$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa File: d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa (raw, json) Hash identifier: trgAZUjqP75kX6F77ghFPFScW/brlx5Zae0KXFAS5dw= Subject key identifier: D3:5F:02:43:78:67:5E:64:51:0D:E4:CD:B9:AE:E5:94:7B:26:70:39 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D166408CC7EDE1CEC00440 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 66.168.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:66:40:8c:c7:ed:e1:ce:c0:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=32ffe4b3-aebb-4543-8d67-2bd27c4586f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:93:ef:9f:61:2a:56:1e:a6:1e:e0:19:01: 14:b3:0a:da:51:fb:e5:16:85:e6:06:81:70:66:5b: 89:f6:bc:35:96:6d:bc:40:dd:07:88:f0:c2:1e:17: d0:46:e8:fe:51:d6:05:e2:83:ce:13:8f:87:8a:29: 9a:c1:c6:cd:9a:ba:61:db:10:39:01:7a:ed:af:6b: bb:7b:37:51:c9:43:ad:d4:f9:91:6e:f9:ec:4c:87: 30:7a:55:ff:4e:d8:6f:e5:4e:b3:44:6a:a7:c1:a8: 02:78:d7:2d:dd:51:93:f0:9f:71:e8:3b:0d:c4:af: 64:b4:5a:41:f2:a7:af:83:80:98:87:b8:d5:77:d4: 55:62:f2:9e:70:00:07:d7:fe:bd:36:6a:db:b3:7b: ba:21:6c:dd:f3:65:df:bc:6f:e1:0d:43:2c:25:c2: 83:f2:65:2b:71:b9:95:0e:fe:12:b3:60:4a:98:c0: 68:12:18:ad:f6:b6:2b:ca:a2:b6:ce:75:c3:50:f7: 08:c7:60:78:fd:e1:f8:d2:f4:89:b3:f7:5b:1c:80: 8a:f9:4a:c3:89:63:08:c3:1c:3d:59:d1:90:42:55: 73:47:fb:2e:15:9e:e4:05:d2:01:a2:69:fa:a8:d2: 85:83:d5:18:2c:f6:e1:59:5f:18:33:5f:1f:86:80: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5F:02:43:78:67:5E:64:51:0D:E4:CD:B9:AE:E5:94:7B:26:70:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d0fe9fdb-2b41-3cd2-be6c-33cc4d4c2764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.168.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:bf:58:c2:8e:70:84:e1:b9:9b:5b:9a:c3:88:63:c8:8d:55: e1:f9:c5:59:9f:ae:07:ca:c6:a5:19:5a:5a:4f:3c:27:6f:36: cb:9a:7d:96:22:79:6c:d5:6a:8a:26:e5:83:32:77:17:8c:ba: 0b:d9:58:49:89:95:b2:78:48:e3:f5:26:ba:bd:2f:1b:aa:39: df:e6:03:25:9e:2f:d3:43:76:91:31:ae:ad:4d:81:c8:1a:fb: 33:ad:fc:5e:76:90:04:a0:f2:58:96:79:54:6f:f0:76:9d:89: 24:38:32:97:a5:a0:37:de:89:69:e6:1e:31:39:b7:76:8c:f9: 56:42:19:73:93:51:f2:44:a3:ae:d3:61:5d:7e:39:44:50:0c: 88:47:8c:d2:96:5d:63:29:48:ba:7e:97:f3:97:8c:b9:bf:32: 6e:ff:f4:23:20:7d:04:29:bb:8c:4e:49:de:a3:a5:df:5d:8b: 7c:9a:22:d1:8a:2f:1f:67:f3:e2:6b:da:8b:f5:19:be:a9:0f: 2e:10:fb:01:4e:68:7e:87:24:aa:76:23:5b:84:64:c5:d8:82: b6:34:67:10:83:26:52:54:ee:f1:89:9a:70:0b:7c:97:80:2f: e8:98:3c:21:26:b3:45:d1:aa:9b:91:8c:3e:e3:44:a4:51:b9: b0:6d:41:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0WZAjMft4c7ABEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MzJmZmU0YjMtYWViYi00NTQzLThkNjctMmJkMjdjNDU4NmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT6T759hKlYeph7gGQEUswraUfvlFoXmBoFw ZluJ9rw1lm28QN0HiPDCHhfQRuj+UdYF4oPOE4+HiimawcbNmrph2xA5AXrtr2u7 ezdRyUOt1PmRbvnsTIcwelX/Tthv5U6zRGqnwagCeNct3VGT8J9x6DsNxK9ktFpB 8qevg4CYh7jVd9RVYvKecAAH1/69Nmrbs3u6IWzd82XfvG/hDUMsJcKD8mUrcbmV Dv4Ss2BKmMBoEhit9rYryqK2znXDUPcIx2B4/eH40vSJs/dbHICK+UrDiWMIwxw9 WdGQQlVzR/suFZ7kBdIBomn6qNKFg9UYLPbhWV8YM18fhoCXcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNfAkN4Z15kUQ3kzbmu5ZR7JnA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZDBmZTlmZGItMmI0MS0z Y2QyLWJlNmMtMzNjYzRkNGMyNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe/WMKOcIThuZtbmsOIY8iNVeH5xVmfrgfKxqUZWlpPPCdvNsuafZYi eWzVaoom5YMydxeMugvZWEmJlbJ4SOP1Jrq9LxuqOd/mAyWeL9NDdpExrq1Ngcga +zOt/F52kASg8liWeVRv8HadiSQ4MpeloDfeiWnmHjE5t3aM+VZCGXOTUfJEo67T YV1+OURQDIhHjNKWXWMpSLp+l/OXjLm/Mm7/9CMgfQQpu4xOSd6jpd9di3yaItGK Lx9n8+Jr2ov1Gb6pDy4Q+wFOaH6HJKp2I1uEZMXYgrY0ZxCDJlJU7vGJmnALfJeA L+iYPCEms0XRqpuRjD7jRKRRubBtQUE= -----END CERTIFICATE-----Generated at Wed Mar 19 16:01:34 2025 by rpki-client