$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f230cea-b1a7-365c-b09c-89cc35e6517a.roa File: 8f230cea-b1a7-365c-b09c-89cc35e6517a.roa (raw, json) Hash identifier: sO35ZpuhoJm0Z5KmsvpFyV6ZHReEcUH/ZWUlHVsFK24= Subject key identifier: 9C:32:4F:34:A0:9A:B9:78:24:79:2C:D2:ED:A3:62:AE:F7:27:5F:CE Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1773755A906044B340680 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f230cea-b1a7-365c-b09c-89cc35e6517a.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 24.183.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:77:37:55:a9:06:04:4b:34:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=498c3019-3f12-4bea-8247-03bc99d598e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7f:40:cb:0e:7e:f9:1a:2f:73:08:48:2b:8c: 09:26:f7:5c:7d:04:d6:8c:5b:dd:9b:0b:e0:de:6b: 74:11:e5:17:cb:2d:07:01:a6:6e:16:67:5d:0b:50: 44:94:6d:3a:ae:c6:e1:fc:5b:c0:29:b8:b0:45:05: f4:d3:23:d8:98:58:ab:db:f4:0d:06:98:d7:32:79: 67:3f:fb:cf:3b:6e:29:e3:c8:a8:db:9b:c8:d4:a5: 40:51:a6:4f:45:e2:06:e9:23:6a:93:d4:ca:0c:f6: a3:27:f4:39:ef:37:db:50:09:35:e7:bf:7c:5b:63: bc:b2:c0:77:a9:33:7a:f7:d7:d6:77:14:cc:d5:5e: dc:ed:33:b7:d3:06:0b:f0:cd:d2:e0:54:3a:e2:e6: b6:1c:60:e7:76:31:a1:50:41:45:18:61:f3:3d:c2: 77:03:8d:a3:17:79:f8:2c:56:5c:11:c3:fe:7b:85: 56:00:1e:01:7e:c2:ee:6f:86:c5:ae:f2:45:1a:ac: 23:c6:02:52:c4:98:02:23:38:ea:e3:60:2c:ce:7a: 39:68:00:5a:89:a2:56:c1:c0:10:b9:c3:6a:16:ba: 4b:0c:45:ff:5f:03:b0:32:f5:5f:ef:d0:7a:25:6d: 5a:2d:21:e3:7f:6a:c6:bd:52:ec:f9:72:4a:9d:6c: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:32:4F:34:A0:9A:B9:78:24:79:2C:D2:ED:A3:62:AE:F7:27:5F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8f230cea-b1a7-365c-b09c-89cc35e6517a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.183.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d7:38:31:98:b4:96:99:c9:6a:cc:29:db:ac:5d:9a:c3:f9: b2:6a:15:69:16:cb:b6:e5:75:42:7e:e0:50:8b:60:0d:d8:34: c4:f9:5e:6b:33:d1:bf:43:1d:c5:6f:3c:47:1f:82:3a:b6:5d: 69:5f:fe:41:58:8d:b9:03:56:14:6b:48:65:72:3c:d4:d8:2a: 8f:55:04:e0:ab:34:35:8a:99:40:29:12:e5:46:45:29:2d:37: ef:f4:e9:a3:7f:c7:23:1f:38:23:01:99:cb:fb:cf:9b:97:c0: 62:2a:9e:e9:11:f3:37:0f:0b:1a:69:bf:e9:d0:38:53:03:84: 35:0b:12:ad:8e:fd:4e:cf:c7:f6:6b:a8:38:35:90:f8:33:6b: 0b:0f:93:06:6b:ef:89:c7:83:b3:3c:34:e0:31:9d:3d:8a:32: a6:90:9f:a9:f2:e5:42:9e:51:d2:0d:3f:b7:44:1f:74:6c:0d: ce:8f:17:49:aa:33:b5:d1:81:83:ee:8c:82:38:89:51:40:cc: 9e:7f:d1:c0:e7:6a:40:47:fe:45:69:31:c5:47:20:4e:aa:f9: ce:25:8a:b7:80:da:18:20:66:ad:56:5b:32:f8:87:95:7e:2d: df:fd:94:55:c6:9c:bb:60:b1:5f:1e:20:9b:1d:94:ab:d1:2e: 17:67:5c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Xc3VakGBEs0BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NDk4YzMwMTktM2YxMi00YmVhLTgyNDctMDNiYzk5ZDU5OGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX9Ayw5++RovcwhIK4wJJvdcfQTWjFvdmwvg 3mt0EeUXyy0HAaZuFmddC1BElG06rsbh/FvAKbiwRQX00yPYmFir2/QNBpjXMnln P/vPO24p48io25vI1KVAUaZPReIG6SNqk9TKDPajJ/Q57zfbUAk15798W2O8ssB3 qTN699fWdxTM1V7c7TO30wYL8M3S4FQ64ua2HGDndjGhUEFFGGHzPcJ3A42jF3n4 LFZcEcP+e4VWAB4BfsLub4bFrvJFGqwjxgJSxJgCIzjq42Aszno5aABaiaJWwcAQ ucNqFrpLDEX/XwOwMvVf79B6JW1aLSHjf2rGvVLs+XJKnWxt5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwyTzSgmrl4JHks0u2jYq73J1/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOGYyMzBjZWEtYjFhNy0z NjVjLWIwOWMtODljYzM1ZTY1MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGLeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDXODGYtJaZyWrMKdusXZrD+bJqFWkWy7bldUJ+4FCLYA3YNMT5Xmsz 0b9DHcVvPEcfgjq2XWlf/kFYjbkDVhRrSGVyPNTYKo9VBOCrNDWKmUApEuVGRSkt N+/06aN/xyMfOCMBmcv7z5uXwGIqnukR8zcPCxppv+nQOFMDhDULEq2O/U7Px/Zr qDg1kPgzawsPkwZr74nHg7M8NOAxnT2KMqaQn6ny5UKeUdINP7dEH3RsDc6PF0mq M7XRgYPujII4iVFAzJ5/0cDnakBH/kVpMcVHIE6q+c4lireA2hggZq1WWzL4h5V+ Ld/9lFXGnLtgsV8eIJsdlKvRLhdnXDE= -----END CERTIFICATE-----Generated at Sun Apr 6 22:40:36 2025 by rpki-client