$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4684f56-e56e-36c9-91c7-c4df1b2fecb8.roa File: b4684f56-e56e-36c9-91c7-c4df1b2fecb8.roa (raw, json) Hash identifier: C8mRCRuVk8RGhUH/t3Qbsm7rQZfQjB7u5ren9Us8owg= Subject key identifier: A6:B6:18:F8:C7:F8:25:EF:FA:68:45:41:B0:77:28:D9:E7:F1:F0:A7 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D182E9E6952AB3248A7600 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4684f56-e56e-36c9-91c7-c4df1b2fecb8.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 68.115.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:82:e9:e6:95:2a:b3:24:8a:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=7723ae89-ef47-4803-89b2-75de09bfafa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b4:f1:4b:74:b0:77:c7:88:54:7b:99:74:44: 15:06:a1:e2:5e:48:8c:02:bc:2c:f3:c1:b5:e3:a1: 2d:d7:7a:ad:3e:e3:e6:01:f7:75:6f:ef:56:b4:6e: 8f:84:11:98:50:40:31:29:f0:eb:db:d3:75:fa:c9: 6b:c8:a5:64:53:a1:d3:82:3c:81:2a:0d:47:61:f2: 05:1d:f2:dd:16:d1:d2:8b:80:11:3f:6d:fc:04:ca: 0f:23:6d:b9:1a:85:88:fc:7c:06:63:b9:7a:2e:73: bc:cd:ce:31:52:19:a2:43:16:b7:87:dd:0e:27:5f: 68:72:9a:37:18:b5:f5:42:e3:e3:90:73:72:e1:75: e9:ec:7a:d7:f5:70:74:c1:02:90:de:6e:c0:95:ed: 76:eb:81:d3:0e:f9:0f:67:5c:66:f8:29:e4:62:58: 25:bf:c3:b9:8c:a0:c6:26:d5:a0:4d:55:d6:52:64: 42:4a:e3:bd:23:28:07:ce:e6:b1:db:1e:ac:b2:01: 84:a1:3f:a2:de:00:9c:e6:a8:9c:1a:5a:06:4a:cd: 46:63:c5:43:29:99:d5:8c:b9:6a:1e:cf:6d:66:6c: 10:7e:cd:a0:0e:02:46:87:cd:e5:21:7d:1e:8f:d2: f5:e7:e7:bf:f1:c1:d8:64:c1:34:c0:84:ea:26:f2: be:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B6:18:F8:C7:F8:25:EF:FA:68:45:41:B0:77:28:D9:E7:F1:F0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b4684f56-e56e-36c9-91c7-c4df1b2fecb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.115.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a8:d1:2d:33:14:c5:7a:af:30:a0:e5:31:1b:78:fb:7c:90: 4b:af:ae:41:78:9b:ba:92:43:e7:ce:cf:63:5d:ee:29:48:a5: 7f:fa:86:06:de:3c:ad:95:2f:35:38:00:97:c3:c0:28:55:ee: a7:bc:1d:ff:63:fa:e9:ba:a6:1f:a0:cb:de:9c:a8:1f:4c:6e: 28:03:22:50:ea:1e:65:95:46:fc:75:87:be:99:2a:be:89:ac: 72:87:b9:b5:91:ad:52:ea:c4:cf:dc:62:2d:da:c1:c3:2c:cb: d1:60:8c:4b:99:65:95:29:4e:18:7b:16:0b:74:e1:4c:c5:4c: 29:60:7e:e8:60:d5:1e:a4:41:6f:dc:c7:f5:68:06:6e:e0:a2: 61:d9:fb:44:6b:43:0b:b5:78:f0:ef:12:29:d0:65:8a:55:b1: 3c:be:44:4e:4d:41:32:a0:3d:36:d8:fc:2a:f8:2a:d0:70:ec: 1f:57:27:0c:17:0d:e7:64:23:1b:30:55:3d:21:7c:60:c2:a5: 6a:f3:e7:4f:88:7d:0c:4f:35:b3:24:e7:8e:2d:6d:d8:5e:cc: 44:0c:4d:9c:fc:d0:9b:00:29:33:2f:84:77:c7:68:ba:8b:d5: cc:33:bc:56:e3:42:e1:3b:6f:23:b4:3b:f9:ca:71:90:a1:75: df:ac:bf:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0YLp5pUqsySKdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NzcyM2FlODktZWY0Ny00ODAzLTg5YjItNzVkZTA5YmZhZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbTxS3Swd8eIVHuZdEQVBqHiXkiMArws88G1 46Et13qtPuPmAfd1b+9WtG6PhBGYUEAxKfDr29N1+slryKVkU6HTgjyBKg1HYfIF HfLdFtHSi4ARP238BMoPI225GoWI/HwGY7l6LnO8zc4xUhmiQxa3h90OJ19ocpo3 GLX1QuPjkHNy4XXp7HrX9XB0wQKQ3m7Ale1264HTDvkPZ1xm+CnkYlglv8O5jKDG JtWgTVXWUmRCSuO9IygHzuax2x6ssgGEoT+i3gCc5qicGloGSs1GY8VDKZnVjLlq Hs9tZmwQfs2gDgJGh83lIX0ej9L15+e/8cHYZME0wITqJvK+nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa2GPjH+CXv+mhFQbB3KNnn8fCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjQ2ODRmNTYtZTU2ZS0z NmM5LTkxYzctYzRkZjFiMmZlY2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIao0S0zFMV6rzCg5TEbePt8kEuvrkF4m7qSQ+fOz2Nd7ilIpX/6hgbe PK2VLzU4AJfDwChV7qe8Hf9j+um6ph+gy96cqB9MbigDIlDqHmWVRvx1h76ZKr6J rHKHubWRrVLqxM/cYi3awcMsy9FgjEuZZZUpThh7Fgt04UzFTClgfuhg1R6kQW/c x/VoBm7gomHZ+0RrQwu1ePDvEinQZYpVsTy+RE5NQTKgPTbY/Cr4KtBw7B9XJwwX DedkIxswVT0hfGDCpWrz50+IfQxPNbMk544tbdhezEQMTZz80JsAKTMvhHfHaLqL 1cwzvFbjQuE7byO0O/nKcZChdd+svz4= -----END CERTIFICATE-----Generated at Sun Apr 6 22:42:45 2025 by rpki-client