$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8789f7-6f35-3726-b7a4-4f3a0131a67a.roa File: be8789f7-6f35-3726-b7a4-4f3a0131a67a.roa (raw, json) Hash identifier: KvqyXjzfx29kMrXSN01KX/gUQTj+sT3xvJ/efu3kAc0= Subject key identifier: 1B:BD:9C:0F:D3:BC:3C:24:8C:1E:D3:CF:F4:22:35:D9:36:F5:12:21 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1EBCC2DEBCAF2E971B400 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8789f7-6f35-3726-b7a4-4f3a0131a67a.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 71.83.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:eb:cc:2d:eb:ca:f2:e9:71:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=e89de928-fda0-4237-84ee-eed5f2ae3bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:69:a8:1b:ab:61:41:1f:e9:7f:17:56:dd:22: 15:85:53:09:a8:aa:92:04:0c:e8:15:73:45:32:aa: 3f:3f:b5:cc:72:6d:45:fb:56:bd:94:45:4c:4e:78: 87:1e:e1:18:70:3e:99:f2:d2:78:7d:4e:4b:ed:de: 84:4e:81:c7:19:6f:b2:04:ff:8e:85:68:94:93:ad: bc:9f:b7:21:63:b5:ea:45:8f:f2:52:f7:fd:b5:61: 2b:05:67:d5:c4:23:c6:fc:82:7f:d2:30:30:0b:d2: 24:2e:5e:8c:2a:9b:22:54:49:8b:1c:a6:28:c0:1c: 3a:55:60:b0:96:64:54:bd:91:2a:9e:3a:31:95:ca: 3e:3f:fa:e3:7f:b8:df:b6:e3:52:f1:13:3d:4f:9a: c5:bd:47:a9:38:2b:1c:68:57:ac:39:42:5e:a1:4c: 5f:9f:c2:17:76:15:cc:8b:ea:c6:12:4c:aa:1d:e0: 0b:df:e2:8b:ce:7f:35:c9:b3:07:3a:76:45:b6:c0: fa:9a:a8:b0:a0:85:3f:84:c1:54:cd:c6:7a:bc:a3: ec:6d:0a:f6:22:40:89:67:80:07:59:cf:91:1c:60: c4:df:64:0b:26:7c:78:34:17:a1:a4:dc:13:b7:f0: 67:9e:24:c2:48:c8:88:07:35:25:89:62:d0:55:b3: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BD:9C:0F:D3:BC:3C:24:8C:1E:D3:CF:F4:22:35:D9:36:F5:12:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be8789f7-6f35-3726-b7a4-4f3a0131a67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.83.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:19:82:12:19:12:d1:64:4b:0c:68:54:d2:f0:f8:5d:a5:ac: 7d:1a:02:88:2c:d6:78:8c:61:69:b1:e7:3c:3c:b1:95:65:90: 8c:07:26:e3:d3:c5:9d:a0:29:65:17:db:b8:a2:3b:c9:2b:9d: 48:0e:eb:3e:7c:36:66:af:69:f1:90:57:33:52:ff:8c:02:cb: 21:4f:d6:39:9f:51:bf:e0:04:e8:ee:ca:31:66:f1:a7:a5:66: 9d:01:4b:ea:3e:90:db:80:61:03:78:9f:a2:1a:4f:81:37:d9: 51:90:a0:0f:b6:4f:45:ab:d7:32:a5:2c:87:ce:d3:33:33:62: dd:e9:14:48:db:a8:76:55:15:61:62:b9:20:90:e4:d1:ae:db: 8b:f9:13:8f:51:03:40:ad:ab:6e:a1:14:36:d9:20:e3:26:f6: 2d:f1:6e:68:29:75:57:8e:2f:80:a9:be:96:d1:4d:9f:46:72: 69:47:56:17:7f:1a:13:20:1f:46:e6:b4:8d:ef:92:38:4c:8f: fa:36:d8:12:fc:9b:c7:a7:45:60:10:82:2a:00:86:32:b1:80: 73:06:c2:bf:90:62:3e:b4:03:55:35:87:9c:4e:ff:d7:0b:58: 7d:1e:69:67:a1:bf:d3:96:88:6b:20:99:e0:17:0e:7b:40:97: 34:73:8d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0evMLevK8ulxtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZTg5ZGU5MjgtZmRhMC00MjM3LTg0ZWUtZWVkNWYyYWUzYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmmoG6thQR/pfxdW3SIVhVMJqKqSBAzoFXNF Mqo/P7XMcm1F+1a9lEVMTniHHuEYcD6Z8tJ4fU5L7d6EToHHGW+yBP+OhWiUk628 n7chY7XqRY/yUvf9tWErBWfVxCPG/IJ/0jAwC9IkLl6MKpsiVEmLHKYowBw6VWCw lmRUvZEqnjoxlco+P/rjf7jftuNS8RM9T5rFvUepOCscaFesOUJeoUxfn8IXdhXM i+rGEkyqHeAL3+KLzn81ybMHOnZFtsD6mqiwoIU/hMFUzcZ6vKPsbQr2IkCJZ4AH Wc+RHGDE32QLJnx4NBehpNwTt/BnniTCSMiIBzUliWLQVbM/JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBu9nA/TvDwkjB7Tz/QiNdk29RIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmU4Nzg5ZjctNmYzNS0z NzI2LWI3YTQtNGYzYTAxMzFhNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAZghIZEtFkSwxoVNLw+F2lrH0aAogs1niMYWmx5zw8sZVlkIwHJuPT xZ2gKWUX27iiO8krnUgO6z58NmavafGQVzNS/4wCyyFP1jmfUb/gBOjuyjFm8ael Zp0BS+o+kNuAYQN4n6IaT4E32VGQoA+2T0Wr1zKlLIfO0zMzYt3pFEjbqHZVFWFi uSCQ5NGu24v5E49RA0Ctq26hFDbZIOMm9i3xbmgpdVeOL4CpvpbRTZ9GcmlHVhd/ GhMgH0bmtI3vkjhMj/o22BL8m8enRWAQgioAhjKxgHMGwr+QYj60A1U1h5xO/9cL WH0eaWehv9OWiGsgmeAXDntAlzRzjZo= -----END CERTIFICATE-----Generated at Sun Apr 6 23:08:10 2025 by rpki-client