$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/412ae0fc-1269-3c6c-ba70-2dd6432291bc.roa File: 412ae0fc-1269-3c6c-ba70-2dd6432291bc.roa (raw, json) Hash identifier: QBwePsnZmfypzKYwrvkJjLjBmB0EsQrMV0+7lLmR1B4= Subject key identifier: 34:10:3F:1E:0E:78:AB:39:57:37:F4:C3:6E:6C:6E:07:06:96:36:86 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D215E6BA20DE9C98F85794 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/412ae0fc-1269-3c6c-ba70-2dd6432291bc.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 159.56.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d2:15:e6:ba:20:de:9c:98:f8:57:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=95d9d005-1e0e-44bb-96cc-e17b6062f4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:8d:a0:63:d0:23:61:1e:7a:bb:02:81:fe: 11:ff:88:09:11:b6:b1:14:84:8e:4c:a4:8f:41:ef: e8:df:9c:7c:cc:ea:ce:67:b6:52:03:ed:d2:6d:88: 6f:4d:fd:c5:c5:79:f5:fd:dd:1b:cc:99:6a:5b:88: 6d:2b:b0:0b:fb:91:da:80:dd:1b:43:75:00:65:14: 92:28:01:b5:c5:33:47:f6:62:0c:00:e2:e7:1b:8e: de:b9:b4:f7:ca:9f:c7:cd:6f:6e:00:7b:5e:80:e1: a8:93:72:12:77:94:90:da:35:d6:f0:5b:2b:78:ac: ae:a6:8a:9e:78:f8:a2:27:55:21:70:8c:19:eb:ba: da:d3:3d:3e:73:68:2c:f4:ac:d5:6f:67:5d:4d:c3: d2:c4:68:1f:e6:97:4f:4d:67:6d:5a:13:1e:1d:00: f8:4f:a7:80:5c:0b:00:9f:20:99:6f:0e:9a:5f:32: 3e:8e:f9:4d:8a:51:32:b8:60:f0:b4:0e:31:a5:05: b9:03:1d:00:0a:49:ce:41:3d:01:86:4d:b3:0c:d6: 8e:bb:a8:12:14:77:e4:1e:af:28:30:29:9e:2a:e6: 26:b3:36:b5:40:8e:1a:5c:22:05:d7:4d:fe:3d:af: 74:65:09:31:e7:99:7e:2b:cb:ef:2c:3f:db:0b:28: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:10:3F:1E:0E:78:AB:39:57:37:F4:C3:6E:6C:6E:07:06:96:36:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/412ae0fc-1269-3c6c-ba70-2dd6432291bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 159.56.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6c:78:ea:0c:ea:12:b4:59:26:78:0a:84:89:73:d8:41:93: a1:8c:18:cd:42:35:33:5b:5a:f5:f6:0a:a9:06:40:19:f7:d0: df:86:58:e7:d2:b4:0c:64:ec:8d:3a:9a:69:61:75:bc:8a:80: 1f:ee:16:66:aa:f6:c3:20:e6:a9:89:29:b9:40:26:4e:3d:1f: a7:40:2d:63:0c:12:59:c8:e2:7b:5f:e5:a3:ab:71:bc:b2:c8: 47:a1:7f:d0:cf:3d:92:e6:90:a2:3c:6e:b1:d4:7f:cf:ba:5d: 51:da:2b:01:94:02:0c:55:90:b3:ad:24:92:35:a0:aa:4c:7b: 4a:c9:13:56:e0:40:6a:dd:3d:45:87:57:55:85:9f:b5:f0:0c: 36:0a:40:b8:a1:c4:01:74:8f:e0:fd:98:83:b2:ed:19:3e:22: dd:1f:ca:35:9e:eb:54:08:f2:63:3c:f6:3f:5d:7f:01:46:9b: 07:50:fd:f3:fe:77:12:77:58:6f:39:8c:e2:e9:e2:1f:f1:c4: 06:15:e2:13:49:a6:ee:58:b9:e2:fd:2f:96:ef:f7:3b:3e:d6: 29:8d:9f:aa:e9:53:76:a8:28:40:17:8b:d8:73:a9:48:45:79: bd:21:be:78:97:b1:83:68:8d:ed:7e:ec:27:ec:72:c0:fd:66: 1e:a4:80:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0hXmuiDenJj4V5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OTVkOWQwMDUtMWUwZS00NGJiLTk2Y2MtZTE3YjYwNjJmNGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpGNoGPQI2EeersCgf4R/4gJEbaxFISOTKSP Qe/o35x8zOrOZ7ZSA+3SbYhvTf3FxXn1/d0bzJlqW4htK7AL+5HagN0bQ3UAZRSS KAG1xTNH9mIMAOLnG47eubT3yp/HzW9uAHtegOGok3ISd5SQ2jXW8FsreKyupoqe ePiiJ1UhcIwZ67ra0z0+c2gs9KzVb2ddTcPSxGgf5pdPTWdtWhMeHQD4T6eAXAsA nyCZbw6aXzI+jvlNilEyuGDwtA4xpQW5Ax0ACknOQT0Bhk2zDNaOu6gSFHfkHq8o MCmeKuYmsza1QI4aXCIF103+Pa90ZQkx55l+K8vvLD/bCyhVKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQQPx4OeKs5Vzf0w25sbgcGljaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNDEyYWUwZmMtMTI2OS0z YzZjLWJhNzAtMmRkNjQzMjI5MWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnziAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVseOoM6hK0WSZ4CoSJc9hBk6GMGM1CNTNbWvX2CqkGQBn30N+GWOfS tAxk7I06mmlhdbyKgB/uFmaq9sMg5qmJKblAJk49H6dALWMMElnI4ntf5aOrcbyy yEehf9DPPZLmkKI8brHUf8+6XVHaKwGUAgxVkLOtJJI1oKpMe0rJE1bgQGrdPUWH V1WFn7XwDDYKQLihxAF0j+D9mIOy7Rk+It0fyjWe61QI8mM89j9dfwFGmwdQ/fP+ dxJ3WG85jOLp4h/xxAYV4hNJpu5YueL9L5bv9zs+1imNn6rpU3aoKEAXi9hzqUhF eb0hvniXsYNoje1+7CfscsD9Zh6kgN0= -----END CERTIFICATE-----Generated at Sun Apr 6 23:18:17 2025 by rpki-client