$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb85b2a1-980d-337b-9370-047b10a38d3f.roa File: cb85b2a1-980d-337b-9370-047b10a38d3f.roa (raw, json) Hash identifier: U87NuXmekeKCQ8NWKmU6qD6ryaNEXXOH9tEul0GuBmE= Subject key identifier: A6:13:F2:F8:BF:4C:E3:50:54:C4:B1:72:63:16:67:50:2E:F8:F2:C3 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1F1B2799E6F1928BF5B00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb85b2a1-980d-337b-9370-047b10a38d3f.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 71.89.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:f1:b2:79:9e:6f:19:28:bf:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=9cbabeed-a118-4900-a721-94c9d27738da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:71:6e:d1:7d:a9:2d:bf:ad:20:b4:fe:d8: 49:9c:be:bd:bf:9b:0a:ea:f2:f3:66:40:b1:f8:1b: 9f:3a:96:25:f6:0b:b5:6c:4a:d6:61:6b:f5:32:a3: 2f:c4:ce:e6:e8:70:23:2c:4b:ff:6b:7b:11:68:1d: f5:5d:e5:61:9b:b0:d3:c3:d1:06:08:17:0c:17:1a: c5:0d:86:7f:0c:1d:47:1d:cd:a5:5b:fe:a3:02:de: 84:79:3c:d0:e8:18:fd:7b:80:cd:74:c2:db:c6:dd: d3:dd:7c:ad:f3:70:61:82:ba:90:47:b8:57:6c:45: 89:df:62:06:98:b6:59:a1:9b:21:dd:5c:a0:dc:74: 57:0d:56:f2:87:2d:8a:44:4d:a3:dd:e3:85:7d:a9: 7e:ff:c4:06:f5:cb:f3:a2:60:e9:ea:d5:94:e5:c3: 5b:4d:c6:2b:f7:c8:ac:80:4a:82:d0:32:28:8a:64: 0e:c2:f6:8f:74:40:d7:66:5f:0f:d3:97:9f:40:30: d3:40:fd:95:7f:77:24:4c:13:af:bc:4f:a0:c6:7c: 3a:5f:1c:67:13:40:cb:64:9c:59:3a:b9:71:42:59: ed:e2:d0:eb:f0:e1:ac:64:68:b1:66:62:67:50:d7: c6:f8:e8:82:5e:0e:55:16:a4:40:d5:7a:cd:9e:4d: 13:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:13:F2:F8:BF:4C:E3:50:54:C4:B1:72:63:16:67:50:2E:F8:F2:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cb85b2a1-980d-337b-9370-047b10a38d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.89.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:37:ff:fc:21:08:4a:7f:fe:22:a6:9d:26:fc:26:03:3c:d4: 86:d0:ef:aa:3b:14:67:17:d6:b6:36:f6:6c:a4:97:15:89:79: da:e0:ee:25:e7:02:ca:16:0c:f5:64:da:bf:4c:fd:8a:10:75: 9a:a9:32:0c:ef:f9:2c:e9:f7:f8:9a:cd:47:3e:d6:87:0f:75: 90:f3:a0:41:7a:9f:e0:17:6d:b3:1d:53:3b:ff:09:06:78:d6: 36:06:ed:62:a1:86:89:27:6d:43:e8:06:b0:fa:88:b0:4c:78: ea:83:96:92:5c:21:e4:30:73:cd:d6:95:b7:8f:4d:16:69:a7: fc:4b:7b:de:b2:d2:c6:5b:21:13:bd:1c:d9:5e:55:7b:72:32: ed:b5:36:57:61:4d:7c:85:26:b8:f1:0a:9d:e8:fb:7c:c1:ee: 09:28:44:cc:33:1f:fe:18:e0:d7:4c:12:11:ee:a4:12:e0:a3: d4:d5:62:d8:de:87:ca:1e:e7:69:0d:9a:8e:ff:99:43:e4:ee: 27:38:10:9d:e9:89:de:1f:cb:7f:70:e3:ea:b1:77:1f:ed:1d: 33:0e:fd:b9:b5:a4:ff:ac:f2:33:8f:01:25:71:ed:10:a3:9e: 08:ce:b1:bf:da:f8:50:13:57:2b:2b:14:2d:6e:84:1f:68:ba: 9b:bf:0e:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0fGyeZ5vGSi/WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OWNiYWJlZWQtYTExOC00OTAwLWE3MjEtOTRjOWQyNzczOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrZxbtF9qS2/rSC0/thJnL69v5sK6vLzZkCx +BufOpYl9gu1bErWYWv1MqMvxM7m6HAjLEv/a3sRaB31XeVhm7DTw9EGCBcMFxrF DYZ/DB1HHc2lW/6jAt6EeTzQ6Bj9e4DNdMLbxt3T3Xyt83BhgrqQR7hXbEWJ32IG mLZZoZsh3Vyg3HRXDVbyhy2KRE2j3eOFfal+/8QG9cvzomDp6tWU5cNbTcYr98is gEqC0DIoimQOwvaPdEDXZl8P05efQDDTQP2Vf3ckTBOvvE+gxnw6XxxnE0DLZJxZ OrlxQlnt4tDr8OGsZGixZmJnUNfG+OiCXg5VFqRA1XrNnk0ThwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYT8vi/TONQVMSxcmMWZ1Au+PLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2I4NWIyYTEtOTgwZC0z MzdiLTkzNzAtMDQ3YjEwYTM4ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR1lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMI3//whCEp//iKmnSb8JgM81IbQ76o7FGcX1rY29myklxWJedrg7iXn AsoWDPVk2r9M/YoQdZqpMgzv+Szp9/iazUc+1ocPdZDzoEF6n+AXbbMdUzv/CQZ4 1jYG7WKhhoknbUPoBrD6iLBMeOqDlpJcIeQwc83WlbePTRZpp/xLe96y0sZbIRO9 HNleVXtyMu21NldhTXyFJrjxCp3o+3zB7gkoRMwzH/4Y4NdMEhHupBLgo9TVYtje h8oe52kNmo7/mUPk7ic4EJ3pid4fy39w4+qxdx/tHTMO/bm1pP+s8jOPASVx7RCj ngjOsb/a+FATVysrFC1uhB9oupu/Dns= -----END CERTIFICATE-----Generated at Sun Apr 6 22:48:07 2025 by rpki-client