$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3e9d01f6-2ea2-316e-b805-e50fa87de3c2.roa File: 3e9d01f6-2ea2-316e-b805-e50fa87de3c2.roa (raw, json) Hash identifier: b1uF/VKVfybBNPfa0rPcODrTvgs52H9tyMGzxB3x2A0= Subject key identifier: 87:7E:47:3F:84:42:36:9B:EE:48:F5:5F:AA:7D:BC:69:01:88:B6:36 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1E5574BF9F21EC6962300 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3e9d01f6-2ea2-316e-b805-e50fa87de3c2.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 66.168.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:e5:57:4b:f9:f2:1e:c6:96:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=8dced38c-cec7-41df-aab0-49dea3600b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ce:ae:d9:92:c7:8e:d7:a4:0b:2a:d5:37:57: 8f:ed:b8:ce:20:4d:90:4d:44:bd:53:e3:e9:b1:be: 66:ea:d7:93:a8:15:c4:e6:fd:a1:ea:f8:63:55:53: b5:fc:88:4a:1f:58:b6:bd:a3:c6:03:7c:08:1f:53: a7:47:dd:fd:67:a9:f1:38:ee:9e:bf:fc:14:6f:98: 11:fb:82:fc:b9:38:17:59:c5:71:ee:b3:6e:cc:6e: 0c:4a:94:3b:b8:47:a5:f8:ca:5d:e5:14:61:d4:5a: 96:8e:e0:81:7c:08:34:89:3d:cf:3c:78:df:36:85: f7:da:6a:fd:73:23:5e:d8:e8:70:9f:7d:22:7b:e6: fc:55:75:e2:06:d0:54:25:ef:c5:e3:5a:c3:5e:11: dc:fe:51:ab:44:9e:33:c9:43:5a:c9:c9:79:c2:a0: 9c:8c:12:24:d2:b7:fa:5d:6f:27:52:d5:da:88:1d: ac:b4:48:8b:8e:26:17:4e:63:5e:1d:97:09:e7:45: ed:a6:c4:29:1a:80:f4:ae:62:d7:b1:7f:44:d1:c2: 1c:5f:4f:68:56:cf:a0:a6:c7:55:4f:2b:cd:67:8f: 17:42:5d:8c:76:65:6d:34:1e:ae:04:b0:b5:4c:18: 2c:57:06:e0:b8:4b:22:ac:90:40:bc:f4:ae:f6:14: cb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7E:47:3F:84:42:36:9B:EE:48:F5:5F:AA:7D:BC:69:01:88:B6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3e9d01f6-2ea2-316e-b805-e50fa87de3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.168.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:a7:30:da:03:8b:aa:97:68:5b:09:e3:45:9a:e9:f9:ff:58: 16:e3:62:56:b8:ce:82:29:cd:6b:69:9d:74:69:62:24:70:31: ea:05:05:dd:df:cc:d4:fb:11:25:e7:fb:60:4d:b7:d4:53:0d: bd:ee:6e:84:02:7d:3f:aa:e9:26:f7:b9:e2:ed:0d:14:fd:e2: 9f:b1:61:c6:49:46:40:b3:6e:5e:b0:ce:5a:44:05:b1:c6:97: bb:3d:5e:ed:17:dd:a9:dc:cb:13:92:70:a2:85:de:03:a5:05: 8b:c8:71:4f:5e:a2:02:8e:82:61:c7:88:d2:70:b1:e1:8a:64: 23:c4:81:c6:e5:93:cd:e0:19:b0:40:16:36:cc:9e:51:3b:04: 33:43:68:88:c9:31:d1:68:78:60:b6:5d:02:b0:3f:41:b1:f1: 78:f3:e6:87:fc:db:3d:13:8d:bd:55:57:04:17:3a:55:9e:a2: 6b:7e:2e:21:2f:db:08:c9:86:8f:5b:13:1e:db:02:7a:12:09: f8:53:11:e6:68:e5:49:59:92:5c:06:11:c6:80:a8:9b:93:03: e6:29:e9:81:fa:9e:c0:4a:fe:32:14:0a:93:b5:78:37:77:7a: d7:88:a5:5d:49:07:1e:b9:91:ca:8c:46:ad:30:bf:99:86:b3: fd:03:63:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0eVXS/nyHsaWIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OGRjZWQzOGMtY2VjNy00MWRmLWFhYjAtNDlkZWEzNjAwYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls6u2ZLHjtekCyrVN1eP7bjOIE2QTUS9U+Pp sb5m6teTqBXE5v2h6vhjVVO1/IhKH1i2vaPGA3wIH1OnR939Z6nxOO6ev/wUb5gR +4L8uTgXWcVx7rNuzG4MSpQ7uEel+Mpd5RRh1FqWjuCBfAg0iT3PPHjfNoX32mr9 cyNe2Ohwn30ie+b8VXXiBtBUJe/F41rDXhHc/lGrRJ4zyUNaycl5wqCcjBIk0rf6 XW8nUtXaiB2stEiLjiYXTmNeHZcJ50XtpsQpGoD0rmLXsX9E0cIcX09oVs+gpsdV TyvNZ48XQl2MdmVtNB6uBLC1TBgsVwbguEsirJBAvPSu9hTLtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId+Rz+EQjab7kj1X6p9vGkBiLY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2U5ZDAxZjYtMmVhMi0z MTZlLWI4MDUtZTUwZmE4N2RlM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANenMNoDi6qXaFsJ40Wa6fn/WBbjYla4zoIpzWtpnXRpYiRwMeoFBd3f zNT7ESXn+2BNt9RTDb3uboQCfT+q6Sb3ueLtDRT94p+xYcZJRkCzbl6wzlpEBbHG l7s9Xu0X3ancyxOScKKF3gOlBYvIcU9eogKOgmHHiNJwseGKZCPEgcblk83gGbBA FjbMnlE7BDNDaIjJMdFoeGC2XQKwP0Gx8Xjz5of82z0Tjb1VVwQXOlWeomt+LiEv 2wjJho9bEx7bAnoSCfhTEeZo5UlZklwGEcaAqJuTA+Yp6YH6nsBK/jIUCpO1eDd3 eteIpV1JBx65kcqMRq0wv5mGs/0DY2I= -----END CERTIFICATE-----Generated at Sun Apr 6 23:23:19 2025 by rpki-client