$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bceed53d-8dc0-366a-81e1-4f8e3e1b8cf4.roa File: bceed53d-8dc0-366a-81e1-4f8e3e1b8cf4.roa (raw, json) Hash identifier: TeGP7cxJmGAOh+g04/c7NgcuRkh1r1RNwlxY6BtC9z0= Subject key identifier: E9:29:E8:46:48:76:5D:92:E7:25:30:7B:74:95:FD:0F:F8:EF:6E:A6 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1E32FF6568FAE0842D220 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bceed53d-8dc0-366a-81e1-4f8e3e1b8cf4.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 24.207.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:e3:2f:f6:56:8f:ae:08:42:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=84f7bdd9-06ff-4977-952e-739aceb6c3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c1:3e:f0:94:38:0c:0f:6a:49:6b:3d:41:41: 9e:06:13:90:18:2b:a2:bc:08:60:7f:19:76:ef:68: 63:ce:54:d7:93:28:cc:a5:94:57:45:52:83:70:be: 0e:d1:3e:a0:22:4e:c0:e5:7d:8a:d7:fb:41:2f:fd: 94:95:25:54:78:86:0d:60:57:43:c1:0c:3e:6c:e5: 4d:dc:42:1a:35:51:39:bc:08:37:42:c2:37:1c:8b: 61:40:b0:6f:a0:92:69:37:1b:c7:8f:89:64:5f:08: d3:0d:a5:fb:2b:25:35:2f:ec:66:5d:65:6e:dd:c0: ef:e5:94:c3:c6:1b:67:26:f7:42:09:cd:f8:fd:c3: 4e:ee:34:49:cd:c1:6d:a6:4b:54:c9:e0:db:d5:59: 5c:67:b4:e5:14:a6:9b:ca:c3:37:1f:55:72:28:26: c1:3a:94:82:73:e6:bf:7e:5b:8e:51:99:5c:69:87: a7:1b:5a:2d:31:47:0c:4d:ae:1e:0a:3d:02:ba:14: 4f:ee:92:aa:ee:f7:d8:57:84:b2:12:1f:14:ae:01: 35:1b:b1:0e:a3:c4:75:09:34:73:3b:99:61:d2:a6: 2b:c1:22:cb:b7:09:31:c1:cd:06:69:9f:5b:16:d7: c6:50:b3:3d:ff:3a:ca:48:d7:18:38:95:d6:97:52: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:29:E8:46:48:76:5D:92:E7:25:30:7B:74:95:FD:0F:F8:EF:6E:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bceed53d-8dc0-366a-81e1-4f8e3e1b8cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.207.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:fe:85:98:4b:23:1f:23:d3:b1:14:3b:7b:db:dc:19:52:0f: c3:87:75:fb:fb:19:dc:ad:2d:0b:96:60:55:80:cf:c2:0b:c5: 43:01:ae:43:2c:00:ad:a7:ec:ae:61:99:55:ab:8f:5f:3e:74: c4:c4:b2:d2:e4:c0:b9:04:31:35:97:e9:79:7b:74:aa:92:dd: 02:e9:b4:d9:9c:61:30:cf:6c:a6:bc:94:00:63:28:0b:1d:76: 5f:f4:d8:75:f0:dc:e7:99:02:ba:e3:5c:71:6d:8c:2e:3f:00: a3:d4:3d:65:d5:a6:88:34:57:4c:d7:31:7e:12:2a:07:0d:ed: 49:7b:9a:26:05:8d:98:5b:12:8e:71:30:a1:f7:07:64:4a:f8: aa:08:0f:7e:63:18:31:e7:00:66:e3:05:65:38:61:4e:fd:a7: 2b:98:1e:45:42:56:78:54:8b:24:c1:74:6c:8a:fd:44:cb:70: c8:6e:66:d2:4d:6c:f1:8c:fa:fc:68:8b:86:ba:92:1d:f3:83: 24:76:3e:48:64:50:9c:26:03:9f:fc:a4:0f:b2:43:9d:ea:9c: 57:60:a8:94:d6:55:c1:24:e7:66:60:c1:cc:89:61:99:bd:67: 76:e5:66:6a:f2:85:f8:09:4d:96:f8:31:ee:4e:85:31:d3:8c: 1c:c2:88:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0eMv9laPrghC0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ODRmN2JkZDktMDZmZi00OTc3LTk1MmUtNzM5YWNlYjZjM2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgME+8JQ4DA9qSWs9QUGeBhOQGCuivAhgfxl2 72hjzlTXkyjMpZRXRVKDcL4O0T6gIk7A5X2K1/tBL/2UlSVUeIYNYFdDwQw+bOVN 3EIaNVE5vAg3QsI3HIthQLBvoJJpNxvHj4lkXwjTDaX7KyU1L+xmXWVu3cDv5ZTD xhtnJvdCCc34/cNO7jRJzcFtpktUyeDb1VlcZ7TlFKabysM3H1VyKCbBOpSCc+a/ fluOUZlcaYenG1otMUcMTa4eCj0CuhRP7pKq7vfYV4SyEh8UrgE1G7EOo8R1CTRz O5lh0qYrwSLLtwkxwc0GaZ9bFtfGULM9/zrKSNcYOJXWl1JrDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkp6EZIdl2S5yUwe3SV/Q/4726mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmNlZWQ1M2QtOGRjMC0z NjZhLTgxZTEtNGY4ZTNlMWI4Y2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGM+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3+hZhLIx8j07EUO3vb3BlSD8OHdfv7GdytLQuWYFWAz8ILxUMBrkMs AK2n7K5hmVWrj18+dMTEstLkwLkEMTWX6Xl7dKqS3QLptNmcYTDPbKa8lABjKAsd dl/02HXw3OeZArrjXHFtjC4/AKPUPWXVpog0V0zXMX4SKgcN7Ul7miYFjZhbEo5x MKH3B2RK+KoID35jGDHnAGbjBWU4YU79pyuYHkVCVnhUiyTBdGyK/UTLcMhuZtJN bPGM+vxoi4a6kh3zgyR2PkhkUJwmA5/8pA+yQ53qnFdgqJTWVcEk52ZgwcyJYZm9 Z3blZmryhfgJTZb4Me5OhTHTjBzCiOc= -----END CERTIFICATE-----Generated at Sun Apr 6 22:50:58 2025 by rpki-client