$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71d4f511-36a3-3a4e-aac9-53727f9a47a8.roa File: 71d4f511-36a3-3a4e-aac9-53727f9a47a8.roa (raw, json) Hash identifier: jHoA1SIBg4P+/cgKZ5eWQv6MXgiVmPSQBDEbVRuW3ro= Subject key identifier: 66:60:4A:66:F1:93:CE:A9:6A:49:45:45:36:C7:CE:05:46:99:B8:58 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1753BEF5BB8446C353880 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71d4f511-36a3-3a4e-aac9-53727f9a47a8.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 68.112.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:75:3b:ef:5b:b8:44:6c:35:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=7ddb6e68-39e9-456b-9237-90fc2ae50f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:de:31:36:ea:c5:25:91:03:5e:e6:f8:ad:b0: d7:14:a3:89:58:28:b8:0a:5f:49:6c:6d:ec:c0:15: e3:f4:d0:8f:43:8b:5f:4a:95:d6:28:88:cc:00:f9: 86:de:0d:f3:0a:05:8d:c5:21:c4:0c:bb:01:ca:ea: 5a:ac:52:88:af:d6:3b:1c:47:6b:85:e4:ef:f5:00: 48:1a:46:c6:fe:28:a4:68:9f:8a:9f:32:f0:84:e6: 1f:d0:ee:23:ba:f4:36:55:c0:18:e9:c4:4a:05:fc: 3f:f0:c4:45:ab:e9:bd:d7:4a:bf:4c:ea:ab:67:c2: 4d:0f:1a:49:53:fd:67:d4:bb:8f:b0:f1:38:f8:4c: 8c:b7:e3:c1:aa:cd:6c:67:13:f3:73:11:cf:d7:83: 1f:fa:db:57:5a:0d:28:ca:ce:c6:86:7e:73:e8:6a: b9:7f:88:e1:11:ab:a1:6a:4e:c6:e9:68:ba:95:71: 43:85:3c:9f:67:de:c4:fb:8c:db:27:e7:bc:d6:40: 77:2f:03:f2:04:56:ee:0c:8b:82:93:03:74:20:72: 8e:f7:f5:f6:fe:77:7d:4f:00:18:03:63:61:d4:d9: ad:86:30:1e:55:ae:b9:59:fc:68:24:8b:47:5c:b7: 32:39:0a:b2:83:db:2c:ab:16:3c:26:26:d4:34:e0: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:60:4A:66:F1:93:CE:A9:6A:49:45:45:36:C7:CE:05:46:99:B8:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/71d4f511-36a3-3a4e-aac9-53727f9a47a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.112.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a3:7c:e0:a6:5b:d1:c1:af:2a:36:b8:d7:4f:ad:ee:bf:db: 91:4c:45:a0:16:a1:4c:15:99:bd:dc:1e:63:65:5c:b7:0f:a6: c4:34:b6:1b:46:85:97:a3:f8:f4:b5:99:e1:fa:70:f6:42:79: c4:14:e2:0d:0f:dd:b8:c2:11:33:d3:84:54:75:af:c3:a6:71: 9c:21:bb:db:6e:f6:2b:0e:60:36:ed:75:49:39:0d:30:46:23: cb:ad:5e:24:43:6f:cc:66:87:ca:12:03:5e:d8:51:e7:94:02: a4:1c:f3:f9:92:0d:48:31:6d:04:4e:40:d8:a9:84:01:b7:d9: e6:a0:fd:34:d2:0e:a5:88:12:28:bf:dc:a0:8f:23:69:4f:23: 3a:06:f1:a6:28:44:5d:3a:9d:fb:c2:47:97:48:d3:ed:98:86: 02:ed:b4:9d:7f:4d:43:c0:15:4c:02:a4:6a:89:11:23:b8:7e: 59:89:43:e4:d5:e0:18:3b:47:44:2b:c6:1c:11:33:06:1e:02: 32:d4:22:b9:10:77:85:ae:49:36:a4:fe:a2:bc:62:a9:25:69: e9:b0:96:6f:bc:30:15:f2:9c:3b:b1:4a:6d:be:fa:aa:3c:23: 15:52:1c:31:a1:7a:db:6d:b6:57:4f:a9:08:55:4b:61:71:86: 08:2b:a5:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0XU771u4RGw1OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk N2RkYjZlNjgtMzllOS00NTZiLTkyMzctOTBmYzJhZTUwZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit4xNurFJZEDXub4rbDXFKOJWCi4Cl9JbG3s wBXj9NCPQ4tfSpXWKIjMAPmG3g3zCgWNxSHEDLsByuparFKIr9Y7HEdrheTv9QBI GkbG/iikaJ+KnzLwhOYf0O4juvQ2VcAY6cRKBfw/8MRFq+m910q/TOqrZ8JNDxpJ U/1n1LuPsPE4+EyMt+PBqs1sZxPzcxHP14Mf+ttXWg0oys7Ghn5z6Gq5f4jhEauh ak7G6Wi6lXFDhTyfZ97E+4zbJ+e81kB3LwPyBFbuDIuCkwN0IHKO9/X2/nd9TwAY A2Nh1NmthjAeVa65WfxoJItHXLcyOQqyg9ssqxY8JibUNOBZjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZgSmbxk86paklFRTbHzgVGmbhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNzFkNGY1MTEtMzZhMy0z YTRlLWFhYzktNTM3MjdmOWE0N2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRHBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKjfOCmW9HBryo2uNdPre6/25FMRaAWoUwVmb3cHmNlXLcPpsQ0thtG hZej+PS1meH6cPZCecQU4g0P3bjCETPThFR1r8OmcZwhu9tu9isOYDbtdUk5DTBG I8utXiRDb8xmh8oSA17YUeeUAqQc8/mSDUgxbQROQNiphAG32eag/TTSDqWIEii/ 3KCPI2lPIzoG8aYoRF06nfvCR5dI0+2YhgLttJ1/TUPAFUwCpGqJESO4flmJQ+TV 4Bg7R0QrxhwRMwYeAjLUIrkQd4WuSTak/qK8Yqklaemwlm+8MBXynDuxSm2++qo8 IxVSHDGhettttldPqQhVS2FxhggrpbU= -----END CERTIFICATE-----Generated at Sun Apr 6 23:05:53 2025 by rpki-client