$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96d0edaf-4ea5-3d46-88ee-cfd37f8e58f4.roa File: 96d0edaf-4ea5-3d46-88ee-cfd37f8e58f4.roa (raw, json) Hash identifier: 1f9TOMEBhpvEM18oGWI8MY1G99ZwuilxGPmQr4Z1PdQ= Subject key identifier: A5:39:98:FA:71:CD:89:96:F8:FF:BE:A4:73:B0:3F:9E:0D:90:03:40 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D16A3161868A2DC7A409B0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96d0edaf-4ea5-3d46-88ee-cfd37f8e58f4.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 24.159.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:6a:31:61:86:8a:2d:c7:a4:09:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=da01ecaf-b786-4c96-b0a1-89eba28f0ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:e0:3f:75:ee:31:12:29:d7:1c:91:b9:80: 95:3f:5b:30:4b:a8:c2:80:8c:1e:49:46:2e:f2:05: 0b:47:fa:fc:d1:e4:97:fb:c2:43:ef:d5:a0:11:34: 14:5d:f2:d2:47:3b:49:f0:65:9b:7d:17:4a:e1:8b: 33:e8:c8:00:dd:54:f0:84:eb:9f:83:ce:81:0d:69: ba:38:dd:ad:d3:0a:9b:61:68:db:06:b6:86:55:38: cb:9e:90:af:1c:0e:50:0b:bf:41:88:d2:00:83:b9: d5:e0:80:35:13:bd:2d:ec:76:f9:cd:1c:b3:59:31: a3:7c:a5:3c:69:5b:c8:3f:82:0f:3a:6b:a6:75:05: f8:bc:6b:f8:bf:25:ad:ee:27:03:e6:44:81:fd:20: 02:7b:cb:37:4d:6a:61:cb:45:03:98:9e:9c:4a:ce: 42:98:f3:80:de:90:a1:d5:19:f4:c3:31:bf:90:61: a8:f5:df:6d:f6:31:13:d2:21:1d:18:23:35:62:fb: 23:df:03:5b:d9:2b:92:ee:fc:b4:c1:5f:ce:3b:69: ad:8a:90:a6:b5:b6:43:d0:00:31:f5:b7:0b:12:bb: 14:3a:40:f1:31:14:10:22:02:79:c7:1d:40:3d:82: 6d:1f:6e:5f:ef:33:60:04:24:0f:ee:be:ca:0e:0d: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:39:98:FA:71:CD:89:96:F8:FF:BE:A4:73:B0:3F:9E:0D:90:03:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96d0edaf-4ea5-3d46-88ee-cfd37f8e58f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.159.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0a:2f:32:0b:b0:b8:3e:33:c7:72:b3:7b:b4:bf:4b:8c:71: 75:c3:12:3d:e9:6d:27:b1:34:f2:dc:5e:11:63:13:7b:48:a6: 5c:a0:82:aa:e2:8f:4f:ac:08:5f:04:4d:dd:ab:80:5f:3c:b9: b3:70:cb:d7:44:ee:b7:c8:b0:e2:f4:1c:ab:d0:8e:43:12:93: ce:cd:a7:18:c3:ac:6d:83:bd:09:4f:dd:9c:1e:b2:c1:0d:7d: b9:6b:f2:ab:9d:9f:83:d3:06:4f:1b:86:0c:2c:43:2f:41:9b: e6:c1:d3:3f:11:c5:08:35:d5:70:ed:09:70:ce:a5:8a:1f:48: a5:d4:c3:2b:3d:3b:1f:b9:53:1c:36:9b:5b:ea:27:d6:61:3c: 8b:e6:bc:68:ae:e4:37:02:ad:2c:1a:83:4d:a3:ae:96:5d:e5: a9:da:52:22:c5:83:00:b0:05:2d:28:5a:81:78:d6:b2:78:35: 16:46:b0:10:d1:83:0c:c7:62:96:f1:66:f7:44:59:27:f0:ad: 15:4d:10:56:8a:97:da:dd:11:a1:62:55:39:1c:a7:08:5c:8d: 9a:6f:7f:39:95:33:2b:63:34:99:0f:ab:54:3e:0a:5f:b9:6c: ab:c8:51:8b:2e:6f:c2:4f:dc:a4:90:55:27:77:53:62:30:10: 7f:b9:70:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0WoxYYaKLcekCbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZGEwMWVjYWYtYjc4Ni00Yzk2LWIwYTEtODllYmEyOGYwYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfgP3XuMRIp1xyRuYCVP1swS6jCgIweSUYu 8gULR/r80eSX+8JD79WgETQUXfLSRztJ8GWbfRdK4Ysz6MgA3VTwhOufg86BDWm6 ON2t0wqbYWjbBraGVTjLnpCvHA5QC79BiNIAg7nV4IA1E70t7Hb5zRyzWTGjfKU8 aVvIP4IPOmumdQX4vGv4vyWt7icD5kSB/SACe8s3TWphy0UDmJ6cSs5CmPOA3pCh 1Rn0wzG/kGGo9d9t9jET0iEdGCM1Yvsj3wNb2SuS7vy0wV/OO2mtipCmtbZD0AAx 9bcLErsUOkDxMRQQIgJ5xx1APYJtH25f7zNgBCQP7r7KDg2AEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU5mPpxzYmW+P++pHOwP54NkANAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTZkMGVkYWYtNGVhNS0z ZDQ2LTg4ZWUtY2ZkMzdmOGU1OGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGJ9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcKLzILsLg+M8dys3u0v0uMcXXDEj3pbSexNPLcXhFjE3tIplyggqri j0+sCF8ETd2rgF88ubNwy9dE7rfIsOL0HKvQjkMSk87NpxjDrG2DvQlP3ZwessEN fblr8qudn4PTBk8bhgwsQy9Bm+bB0z8RxQg11XDtCXDOpYofSKXUwys9Ox+5Uxw2 m1vqJ9ZhPIvmvGiu5DcCrSwag02jrpZd5anaUiLFgwCwBS0oWoF41rJ4NRZGsBDR gwzHYpbxZvdEWSfwrRVNEFaKl9rdEaFiVTkcpwhcjZpvfzmVMytjNJkPq1Q+Cl+5 bKvIUYsub8JP3KSQVSd3U2IwEH+5cNg= -----END CERTIFICATE-----Generated at Sun Apr 6 22:42:36 2025 by rpki-client