$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/701133d0-5361-3ea6-8e31-5e5ae93c2979.roa File: 701133d0-5361-3ea6-8e31-5e5ae93c2979.roa (raw, json) Hash identifier: bVawnQ1qoiLQuYu1ppXKaMCZSopr8Zny1o5/L2Pxi5M= Subject key identifier: 3E:CD:38:0A:99:51:53:10:41:56:9C:D4:A1:66:AE:80:2E:A1:78:A4 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D180EC49CFBB88814A4197 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/701133d0-5361-3ea6-8e31-5e5ae93c2979.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 68.185.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:80:ec:49:cf:bb:88:81:4a:41:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=3a8ac2ab-e94c-4df9-8e0f-61bad9bbf944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b1:22:70:df:cf:4b:c8:c4:10:9a:98:b4:c2: 8a:08:42:d1:ff:51:98:1e:96:93:25:b2:4b:78:44: 36:80:ec:39:36:f4:15:00:14:7c:1d:6f:bb:a9:4d: e6:97:8d:38:6f:e6:9d:fe:c6:28:1d:16:fc:79:bd: fc:d5:28:18:e3:ed:d1:9f:58:72:de:86:e6:31:1e: 4d:11:56:c4:3b:18:9a:50:2c:42:a2:11:3f:86:45: d1:37:ec:8e:7f:38:6e:d4:39:dd:e1:65:a3:d8:7f: 8b:06:b6:bc:3e:bb:68:76:e5:72:39:4d:a2:08:cb: 37:8f:b1:a4:5e:b2:c0:1b:1c:4e:54:31:6e:cf:67: be:1f:8d:35:17:6b:79:03:0d:f0:81:44:7b:08:e5: 55:30:50:7b:8c:27:e9:bb:ae:34:f0:0a:aa:41:95: 3a:44:6f:e6:cd:72:c1:14:ed:2e:eb:51:74:c6:cd: d8:21:fe:1e:d4:cc:93:35:09:bb:a2:cb:ab:57:c5: 73:4e:5e:c6:9a:21:54:48:55:85:fc:69:50:49:a1: 29:e4:1f:b6:89:16:86:93:b4:00:37:17:09:2b:67: e9:dc:85:fe:fc:95:52:bc:6b:2c:6a:89:0e:b7:de: ff:af:45:36:85:c0:ae:1b:20:a7:d0:01:df:6b:39: 23:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CD:38:0A:99:51:53:10:41:56:9C:D4:A1:66:AE:80:2E:A1:78:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/701133d0-5361-3ea6-8e31-5e5ae93c2979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.185.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:60:53:e8:91:3d:fa:f5:79:a0:69:82:bd:c4:a3:9b:48:c7: c1:c5:ca:ba:72:31:20:00:46:55:0b:9d:0c:ab:d8:b4:12:15: 1f:b8:6d:26:9b:fd:0e:5f:45:0b:e8:ad:44:26:05:d9:2e:4e: 8a:36:87:2c:7a:48:08:fc:1b:54:c6:1b:25:5b:12:41:1a:68: be:be:d7:6e:52:e4:fc:c4:87:29:18:20:85:f6:d4:75:4f:49: 7b:2d:6b:77:a3:76:8a:19:65:79:37:b5:40:75:76:ed:99:69: c0:45:06:81:16:bb:8e:6c:46:14:0f:5b:68:f9:e0:54:1b:fe: 29:5b:58:60:38:bf:b3:5a:36:51:de:cc:d4:de:ad:56:9b:09: 9a:33:ba:06:a3:92:8c:3a:88:5a:06:2f:d7:84:d0:d4:05:89: 5c:89:15:fd:e8:d7:8d:46:67:56:ae:de:77:a0:b3:39:3a:95: bb:e1:e3:ed:e6:fb:c0:85:2e:be:25:46:f3:08:cf:4e:80:6d: 19:8d:77:f3:f3:21:85:1a:bc:da:2b:8e:cd:13:44:08:1c:af: 31:8b:34:53:9c:5f:c9:ff:bb:de:35:3e:9d:ba:1c:41:7a:b5: 39:e4:b3:23:22:0f:ff:a5:33:3b:36:e9:0a:4f:2c:9c:e8:02: 55:4e:1d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0YDsSc+7iIFKQZcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk M2E4YWMyYWItZTk0Yy00ZGY5LThlMGYtNjFiYWQ5YmJmOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LEicN/PS8jEEJqYtMKKCELR/1GYHpaTJbJL eEQ2gOw5NvQVABR8HW+7qU3ml404b+ad/sYoHRb8eb381SgY4+3Rn1hy3obmMR5N EVbEOxiaUCxCohE/hkXRN+yOfzhu1Dnd4WWj2H+LBra8PrtoduVyOU2iCMs3j7Gk XrLAGxxOVDFuz2e+H401F2t5Aw3wgUR7COVVMFB7jCfpu6408AqqQZU6RG/mzXLB FO0u61F0xs3YIf4e1MyTNQm7osurV8VzTl7GmiFUSFWF/GlQSaEp5B+2iRaGk7QA NxcJK2fp3IX+/JVSvGssaokOt97/r0U2hcCuGyCn0AHfazkjhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7NOAqZUVMQQVac1KFmroAuoXikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzAxMTMzZDAtNTM2MS0z ZWE2LThlMzEtNWU1YWU5M2MyOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRLloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5gU+iRPfr1eaBpgr3Eo5tIx8HFyrpyMSAARlULnQyr2LQSFR+4bSab /Q5fRQvorUQmBdkuToo2hyx6SAj8G1TGGyVbEkEaaL6+125S5PzEhykYIIX21HVP SXsta3ejdooZZXk3tUB1du2ZacBFBoEWu45sRhQPW2j54FQb/ilbWGA4v7NaNlHe zNTerVabCZozugajkow6iFoGL9eE0NQFiVyJFf3o141GZ1au3negszk6lbvh4+3m +8CFLr4lRvMIz06AbRmNd/PzIYUavNorjs0TRAgcrzGLNFOcX8n/u941Pp26HEF6 tTnksyMiD/+lMzs26QpPLJzoAlVOHZM= -----END CERTIFICATE-----Generated at Sun Apr 6 23:27:59 2025 by rpki-client