$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/70ba0847-4942-3548-b7f0-f2db497fa857.roa File: 70ba0847-4942-3548-b7f0-f2db497fa857.roa (raw, json) Hash identifier: SXdb+tvT+uWpnRGx7+qWDiSyyaOLkC+c5DOAifn5sl4= Subject key identifier: 7C:93:4A:02:95:9B:D1:8F:57:6A:11:7E:DE:81:79:20:EE:A3:EF:00 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D180C6E2589206275C88A4 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/70ba0847-4942-3548-b7f0-f2db497fa857.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 68.119.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:80:c6:e2:58:92:06:27:5c:88:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=9c623efe-e3e9-41d6-9205-1a5353c612db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:97:dd:45:c1:0e:84:1b:0a:3f:1c:8b:2b: 45:7c:2e:d0:e3:45:00:b9:60:4b:00:b1:50:ff:8c: c2:dc:9d:f6:ad:2d:c6:2a:de:75:68:2f:e8:89:a1: df:75:a9:d0:54:9b:71:10:d7:35:f0:a3:2e:05:ba: 7d:7a:41:21:10:50:f2:01:e3:76:fa:c4:73:87:aa: 60:ec:86:d8:a8:92:de:91:0b:8e:86:2c:7d:e6:ca: 24:3d:0c:7a:ff:39:2f:f4:3d:ec:5f:dd:54:07:4d: a1:96:2b:81:f4:74:86:8d:fa:50:2c:6c:ce:37:85: c2:fd:c8:5b:b9:56:11:fc:34:7f:43:8e:fd:2d:98: 33:9b:0f:75:26:68:1a:5b:9f:38:3d:c4:fe:eb:43: 11:72:e9:e1:4e:b1:4d:28:1b:06:1b:a1:2d:8b:19: 68:32:ad:98:45:d5:bd:e4:fb:29:d8:8e:79:42:4c: eb:67:31:f2:ce:5e:61:ef:87:b8:60:b2:d2:25:07: e1:aa:04:49:f1:4e:c4:0d:1a:6d:4d:3b:e4:e5:e6: 80:7c:61:93:75:54:b6:81:29:8d:49:4f:58:37:c2: 76:a4:73:53:98:1d:49:2d:cf:c9:cc:21:bb:da:24: 9d:0d:38:ca:98:58:6f:a1:2b:76:01:c5:32:26:0c: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:93:4A:02:95:9B:D1:8F:57:6A:11:7E:DE:81:79:20:EE:A3:EF:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/70ba0847-4942-3548-b7f0-f2db497fa857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.119.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:fc:5c:20:40:1e:80:f3:0d:53:15:b6:29:e2:e2:9f:53:88: c7:c1:52:9c:8e:5a:1c:21:7f:b3:a9:9c:c7:a2:ae:cc:34:4b: 3b:0d:ff:f7:41:20:56:6a:0d:70:2c:dc:ae:79:91:e8:9e:41: 8b:61:90:a5:4c:df:f6:e7:8a:21:c3:4e:73:1d:7e:c2:f8:7c: 37:df:89:ad:88:50:29:e5:ee:cb:26:16:91:32:5d:2a:9c:e8: 48:0e:2d:6b:f7:1c:2a:3f:d9:36:57:2e:21:17:ab:5c:e9:0f: db:f0:5d:7e:dd:4c:0e:2c:09:9c:89:b7:e8:b1:51:43:32:17: 52:88:dd:54:4c:cf:ee:b1:25:db:be:16:46:6e:b6:c4:50:b3: 82:2d:9a:e2:46:6f:13:d1:17:6e:82:cd:17:c0:73:26:9d:6b: 5e:20:bb:f4:47:8e:e3:e6:73:e4:6a:04:e6:59:6d:d8:40:93: f3:d7:11:e7:7e:ae:8b:50:31:8f:bb:9d:9a:5b:ea:ee:5c:24: 97:3c:6b:1b:e5:4d:be:f4:c8:27:86:99:68:b5:ff:a4:40:7e: 3c:7a:3f:03:3e:63:e7:14:4e:8a:06:9e:8d:c0:45:d8:e1:89: 10:5c:95:dd:f6:b4:ca:00:f2:21:d8:2e:6f:a4:41:e9:d7:f6: fe:49:32:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0YDG4liSBidciKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OWM2MjNlZmUtZTNlOS00MWQ2LTkyMDUtMWE1MzUzYzYxMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bWX3UXBDoQbCj8ciytFfC7Q40UAuWBLALFQ /4zC3J32rS3GKt51aC/oiaHfdanQVJtxENc18KMuBbp9ekEhEFDyAeN2+sRzh6pg 7IbYqJLekQuOhix95sokPQx6/zkv9D3sX91UB02hliuB9HSGjfpQLGzON4XC/chb uVYR/DR/Q479LZgzmw91JmgaW584PcT+60MRcunhTrFNKBsGG6EtixloMq2YRdW9 5Psp2I55QkzrZzHyzl5h74e4YLLSJQfhqgRJ8U7EDRptTTvk5eaAfGGTdVS2gSmN SU9YN8J2pHNTmB1JLc/JzCG72iSdDTjKmFhvoSt2AcUyJgxgBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyTSgKVm9GPV2oRft6BeSDuo+8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzBiYTA4NDctNDk0Mi0z NTQ4LWI3ZjAtZjJkYjQ5N2ZhODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRHeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD8XCBAHoDzDVMVtini4p9TiMfBUpyOWhwhf7OpnMeirsw0SzsN//dB IFZqDXAs3K55keieQYthkKVM3/bniiHDTnMdfsL4fDffia2IUCnl7ssmFpEyXSqc 6EgOLWv3HCo/2TZXLiEXq1zpD9vwXX7dTA4sCZyJt+ixUUMyF1KI3VRMz+6xJdu+ FkZutsRQs4ItmuJGbxPRF26CzRfAcyada14gu/RHjuPmc+RqBOZZbdhAk/PXEed+ rotQMY+7nZpb6u5cJJc8axvlTb70yCeGmWi1/6RAfjx6PwM+Y+cUTooGno3ARdjh iRBcld32tMoA8iHYLm+kQenX9v5JMng= -----END CERTIFICATE-----Generated at Sun Apr 6 23:30:11 2025 by rpki-client