$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa File: 59042824-a974-3473-be58-532204e52132.roa (raw, json) Hash identifier: HBWdY4q/qjjVrfIpOrqd4JzZ8iNlWcmIae6rlt9Sdzg= Subject key identifier: 4C:73:A4:75:B0:3B:96:1F:A1:3A:1B:1C:7A:28:A8:A9:CC:2A:4F:73 Certificate issuer: /CN=60b944fb-40a6-4574-a25b-dd101d7b668d Certificate serial: 010D0C9F43285848EF615ABC4BD3B188F3B61B00 Authority key identifier: 7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 46445 IP address blocks: 192.40.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:5a:bc:4b:d3:b1:88:f3:b6:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b944fb-40a6-4574-a25b-dd101d7b668d Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=1f7c54e5-1665-4003-b269-e70091fcfb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:88:eb:40:f4:7f:18:53:8e:45:e7:4a:1d: be:4d:47:f5:e2:f0:ca:d1:33:f4:f0:6d:b3:74:c7: 7b:0e:1f:1e:6d:03:1f:ea:18:0c:91:f0:90:23:b6: db:b2:a2:45:c2:7f:81:fc:22:06:6c:b0:73:ba:26: 1e:f6:92:d6:58:b0:1a:9d:c9:fc:99:0e:05:57:9a: 33:54:55:e7:14:fb:df:5d:cd:94:b6:67:78:bc:34: 45:f9:60:1b:c2:b1:0c:cb:3c:c4:6c:96:19:ac:54: 5c:b6:2f:c1:af:e4:44:8a:1b:02:9c:d2:63:e5:c7: fc:ea:d1:16:93:da:62:a2:6e:65:d0:43:e2:83:03: 9c:be:dc:d3:a0:17:8b:fa:20:1f:e2:99:08:c3:ab: 86:75:4b:b7:a0:bd:02:a2:cb:f7:cc:4e:81:2b:e5: 15:0b:de:3e:6d:71:c5:26:96:76:f0:88:32:a5:fe: f2:b4:95:ea:6c:9c:3e:32:aa:75:6a:5d:ce:3c:fa: 81:70:00:f4:24:f0:bc:bf:87:8a:3a:d2:8f:2b:d9: bd:e7:62:38:09:06:49:cb:cb:ac:a8:c5:da:43:76: 71:c7:33:aa:d9:7b:fa:3e:59:b4:86:1b:02:f3:a3: 4f:e0:10:85:be:8b:16:b4:39:9e:97:a3:44:39:de: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:A4:75:B0:3B:96:1F:A1:3A:1B:1C:7A:28:A8:A9:CC:2A:4F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl X509v3 Authority Key Identifier: keyid:7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer sbgp-ipAddrBlock: critical IPv4: 192.40.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e3:e8:e2:32:46:e8:57:64:25:15:a4:0f:9f:20:1f:40:da: d0:ac:08:44:e5:64:53:72:03:8c:d0:0a:dc:d0:5c:9f:09:2a: 86:09:3e:23:c2:71:1e:94:ed:12:7f:8e:00:6c:31:69:4c:ea: 23:32:7a:6c:53:39:6d:b6:28:8b:21:77:24:58:d2:08:7b:9d: 71:26:db:e0:73:2f:8f:18:93:ba:62:af:4a:44:7d:4e:dc:81: 29:52:46:23:6c:73:ed:14:d0:08:2d:c7:e4:41:c5:31:d3:8f: 11:93:4a:58:7f:0f:5e:1e:7b:59:b9:48:2e:2d:6c:82:01:ee: a2:9c:18:87:4d:f3:5b:e8:a4:79:1d:35:a0:52:b0:bc:fb:54: b9:45:5d:a6:36:28:90:fb:db:6f:5c:84:c2:14:e9:6d:c7:3a: fb:33:29:4b:d2:91:c0:37:8b:b0:b7:ce:dc:21:d2:af:21:8b: f8:8c:ad:52:78:93:84:33:cb:f2:8e:9a:32:98:f3:d2:44:59: 4e:b0:75:ed:10:32:6b:9b:12:f6:72:0d:5a:d9:f1:94:38:24: dc:c2:4d:0b:c2:8d:09:9c:24:0c:27:07:ec:cb:27:41:5e:88: 3a:1d:4a:0a:23:1b:b8:f1:48:a9:b4:7f:d8:51:a6:b2:06:4c: cd:1b:01:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVq8S9OxiPO2GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBiOTQ0ZmItNDBhNi00NTc0LWEyNWItZGQxMDFkN2I2 NjhkMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MWY3YzU0ZTUtMTY2NS00MDAzLWIyNjktZTcwMDkxZmNmYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsuI60D0fxhTjkXnSh2+TUf14vDK0TP08G2z dMd7Dh8ebQMf6hgMkfCQI7bbsqJFwn+B/CIGbLBzuiYe9pLWWLAancn8mQ4FV5oz VFXnFPvfXc2Utmd4vDRF+WAbwrEMyzzEbJYZrFRcti/Br+REihsCnNJj5cf86tEW k9piom5l0EPigwOcvtzToBeL+iAf4pkIw6uGdUu3oL0Cosv3zE6BK+UVC94+bXHF JpZ28Igypf7ytJXqbJw+Mqp1al3OPPqBcAD0JPC8v4eKOtKPK9m952I4CQZJy8us qMXaQ3ZxxzOq2Xv6Plm0hhsC86NP4BCFvosWtDmel6NEOd7yrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExzpHWwO5YfoTobHHooqKnMKk9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5 NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEwMWQ3YjY2OGQvNTkwNDI4MjQtYTk3NC0z NDczLWJlNTgtNTMyMjA0ZTUyMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjBiOTQ0ZmItNDBhNi00NTc0LWEy NWItZGQxMDFkN2I2NjhkLzYwYjk0NGZiLTQwYTYtNDU3NC1hMjViLWRkMTAxZDdi NjY4ZC5jcmwwHwYDVR0jBBgwFoAUfaPMfHvX3Wgqf0tXjXusRQsRoPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEw MWQ3YjY2OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLj6OIyRuhXZCUVpA+fIB9A2tCsCETlZFNyA4zQCtzQXJ8JKoYJPiPC cR6U7RJ/jgBsMWlM6iMyemxTOW22KIshdyRY0gh7nXEm2+BzL48Yk7pir0pEfU7c gSlSRiNsc+0U0Agtx+RBxTHTjxGTSlh/D14ee1m5SC4tbIIB7qKcGIdN81vopHkd NaBSsLz7VLlFXaY2KJD7229chMIU6W3HOvszKUvSkcA3i7C3ztwh0q8hi/iMrVJ4 k4Qzy/KOmjKY89JEWU6wde0QMmubEvZyDVrZ8ZQ4JNzCTQvCjQmcJAwnB+zLJ0Fe iDodSgojG7jxSKm0f9hRprIGTM0bAUs= -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:31 2025 by rpki-client