$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb526a13-ed4e-3508-95d8-89986480728a.roa File: eb526a13-ed4e-3508-95d8-89986480728a.roa (raw, json) Hash identifier: Yqatm7gi5E3WtwVagnH5VwbsAtmA0zc53Uh4DjIJkPE= Subject key identifier: 7E:54:80:92:C7:DB:7D:28:54:E5:17:88:37:88:3A:38:DE:92:82:C0 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D2130EBB043230299D2100 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb526a13-ed4e-3508-95d8-89986480728a.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 68.186.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d2:13:0e:bb:04:32:30:29:9d:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=cb72fd55-0f19-405f-8e12-8317d3420ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:ef:3c:6b:99:84:84:a9:ac:39:47:05:d1: f6:2f:31:d1:12:e2:2c:ba:04:ff:3f:53:0c:32:6d: 57:e3:27:ab:79:fc:b4:7d:80:7c:84:c9:3f:ef:39: ac:52:be:6a:67:81:a1:70:d8:0f:1d:59:fd:4c:e4: 89:5a:53:ed:36:18:2f:28:b7:0e:72:f5:5b:04:5e: fd:ad:69:cd:2e:8b:5d:35:99:04:22:ce:0b:a9:e2: 64:51:77:0b:ea:de:1d:04:b0:01:ff:bd:70:cf:0d: f2:75:fe:c4:4e:88:d3:5b:19:ea:d8:29:e1:7f:89: 50:b2:a8:8e:d8:45:c2:94:99:47:66:43:df:24:6f: c2:b4:5b:7f:44:38:14:e5:9f:27:d0:93:6b:c1:77: d2:c3:20:19:2e:8a:ed:f7:12:10:29:cb:cb:e8:3c: ab:6f:b0:c6:57:61:3b:78:0d:7c:73:2c:ba:28:25: 21:61:47:10:29:96:46:05:70:74:5a:61:cb:d6:6a: ae:d9:8c:25:dd:68:ce:6e:33:d7:a6:66:f5:c2:21: 68:70:a2:23:05:89:03:29:f1:bc:ba:08:9f:ac:47: 17:37:b9:0a:b9:0c:ee:b9:af:05:ab:d3:0a:ff:91: ee:25:d8:18:bf:78:d1:ee:f7:71:be:13:ff:89:34: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:54:80:92:C7:DB:7D:28:54:E5:17:88:37:88:3A:38:DE:92:82:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eb526a13-ed4e-3508-95d8-89986480728a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.186.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:28:58:31:d8:dc:ac:da:b0:00:c3:b1:30:f7:76:05:c6:84: bd:d5:38:37:c0:dc:d9:88:a8:ad:2d:13:e4:0d:9c:40:78:bd: 3e:a5:6a:d7:ed:31:c3:55:26:f7:15:46:12:39:1d:f0:55:a1: f1:54:77:ec:ec:db:08:d8:9d:eb:3d:c8:22:26:6d:ed:07:38: fd:ba:fe:66:20:3e:e4:f0:0d:28:d1:a3:9d:d6:82:58:e1:20: 03:e6:66:b0:18:92:b0:f4:ba:0e:3b:d5:bf:e4:01:53:aa:e6: 79:10:a4:c5:24:7d:64:d3:65:37:0f:18:b7:ad:7f:a0:f2:f2: dd:d4:65:b0:f7:70:34:69:90:b4:5c:4e:03:9d:1f:71:5a:f4: d2:92:fe:2b:bd:f4:1c:c8:a7:4f:2e:3c:31:61:21:dd:0c:2f: 16:b8:ca:d3:d0:ed:e6:88:13:0a:34:70:27:eb:2c:ff:3d:69: 88:73:46:63:c5:f2:44:8f:44:c0:80:37:a4:a3:2c:b8:9a:25: 0d:09:94:95:f5:5b:5b:15:0d:a6:e9:85:58:71:3d:9a:d6:48: ae:a8:96:12:ab:e7:5e:8a:26:6b:04:3e:01:2b:90:c3:e9:f3: cd:35:cf:94:0c:91:00:a3:3a:01:e0:94:31:62:28:20:05:b6: 0a:b0:ff:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0hMOuwQyMCmdIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk Y2I3MmZkNTUtMGYxOS00MDVmLThlMTItODMxN2QzNDIwYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEfvPGuZhISprDlHBdH2LzHREuIsugT/P1MM Mm1X4yerefy0fYB8hMk/7zmsUr5qZ4GhcNgPHVn9TOSJWlPtNhgvKLcOcvVbBF79 rWnNLotdNZkEIs4LqeJkUXcL6t4dBLAB/71wzw3ydf7ETojTWxnq2Cnhf4lQsqiO 2EXClJlHZkPfJG/CtFt/RDgU5Z8n0JNrwXfSwyAZLort9xIQKcvL6Dyrb7DGV2E7 eA18cyy6KCUhYUcQKZZGBXB0WmHL1mqu2Ywl3WjObjPXpmb1wiFocKIjBYkDKfG8 ugifrEcXN7kKuQzuua8Fq9MK/5HuJdgYv3jR7vdxvhP/iTQsBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5UgJLH230oVOUXiDeIOjjekoLAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWI1MjZhMTMtZWQ0ZS0z NTA4LTk1ZDgtODk5ODY0ODA3MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRLqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkoWDHY3KzasADDsTD3dgXGhL3VODfA3NmIqK0tE+QNnEB4vT6latft McNVJvcVRhI5HfBVofFUd+zs2wjYnes9yCImbe0HOP26/mYgPuTwDSjRo53Wgljh IAPmZrAYkrD0ug471b/kAVOq5nkQpMUkfWTTZTcPGLetf6Dy8t3UZbD3cDRpkLRc TgOdH3Fa9NKS/iu99BzIp08uPDFhId0MLxa4ytPQ7eaIEwo0cCfrLP89aYhzRmPF 8kSPRMCAN6SjLLiaJQ0JlJX1W1sVDabphVhxPZrWSK6olhKr516KJmsEPgErkMPp 8801z5QMkQCjOgHglDFiKCAFtgqw//0= -----END CERTIFICATE-----Generated at Sun Apr 6 23:30:25 2025 by rpki-client