$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa File: b99ab2ab-3369-34bc-b63f-7c57501869fe.roa (raw, json) Hash identifier: 38R+MI3TSGv23zZBxPhFZZqQry6KM0WnCf4KsKKMelM= Subject key identifier: E1:91:25:42:09:52:5D:8E:16:EB:82:A9:24:32:D7:19:12:0D:A6:62 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D16345D3AA3B4451515880 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 131.150.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:63:45:d3:aa:3b:44:51:51:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=005a71a8-3b67-423f-9a01-dd12a1b8acb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:42:f7:1e:cb:a9:7c:62:56:d6:5e:e5:f3: 4d:19:83:1c:1b:00:4f:4d:c2:df:5d:a2:de:86:f6: ba:b1:a6:89:f3:a1:ff:b5:17:f3:44:1e:fe:4f:97: 6e:20:5e:05:58:20:11:6a:8c:20:e1:cb:22:31:d7: bd:b1:1c:27:2b:20:85:5c:d5:29:10:ba:ad:29:2b: 75:10:e1:87:35:42:63:1e:82:99:0f:e4:03:49:f8: af:12:72:07:c7:42:3f:5a:76:f3:e0:8e:ea:52:ea: b9:c6:fb:13:c8:5f:5f:53:a8:b1:c8:f5:5a:13:59: fc:67:43:61:4a:c1:1a:8f:d5:8e:73:86:e5:40:7b: 33:07:07:fb:4a:fd:6d:11:6d:da:7a:b9:e4:c1:24: cf:a4:35:7c:13:0f:6b:51:aa:46:3a:da:1e:4b:bc: c8:71:f0:b5:7b:97:07:ce:31:9c:12:cd:86:f4:82: 78:1b:44:23:16:fc:9c:82:fd:65:ba:a6:24:4d:ce: 46:8e:fb:44:02:62:27:67:f8:96:1a:ae:d9:c4:0b: e2:c4:34:35:cf:c1:f6:f7:c8:5b:7d:df:64:78:21: e7:0f:79:f0:79:62:68:7b:0c:1b:e1:ee:2a:ad:22: ab:17:1f:0f:e3:23:1d:1d:40:69:2c:12:82:ab:20: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:91:25:42:09:52:5D:8E:16:EB:82:A9:24:32:D7:19:12:0D:A6:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/b99ab2ab-3369-34bc-b63f-7c57501869fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 131.150.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ff:99:6e:3f:7c:2c:2e:31:87:0e:39:a4:8b:8f:47:c6:b1: 1f:f2:06:84:d4:eb:70:55:0b:bd:77:68:1f:c8:1d:64:82:f0: 77:b1:db:0b:ac:37:75:3c:3b:8b:4a:2f:80:c2:ef:a8:c6:7f: 6c:c0:ba:3e:0f:8c:11:c7:75:42:58:95:27:42:68:51:17:3b: 4e:62:07:ee:c2:8b:70:77:35:38:1f:d4:e4:bf:f2:3a:45:9b: 35:8e:1e:1e:20:d9:f8:85:5f:f8:fd:6c:7a:27:5f:df:0f:3f: 87:53:a6:88:a1:f4:61:56:af:00:9c:33:df:b3:5b:3a:3b:ea: 66:c2:2d:40:37:94:88:f6:80:85:dd:db:cb:f6:cc:fd:b3:3d: 5e:1e:ed:e2:ea:a9:7a:a5:31:d5:3c:23:2c:d3:c4:ac:f9:3c: 85:89:78:18:07:47:4c:b2:e1:ce:1e:e8:92:12:92:ce:25:bf: e3:ab:7c:b9:b5:41:c8:00:27:f8:2d:09:6d:6f:e2:b5:f9:89: 1c:e3:f4:ed:66:f7:8f:7c:6a:c9:2d:4e:94:94:93:70:06:8b: 7f:02:03:52:14:19:e3:a7:d8:91:01:3b:81:e6:00:7a:4a:df: 7b:06:c6:9a:20:f9:af:dc:9a:5e:c4:ff:01:a6:72:60:f4:9b: 14:26:7f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0WNF06o7RFFRWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MDA1YTcxYTgtM2I2Ny00MjNmLTlhMDEtZGQxMmExYjhhY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ARC9x7LqXxiVtZe5fNNGYMcGwBPTcLfXaLe hva6saaJ86H/tRfzRB7+T5duIF4FWCARaowg4csiMde9sRwnKyCFXNUpELqtKSt1 EOGHNUJjHoKZD+QDSfivEnIHx0I/Wnbz4I7qUuq5xvsTyF9fU6ixyPVaE1n8Z0Nh SsEaj9WOc4blQHszBwf7Sv1tEW3aernkwSTPpDV8Ew9rUapGOtoeS7zIcfC1e5cH zjGcEs2G9IJ4G0QjFvycgv1luqYkTc5GjvtEAmInZ/iWGq7ZxAvixDQ1z8H298hb fd9keCHnD3nweWJoewwb4e4qrSKrFx8P4yMdHUBpLBKCqyB3LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGRJUIJUl2OFuuCqSQy1xkSDaZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYjk5YWIyYWItMzM2OS0z NGJjLWI2M2YtN2M1NzUwMTg2OWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5ZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj/mW4/fCwuMYcOOaSLj0fGsR/yBoTU63BVC713aB/IHWSC8Hex2wus N3U8O4tKL4DC76jGf2zAuj4PjBHHdUJYlSdCaFEXO05iB+7Ci3B3NTgf1OS/8jpF mzWOHh4g2fiFX/j9bHonX98PP4dTpoih9GFWrwCcM9+zWzo76mbCLUA3lIj2gIXd 28v2zP2zPV4e7eLqqXqlMdU8IyzTxKz5PIWJeBgHR0yy4c4e6JISks4lv+OrfLm1 QcgAJ/gtCW1v4rX5iRzj9O1m9498asktTpSUk3AGi38CA1IUGeOn2JEBO4HmAHpK 33sGxpog+a/cml7E/wGmcmD0mxQmfzs= -----END CERTIFICATE-----Generated at Sun Apr 6 23:25:19 2025 by rpki-client