$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b033557e-8252-3220-b629-e02517680828.roa File: b033557e-8252-3220-b629-e02517680828.roa (raw, json) Hash identifier: NQjL5mddxkbVkY+bT8NIqyrWNNZBcz6UvGHwlexs0Hg= Subject key identifier: 20:FD:01:E6:94:0C:D6:1E:A0:26:90:6B:22:DB:0C:13:9F:3E:45:69 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D197DABEBFF846ADB14500 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b033557e-8252-3220-b629-e02517680828.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 192.61.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:97:da:be:bf:f8:46:ad:b1:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=b7cd0dc8-6713-422d-922d-16831744febb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:95:ec:7c:ad:17:68:66:78:92:23:e1:de:da: 5c:cb:3d:7d:06:5f:ce:c7:74:36:c2:2a:04:6a:8f: 88:7a:33:e3:7d:97:7a:9f:3f:d2:90:f6:cc:eb:8b: 5e:c4:6b:c6:38:75:cd:f0:98:3e:ba:21:d6:fc:d1: d4:b5:ca:f8:fe:9a:3f:37:89:c8:4e:59:ff:b9:cd: c5:2e:c9:c5:30:c5:1c:3d:28:65:53:5a:76:c8:56: 49:6e:0a:10:7e:8a:a2:23:b2:f4:ea:1e:2f:be:3f: d5:f3:9d:d4:e4:a9:0e:c3:c6:55:33:c1:da:a2:38: 4b:97:e7:ed:7f:ff:1e:ec:99:26:a2:5a:bd:87:1d: 8b:ea:c1:49:a5:1d:95:84:8c:c3:38:9f:0c:b2:37: a5:34:3f:09:ca:02:12:f2:da:53:94:1d:9c:e1:b3: cd:22:77:b9:47:1f:b7:08:e0:e1:68:26:b1:58:b2: 96:27:3b:dd:64:94:ca:4a:27:c1:e4:e4:02:7d:81: 36:82:23:40:b7:02:0c:d1:22:35:e4:2f:8d:d0:ad: ab:9a:40:96:7b:0e:88:bc:db:e8:f8:89:4e:87:8f: 53:71:93:a8:6b:59:9e:7e:59:5c:11:73:4b:f3:69: 0d:db:34:72:14:5e:82:61:e0:ca:fc:ab:77:88:67: 8b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FD:01:E6:94:0C:D6:1E:A0:26:90:6B:22:DB:0C:13:9F:3E:45:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b033557e-8252-3220-b629-e02517680828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 192.61.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b9:85:a2:54:0e:8b:b9:e5:06:ca:42:b4:f4:6b:34:1f:97: ee:d8:43:ef:02:5f:7c:73:2f:81:c3:cc:6a:2e:69:24:1d:bf: 68:54:30:27:1a:4e:e8:e0:d4:f8:7f:0c:32:22:11:17:31:6e: 45:e2:af:21:45:5c:57:ad:43:cc:9e:27:2e:6a:4d:04:ff:7e: 8c:66:37:57:48:c4:55:b1:51:d2:63:ec:c5:f8:d6:4f:4d:71: fa:57:fd:f6:a8:84:bc:50:44:1a:eb:32:66:1a:4f:15:d4:f6: fe:fa:39:97:3a:7f:45:33:b0:9b:05:de:a8:0d:51:4e:fa:c3: ed:8b:40:2b:52:ba:7b:85:e4:ee:59:e6:27:88:38:2a:92:80: de:a9:00:e8:52:18:91:41:77:c5:02:4f:69:d2:9d:09:f4:b4: f7:21:ad:df:62:d7:c9:bc:aa:2c:90:e2:27:4d:d0:fe:2d:c5: 9f:25:23:1a:2a:da:60:4a:55:8c:ac:33:c7:d0:b4:3a:52:1d: 05:f9:31:ef:db:d0:14:ca:27:c4:4e:6e:67:4e:58:52:36:eb: 38:bc:d7:56:41:a6:1c:10:7e:4f:c6:db:d5:cb:7a:34:5d:72: e5:35:34:77:4c:fc:7f:57:a1:e4:6e:01:bd:90:e6:d1:a5:98: 0c:61:ef:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Zfavr/4Rq2xRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YjdjZDBkYzgtNjcxMy00MjJkLTkyMmQtMTY4MzE3NDRmZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJXsfK0XaGZ4kiPh3tpcyz19Bl/Ox3Q2wioE ao+IejPjfZd6nz/SkPbM64texGvGOHXN8Jg+uiHW/NHUtcr4/po/N4nITln/uc3F LsnFMMUcPShlU1p2yFZJbgoQfoqiI7L06h4vvj/V853U5KkOw8ZVM8HaojhLl+ft f/8e7Jkmolq9hx2L6sFJpR2VhIzDOJ8MsjelND8JygIS8tpTlB2c4bPNIne5Rx+3 CODhaCaxWLKWJzvdZJTKSifB5OQCfYE2giNAtwIM0SI15C+N0K2rmkCWew6IvNvo +IlOh49TcZOoa1mefllcEXNL82kN2zRyFF6CYeDK/Kt3iGeLhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD9AeaUDNYeoCaQayLbDBOfPkVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjAzMzU1N2UtODI1Mi0z MjIwLWI2MjktZTAyNTE3NjgwODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwD3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS5haJUDou55QbKQrT0azQfl+7YQ+8CX3xzL4HDzGouaSQdv2hUMCca Tujg1Ph/DDIiERcxbkXiryFFXFetQ8yeJy5qTQT/foxmN1dIxFWxUdJj7MX41k9N cfpX/faohLxQRBrrMmYaTxXU9v76OZc6f0UzsJsF3qgNUU76w+2LQCtSunuF5O5Z 5ieIOCqSgN6pAOhSGJFBd8UCT2nSnQn0tPchrd9i18m8qiyQ4idN0P4txZ8lIxoq 2mBKVYysM8fQtDpSHQX5Me/b0BTKJ8RObmdOWFI26zi811ZBphwQfk/G29XLejRd cuU1NHdM/H9XoeRuAb2Q5tGlmAxh7+s= -----END CERTIFICATE-----Generated at Sun Apr 6 23:30:08 2025 by rpki-client