/P7URATHqqEe++/MDdO1DAEHLgISzzk61UU66+e4AIDRh 8RUUmXtIDdAmqTfpWverSfAqJuzy0kA77DUBbdu8mOvO49Cdl7vHMrC0rY5AEFwd 7v+7ILWv9r5v4/2a2aHQSkUHcryai+cSJ6uZxVlLKKGDQhOjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxbeOW1qtsBNpuIt9+H7KiFAMTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMmRiOWZlMTYtMDY4Mi0z MTBiLWE3YWItNGI4MjlkZGIxNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM2ovf83yFuK241vTZHoNGcp0hQC/TRUFxeDIW6fgFwGzYeAkgIAPhV aMtcHOIs+KUqQjV1sE0mW9bqUskpYgkddFq1UlgLL3R8UknKxC+YVxwLmHsLzDQm 37l/ApVi04Lgx+aMdZE99oorjtV01iyrpZs5kyB0iwkC3HXu/mFRm88FbjOUUfFp auEt0mKl45tnSW+Q04mRhzsPtTLqOKsClxkIyHzcvNtbIffjcE6Vn6GzDBk8zHds Zuhf3S4UkMGVtPBwnjHK8w+b25VLZL1WHJ6l/uGZmkgQGppDtCuRTPKhFMhoKxXZ 5J8yc8ytYFfiuESChFXk5sBiNF79fTM= -----END CERTIFICATE-----Generated at Sun Apr 6 22:58:25 2025 by rpki-client