$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa File: aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa (raw, json) Hash identifier: 4vN1LQd/xtnGH1aDFWBQqLkqAhZ5ntovoyaDp0uTLCs= Subject key identifier: 90:B1:B7:89:BF:A3:42:E3:9B:1C:02:60:88:8F:0D:19:19:3D:A2:BA Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1DA2AA4CA0E6C316E3900 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 10796 IP address blocks: 47.231.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:da:2a:a4:ca:0e:6c:31:6e:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=c75ef202-eeb5-45b4-9c12-9734f5d22abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:b9:8d:6a:47:dd:c6:c0:78:39:e1:07:0c: 4a:ee:b1:48:d9:98:1f:ce:c6:cb:07:18:d9:5d:6f: d1:8d:4f:82:16:db:79:a4:4d:b8:d9:cd:7a:7b:8f: 67:ae:e4:06:45:a5:21:49:dd:ed:3d:94:53:a4:9b: e5:5b:27:93:5c:e1:f4:32:92:75:5f:af:a7:a6:e9: 03:74:ba:fe:20:89:2a:04:a8:e3:08:b9:bb:a8:94: 56:8f:90:0b:eb:8c:f8:b4:b9:43:4d:bd:d4:0c:60: 17:32:45:cb:19:2c:75:a4:04:5a:56:f0:b3:c1:e6: 9d:04:48:3a:2e:f6:72:c0:1d:f4:93:ab:b2:87:79: 3c:d7:3d:64:24:a1:c6:d4:af:60:9c:6e:05:53:38: e8:92:a7:9f:9b:ee:9b:2b:2b:a3:1b:e7:c2:67:0e: 6d:5b:ef:22:49:a0:3c:eb:f7:18:bf:f5:08:09:f9: 1e:c1:dc:fc:5d:37:a3:43:ed:52:de:cf:35:3e:5d: 54:7e:61:41:8f:2b:07:dc:4e:06:08:90:91:88:5e: 23:01:6a:c6:87:f8:57:da:fe:3a:9f:6f:74:6d:8e: e0:d3:c8:2f:0a:be:ff:7a:db:8e:f5:a6:d9:5b:4e: 4c:f8:06:2e:fe:2b:d2:4c:e0:5f:bc:b0:40:b4:fa: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B1:B7:89:BF:A3:42:E3:9B:1C:02:60:88:8F:0D:19:19:3D:A2:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aa2d38cb-3c6e-3601-8580-8ad4ff409aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.231.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:d9:be:9a:d3:8c:6c:4c:9a:3b:d1:0c:73:17:3a:ca:69:85: 0e:bb:be:c2:b7:3e:0d:c0:72:2e:ac:f8:c3:12:90:19:df:57: e4:04:25:d0:96:78:98:c9:05:f6:10:26:fa:c3:a7:52:12:fe: 7f:d7:10:d5:25:73:41:d1:10:0a:d3:a4:11:aa:4a:03:64:be: 04:57:ed:c6:8b:4f:3c:b3:30:7a:86:49:8d:ef:26:b8:72:72: d1:82:4a:37:e9:da:51:64:cd:85:32:44:5f:2b:56:d8:b6:80: c6:d3:34:12:ac:4b:50:ba:a4:c8:19:73:90:90:9c:1f:33:05: 6b:f7:b0:d7:b8:d7:5b:03:e8:a6:f1:72:3f:0c:5a:9d:5a:c4: 8f:2b:5e:96:06:b5:ce:15:d7:77:55:02:08:e5:e5:21:07:e0: dc:0d:c3:2f:43:55:e0:fd:24:8a:92:aa:15:50:31:f7:c2:81: 83:cf:79:4e:82:e6:55:72:70:1d:1a:45:60:da:ba:ff:59:34: 68:95:54:f4:cf:2f:dd:55:bd:bd:1d:b2:93:85:d1:6f:71:34: 6c:5e:49:cd:c5:69:90:2d:c4:09:41:43:6c:20:dd:09:64:81: 77:ed:f4:55:b9:4b:27:18:6f:b9:18:43:7a:7e:e6:09:05:4d: 92:65:ef:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0doqpMoObDFuOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk Yzc1ZWYyMDItZWViNS00NWI0LTljMTItOTczNGY1ZDIyYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHC5jWpH3cbAeDnhBwxK7rFI2ZgfzsbLBxjZ XW/RjU+CFtt5pE242c16e49nruQGRaUhSd3tPZRTpJvlWyeTXOH0MpJ1X6+npukD dLr+IIkqBKjjCLm7qJRWj5AL64z4tLlDTb3UDGAXMkXLGSx1pARaVvCzweadBEg6 LvZywB30k6uyh3k81z1kJKHG1K9gnG4FUzjokqefm+6bKyujG+fCZw5tW+8iSaA8 6/cYv/UICfkewdz8XTejQ+1S3s81Pl1UfmFBjysH3E4GCJCRiF4jAWrGh/hX2v46 n290bY7g08gvCr7/etuO9abZW05M+AYu/ivSTOBfvLBAtPpofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCxt4m/o0LjmxwCYIiPDRkZPaK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWEyZDM4Y2ItM2M2ZS0z NjAxLTg1ODAtOGFkNGZmNDA5YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCL+eEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzZvprTjGxMmjvRDHMXOspphQ67vsK3Pg3Aci6s+MMSkBnfV+QEJdCW eJjJBfYQJvrDp1IS/n/XENUlc0HREArTpBGqSgNkvgRX7caLTzyzMHqGSY3vJrhy ctGCSjfp2lFkzYUyRF8rVti2gMbTNBKsS1C6pMgZc5CQnB8zBWv3sNe411sD6Kbx cj8MWp1axI8rXpYGtc4V13dVAgjl5SEH4NwNwy9DVeD9JIqSqhVQMffCgYPPeU6C 5lVycB0aRWDauv9ZNGiVVPTPL91Vvb0dspOF0W9xNGxeSc3FaZAtxAlBQ2wg3Qlk gXft9FW5SycYb7kYQ3p+5gkFTZJl70k= -----END CERTIFICATE-----Generated at Wed Apr 9 18:11:29 2025 by rpki-client