$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db68d262-382b-3070-90f2-dffba31fbb95.roa File: db68d262-382b-3070-90f2-dffba31fbb95.roa (raw, json) Hash identifier: rrsg92QGSHva0NPrMZOUzpDrLuQPIhDeJgyZ8L55Qs4= Subject key identifier: 09:CF:FF:41:77:F0:5A:17:D6:31:11:47:A1:A2:2E:81:53:B5:C9:6B Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D201166CF825862804AC40 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db68d262-382b-3070-90f2-dffba31fbb95.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 68.114.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d2:01:16:6c:f8:25:86:28:04:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=95914395-9d66-40d3-a622-482de04b8c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:62:ca:09:92:ec:b7:b6:08:50:37:7f:9f:6f: 42:1c:01:d3:d4:07:03:f4:23:cd:03:de:33:b9:98: 21:c1:b9:09:ee:9e:19:58:96:ae:11:fa:a8:49:aa: 86:51:06:d8:05:18:5d:4e:5b:5b:6a:47:f6:58:cf: ad:67:b8:47:1d:78:a8:7b:f0:ec:e5:4b:be:7b:40: 35:9f:9b:03:87:91:19:4b:7c:af:68:01:a6:45:5c: b4:e2:5c:6c:3d:6a:6c:11:78:83:86:fa:f8:d6:25: 6e:c3:52:c0:3c:41:08:b8:89:0b:76:7c:fd:d8:7c: 89:5a:fb:12:13:7b:a7:a9:e8:74:ea:0f:0b:fb:b1: b7:ec:26:26:6c:a4:55:08:e0:2c:30:10:bd:74:73: 20:da:46:a5:72:cd:c1:c4:35:9e:f0:c3:72:fa:5a: 2c:8b:96:40:09:9f:8c:c3:ae:63:65:5f:21:0f:f8: 5f:e2:0f:29:60:32:0b:e5:aa:8c:a0:9d:2e:29:56: 20:32:e5:72:e5:49:fc:b4:4a:c5:54:6b:f2:3c:6f: 1a:8e:05:af:4c:39:5e:90:ed:36:f2:fd:19:58:79: 1f:70:ea:7d:bd:61:5f:d1:b9:24:32:d1:3f:19:43: 62:d3:61:1f:70:19:fd:b4:e5:54:24:3a:08:03:8e: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CF:FF:41:77:F0:5A:17:D6:31:11:47:A1:A2:2E:81:53:B5:C9:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/db68d262-382b-3070-90f2-dffba31fbb95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.114.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6c:a8:46:a5:94:c9:c7:cd:ac:eb:5d:6f:c0:28:e4:e9:c4: 6a:1b:98:4b:0b:c7:d0:a0:a3:e0:46:a5:4a:64:60:42:27:80: fd:94:a5:c0:a3:ea:b0:4e:c5:4d:ad:06:ba:0f:7d:49:68:32: d3:3e:fc:f5:51:16:bc:4f:28:66:27:af:6f:3f:8c:6a:a5:0e: a6:61:e4:c0:4e:3c:2a:e0:22:31:e2:5d:83:40:29:34:43:f8: cc:46:15:cd:67:de:6a:35:5d:a6:96:79:ef:c7:9e:db:a2:d0: d4:68:8c:18:a8:2d:c4:e9:e5:05:4b:c4:bd:8b:6e:41:6f:dd: 41:73:d4:3b:a3:17:83:35:37:f1:06:b3:a2:4e:9b:36:26:02: 7b:84:ae:dd:56:50:c8:f2:08:5d:8d:4d:03:2e:97:3b:20:6e: 1a:43:42:71:da:7f:aa:c7:05:02:2f:22:7e:2b:97:1a:ff:94: 36:2c:17:9c:1c:12:02:5c:92:1b:a4:cc:9a:e8:28:5d:58:73: 44:72:c6:c1:05:0e:88:34:7d:7c:25:bb:62:aa:1b:c2:95:c4: b0:2e:58:ec:80:00:26:7b:f1:8a:99:d4:84:74:9b:a0:53:ab: 52:12:cb:1e:68:28:7a:2f:a1:ce:1d:49:59:42:16:9e:89:b4: c3:bf:f7:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0gEWbPglhigErEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OTU5MTQzOTUtOWQ2Ni00MGQzLWE2MjItNDgyZGUwNGI4YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGLKCZLst7YIUDd/n29CHAHT1AcD9CPNA94z uZghwbkJ7p4ZWJauEfqoSaqGUQbYBRhdTltbakf2WM+tZ7hHHXioe/Ds5Uu+e0A1 n5sDh5EZS3yvaAGmRVy04lxsPWpsEXiDhvr41iVuw1LAPEEIuIkLdnz92HyJWvsS E3unqeh06g8L+7G37CYmbKRVCOAsMBC9dHMg2kalcs3BxDWe8MNy+losi5ZACZ+M w65jZV8hD/hf4g8pYDIL5aqMoJ0uKVYgMuVy5Un8tErFVGvyPG8ajgWvTDlekO02 8v0ZWHkfcOp9vWFf0bkkMtE/GUNi02EfcBn9tOVUJDoIA44h/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnP/0F38FoX1jERR6GiLoFTtclrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGI2OGQyNjItMzgyYi0z MDcwLTkwZjItZGZmYmEzMWZiYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRHJOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhsqEallMnHzazrXW/AKOTpxGobmEsLx9Cgo+BGpUpkYEIngP2UpcCj 6rBOxU2tBroPfUloMtM+/PVRFrxPKGYnr28/jGqlDqZh5MBOPCrgIjHiXYNAKTRD +MxGFc1n3mo1XaaWee/Hntui0NRojBioLcTp5QVLxL2LbkFv3UFz1DujF4M1N/EG s6JOmzYmAnuErt1WUMjyCF2NTQMulzsgbhpDQnHaf6rHBQIvIn4rlxr/lDYsF5wc EgJckhukzJroKF1Yc0RyxsEFDog0fXwlu2KqG8KVxLAuWOyAACZ78YqZ1IR0m6BT q1ISyx5oKHovoc4dSVlCFp6JtMO/98U= -----END CERTIFICATE-----Generated at Sun Apr 6 23:08:21 2025 by rpki-client