$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c850e881-13b4-39c3-91ca-253636aafd51.roa File: c850e881-13b4-39c3-91ca-253636aafd51.roa (raw, json) Hash identifier: 4LOg+ce63us5rUlMscUzOGO1L6r4VFq6f9NihhLkGPE= Subject key identifier: 00:97:C2:CC:3F:D3:B2:B2:8F:82:97:08:FF:1F:51:EA:E5:8A:9C:2F Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D183C7102773CA58625000 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c850e881-13b4-39c3-91ca-253636aafd51.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 68.119.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:83:c7:10:27:73:ca:58:62:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=3f08a167-ab14-4d7a-8f33-2b91f40f4747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:07:e0:42:ab:35:52:22:2a:5c:c9:22:c2:69: bd:f9:92:73:d2:51:69:97:b6:32:ef:bd:42:a4:45: be:da:46:b1:62:ce:48:ba:f5:e4:06:c5:f6:37:3c: c9:12:11:6d:e0:b0:ef:e5:cb:d6:65:ce:01:3a:f7: ce:a8:4f:b7:6f:61:19:16:3b:bf:be:ee:3f:e5:9d: d0:d9:15:0a:0d:d3:ed:b8:8f:84:bf:93:92:2f:a7: 10:e6:4d:3d:89:33:df:3c:a2:f9:42:23:be:4a:8e: f7:ae:26:14:da:4d:99:c7:a3:fb:be:ba:76:0e:4c: df:38:9e:01:e0:10:eb:e9:d9:3b:01:79:23:11:e4: cd:76:9a:b9:b4:c5:8a:50:ad:cc:bb:83:e9:52:ac: 45:c3:27:dd:9a:db:68:0f:e1:b9:b4:59:0c:2c:76: a6:b6:7d:2f:2c:c3:a8:ca:ee:c7:7d:6a:9d:8b:48: 63:4e:eb:c0:ec:68:11:7c:17:4c:f6:16:b8:bd:1b: ec:2d:40:4c:77:0f:c8:42:d5:ff:53:bf:2c:ba:40: 96:ba:62:32:db:99:91:52:dd:39:69:e2:0f:4c:e5: b8:b5:5a:0e:22:c8:67:21:e7:5a:be:2d:ce:f6:54: 53:e4:29:74:c6:73:24:fb:38:03:90:53:fc:ac:ba: d1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:97:C2:CC:3F:D3:B2:B2:8F:82:97:08:FF:1F:51:EA:E5:8A:9C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/c850e881-13b4-39c3-91ca-253636aafd51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.119.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:92:2a:21:c5:6b:28:d0:70:0e:8b:a5:d1:fd:db:7d:f4:8e: c9:20:2b:22:ee:a8:f4:ec:29:43:1d:5d:e3:63:82:b8:24:65: e9:78:f5:91:04:e7:2c:f8:e8:1c:32:ff:ce:1f:29:2c:70:5c: 38:9d:70:36:01:c9:eb:d1:91:b1:ae:b8:31:ca:7a:7c:be:69: 13:46:f1:52:c6:b1:57:05:bb:4f:cc:b9:f5:f1:00:e3:54:75: c1:3b:21:e8:b8:ef:11:9a:ff:ff:b7:08:bd:12:f5:e4:cd:40: d3:f7:18:e9:ff:4f:cc:26:54:22:e6:fe:bd:67:3b:5b:55:7e: 65:f0:eb:a4:03:a7:00:a5:b5:d0:0b:ec:af:ce:40:82:43:e3: bf:da:3e:ad:2d:ab:75:7e:01:8e:e8:e9:79:b7:20:fe:d7:11: 58:f5:99:cb:19:08:3e:ba:46:39:02:58:aa:5e:38:17:eb:84: 26:cc:85:0f:47:e0:63:44:c9:f1:cf:37:f0:7a:a2:79:aa:f4: a5:61:1f:b0:84:27:dc:73:ee:ea:2f:ce:2e:9c:4f:99:b0:76: 78:28:ae:bc:72:0a:87:aa:cf:fb:a5:5a:13:fa:85:1a:d5:04: 87:5e:07:33:ff:7d:f0:75:d7:87:49:39:b9:f9:a6:8a:be:7a: 3f:9a:cc:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0YPHECdzylhiUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk M2YwOGExNjctYWIxNC00ZDdhLThmMzMtMmI5MWY0MGY0NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAfgQqs1UiIqXMkiwmm9+ZJz0lFpl7Yy771C pEW+2kaxYs5IuvXkBsX2NzzJEhFt4LDv5cvWZc4BOvfOqE+3b2EZFju/vu4/5Z3Q 2RUKDdPtuI+Ev5OSL6cQ5k09iTPfPKL5QiO+So73riYU2k2Zx6P7vrp2DkzfOJ4B 4BDr6dk7AXkjEeTNdpq5tMWKUK3Mu4PpUqxFwyfdmttoD+G5tFkMLHamtn0vLMOo yu7HfWqdi0hjTuvA7GgRfBdM9ha4vRvsLUBMdw/IQtX/U78sukCWumIy25mRUt05 aeIPTOW4tVoOIshnIedavi3O9lRT5Cl0xnMk+zgDkFP8rLrRkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACXwsw/07Kyj4KXCP8fUerlipwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYzg1MGU4ODEtMTNiNC0z OWMzLTkxY2EtMjUzNjM2YWFmZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCSKiHFayjQcA6LpdH92330jskgKyLuqPTsKUMdXeNjgrgkZel49ZEE 5yz46Bwy/84fKSxwXDidcDYByevRkbGuuDHKeny+aRNG8VLGsVcFu0/MufXxAONU dcE7Iei47xGa//+3CL0S9eTNQNP3GOn/T8wmVCLm/r1nO1tVfmXw66QDpwCltdAL 7K/OQIJD47/aPq0tq3V+AY7o6Xm3IP7XEVj1mcsZCD66RjkCWKpeOBfrhCbMhQ9H 4GNEyfHPN/B6onmq9KVhH7CEJ9xz7uovzi6cT5mwdngorrxyCoeqz/ulWhP6hRrV BIdeBzP/ffB114dJObn5poq+ej+azOk= -----END CERTIFICATE-----Generated at Sun Apr 6 23:23:06 2025 by rpki-client