$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bfbf7e9a-1a8b-3be9-8345-408a33fb1d5a.roa File: bfbf7e9a-1a8b-3be9-8345-408a33fb1d5a.roa (raw, json) Hash identifier: vKiUIAQYTnXPX836StRhMvjB9qoV12aWPZu5LpoHV90= Subject key identifier: 3A:85:42:E1:6C:E6:9C:67:42:CA:DA:25:3D:3A:89:63:E0:05:6E:B3 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D168500044A90C53A6A200 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bfbf7e9a-1a8b-3be9-8345-408a33fb1d5a.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 24.159.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:68:50:00:44:a9:0c:53:a6:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=60a3b7d6-c634-42d4-ae34-9a9e8884fa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:fe:06:68:ef:47:b8:52:e0:fc:48:34:d0: f2:30:fd:1f:c8:d1:6b:94:17:29:de:b3:8e:5d:28: e0:ef:80:ee:3a:bd:b3:8d:bf:42:bd:41:11:fc:fa: 89:26:78:e4:56:c0:88:d1:7d:b6:89:39:b2:50:4c: 30:72:04:1b:16:7f:f0:49:1a:3c:c0:28:c3:15:68: 2d:4e:71:33:74:74:c7:f1:31:69:e7:59:ae:79:16: 07:02:18:c8:4f:0c:f7:c9:50:2f:0d:8c:a7:b7:a0: 65:30:08:7b:b8:05:6f:a3:e2:ab:25:17:27:9d:b0: b7:93:52:c0:4b:48:da:c5:a5:4d:8e:a8:87:98:b8: db:2f:5b:aa:3b:11:11:4b:d6:bb:06:25:2a:fd:b6: 75:8d:15:e3:69:a3:a4:b2:f7:16:fb:58:86:6a:06: 10:33:05:39:be:4a:14:c9:f4:8f:3e:45:cd:00:5d: 5a:27:7b:7f:32:0a:b7:23:df:c8:ec:67:ef:54:39: 28:3a:46:d6:f7:ee:f8:da:05:86:ed:6b:d4:f7:49: 62:6c:96:c6:44:9c:6c:5c:2d:35:8f:ed:37:32:ec: cf:49:44:7a:b8:2d:8f:ec:c3:17:a4:44:e6:8e:21: 0a:22:32:3b:c1:3c:66:75:4c:4a:e5:8b:86:e5:cd: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:85:42:E1:6C:E6:9C:67:42:CA:DA:25:3D:3A:89:63:E0:05:6E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bfbf7e9a-1a8b-3be9-8345-408a33fb1d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.159.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:22:f9:9b:de:86:99:1c:77:69:ce:a1:df:b1:1f:83:19:23: ae:5e:48:ba:28:90:d0:6d:c5:8c:52:6f:12:c3:50:f8:02:4c: 2d:77:2a:8f:70:74:c8:ba:07:fe:bd:c7:6e:61:1f:03:31:a2: 88:6b:f8:59:3e:a7:4f:04:d5:30:d5:3e:0b:57:2f:ed:4d:19: 0e:69:ee:a6:5d:24:f1:d5:96:04:7a:1d:36:94:4d:e6:0b:5a: 2d:c7:25:44:94:23:54:75:c4:b0:fe:37:4c:13:88:15:24:35: 19:d6:4e:dc:ee:48:1f:63:f5:bf:1e:dc:55:f5:31:19:08:f1: 2b:9f:ac:0c:f7:5e:66:1b:bc:69:8e:c7:d2:a8:d4:77:db:63: 46:49:90:d0:39:78:40:d7:60:11:37:4a:66:ae:b1:25:27:d3: d6:ea:e4:8f:a2:49:fd:ae:06:4b:be:f9:1e:51:10:0c:43:cc: aa:18:d8:3a:9c:50:36:88:06:b7:09:e3:ac:9f:f7:39:e0:06: 36:51:dd:78:74:d9:5c:d2:03:8f:63:5f:dc:1b:dc:62:86:65: 6d:a4:4c:38:94:8c:7b:88:a9:69:d3:76:ce:47:19:54:97:72: 81:8a:0d:41:f7:ad:d2:ca:38:c9:c8:75:22:8c:fc:12:f6:e3: 7b:3a:5a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0WhQAESpDFOmogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NjBhM2I3ZDYtYzYzNC00MmQ0LWFlMzQtOWE5ZTg4ODRmYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLn+BmjvR7hS4PxINNDyMP0fyNFrlBcp3rOO XSjg74DuOr2zjb9CvUER/PqJJnjkVsCI0X22iTmyUEwwcgQbFn/wSRo8wCjDFWgt TnEzdHTH8TFp51mueRYHAhjITwz3yVAvDYynt6BlMAh7uAVvo+KrJRcnnbC3k1LA S0jaxaVNjqiHmLjbL1uqOxERS9a7BiUq/bZ1jRXjaaOksvcW+1iGagYQMwU5vkoU yfSPPkXNAF1aJ3t/Mgq3I9/I7GfvVDkoOkbW9+742gWG7WvU90libJbGRJxsXC01 j+03MuzPSUR6uC2P7MMXpETmjiEKIjI7wTxmdUxK5YuG5c1GZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqFQuFs5pxnQsraJT06iWPgBW6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmZiZjdlOWEtMWE4Yi0z YmU5LTgzNDUtNDA4YTMzZmIxZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGJ9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQi+Zvehpkcd2nOod+xH4MZI65eSLookNBtxYxSbxLDUPgCTC13Ko9w dMi6B/69x25hHwMxoohr+Fk+p08E1TDVPgtXL+1NGQ5p7qZdJPHVlgR6HTaUTeYL Wi3HJUSUI1R1xLD+N0wTiBUkNRnWTtzuSB9j9b8e3FX1MRkI8SufrAz3XmYbvGmO x9Ko1HfbY0ZJkNA5eEDXYBE3SmausSUn09bq5I+iSf2uBku++R5REAxDzKoY2Dqc UDaIBrcJ46yf9zngBjZR3Xh02VzSA49jX9wb3GKGZW2kTDiUjHuIqWnTds5HGVSX coGKDUH3rdLKOMnIdSKM/BL243s6Wjc= -----END CERTIFICATE-----Generated at Sun Apr 6 23:08:02 2025 by rpki-client