$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a31df491-aa9e-398f-8bf2-7d7490005044.roa File: a31df491-aa9e-398f-8bf2-7d7490005044.roa (raw, json) Hash identifier: sfKHwzwnvzYDg8R4rVKATpJemeN0q0qkTHQr1DIalwU= Subject key identifier: 91:E7:B8:44:CE:85:1F:F0:04:BF:CA:76:4C:63:7B:50:E0:4D:08:34 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848F22C73CC8FABC4A3303C2980 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a31df491-aa9e-398f-8bf2-7d7490005044.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 15085 IP address blocks: 66.168.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:73:cc:8f:ab:c4:a3:30:3c:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=15a553be-52de-470d-9718-1069ce441870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:38:ca:f4:d9:8e:42:b4:40:50:46:29:bf:6b: 39:bc:f4:69:d0:db:75:02:f3:38:08:7d:2c:d4:b1: 08:eb:7f:9b:8b:5f:87:a9:19:58:e7:f1:56:88:d7: db:80:89:00:d3:2a:94:13:6a:3c:81:b0:36:a5:87: 0c:eb:3e:66:38:2b:4b:b4:01:ec:da:4a:49:77:df: dd:f8:49:0a:78:86:28:a4:2e:dc:f9:7f:ab:a7:c9: 51:38:bf:b6:07:b2:0f:a9:5f:f3:9f:b3:eb:ea:2d: d7:eb:56:44:fe:16:43:ad:b6:d1:24:5f:1e:ba:f1: a4:4a:38:f0:5e:f3:b1:9c:8a:d8:86:0e:18:b8:21: 31:1e:92:49:f2:40:e6:b0:f3:6c:29:75:64:17:ad: aa:ae:9f:c9:7d:08:7c:15:02:c2:71:38:a8:ca:c8: 84:80:d9:c0:de:10:56:35:49:d7:71:db:16:89:12: 9d:2e:1f:f7:86:97:f6:b8:f1:45:36:07:56:7a:5c: 5b:e1:95:92:ce:1e:9c:89:ba:b1:d0:74:44:20:11: 3c:69:fc:1a:5b:73:9f:1a:aa:d2:7f:69:e1:d9:9f: 51:12:82:d1:9e:d5:21:91:31:ed:36:a6:34:46:dd: b0:70:d0:17:75:3b:64:97:05:5f:19:2b:20:9e:b7: fb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E7:B8:44:CE:85:1F:F0:04:BF:CA:76:4C:63:7B:50:E0:4D:08:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a31df491-aa9e-398f-8bf2-7d7490005044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.168.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:7b:99:c8:ef:cc:f1:ed:b5:eb:f7:8d:ce:6c:4e:ad:52:47: 70:79:04:22:33:5b:c0:18:ea:47:b3:a3:90:0d:22:20:45:ec: a8:85:27:7b:8a:7f:ad:b1:62:e2:cf:a3:0f:f5:b9:2c:ea:ea: fe:f9:3f:a0:dd:3b:99:61:3e:15:4b:1d:69:5b:df:f1:bc:6b: 43:b4:34:c4:d7:53:fb:19:88:00:61:3e:45:93:cb:d2:6a:a5: 4e:b8:ec:3e:c2:f3:06:41:23:45:5a:d2:c6:f0:00:b7:5c:2f: b3:a8:1d:be:e5:e6:a8:f0:1d:ac:51:1e:2d:ed:f9:73:be:5e: 57:ca:45:60:9b:ed:2a:e9:4c:8a:d4:9e:bf:bb:90:94:3f:af: ab:e2:8d:60:f4:d9:86:c6:3c:37:ad:45:95:17:8f:3a:4b:ed: 98:21:ba:ba:21:60:0d:ae:7c:93:ec:37:10:ae:6d:4b:52:54: 02:01:0d:4f:b9:57:3c:e4:6d:89:27:a2:7a:04:96:f9:b9:aa: 38:ac:d0:67:4d:a9:55:81:b8:bc:99:9e:3e:29:e3:c0:cb:a6: db:00:0d:3c:64:50:f1:f2:00:d4:74:db:8b:be:77:53:34:de: 55:15:85:d5:6e:c7:cc:27:b5:ce:f0:66:2f:4a:f5:d0:eb:3e: 22:e0:dd:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHPMj6vEozA8KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MTVhNTUzYmUtNTJkZS00NzBkLTk3MTgtMTA2OWNlNDQxODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTjK9NmOQrRAUEYpv2s5vPRp0Nt1AvM4CH0s 1LEI63+bi1+HqRlY5/FWiNfbgIkA0yqUE2o8gbA2pYcM6z5mOCtLtAHs2kpJd9/d +EkKeIYopC7c+X+rp8lROL+2B7IPqV/zn7Pr6i3X61ZE/hZDrbbRJF8euvGkSjjw XvOxnIrYhg4YuCExHpJJ8kDmsPNsKXVkF62qrp/JfQh8FQLCcTioysiEgNnA3hBW NUnXcdsWiRKdLh/3hpf2uPFFNgdWelxb4ZWSzh6cibqx0HREIBE8afwaW3OfGqrS f2nh2Z9REoLRntUhkTHtNqY0Rt2wcNAXdTtklwVfGSsgnrf7AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHnuETOhR/wBL/Kdkxje1DgTQg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTMxZGY0OTEtYWE5ZS0z OThmLThiZjItN2Q3NDkwMDA1MDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQqgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMN7mcjvzPHttev3jc5sTq1SR3B5BCIzW8AY6kezo5ANIiBF7KiFJ3uK f62xYuLPow/1uSzq6v75P6DdO5lhPhVLHWlb3/G8a0O0NMTXU/sZiABhPkWTy9Jq pU647D7C8wZBI0Va0sbwALdcL7OoHb7l5qjwHaxRHi3t+XO+XlfKRWCb7SrpTIrU nr+7kJQ/r6vijWD02YbGPDetRZUXjzpL7ZghurohYA2ufJPsNxCubUtSVAIBDU+5 VzzkbYknonoElvm5qjis0GdNqVWBuLyZnj4p48DLptsADTxkUPHyANR024u+d1M0 3lUVhdVux8wntc7wZi9K9dDrPiLg3Ro= -----END CERTIFICATE-----Generated at Sun Apr 6 23:25:29 2025 by rpki-client