$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa File: 959c9920-c69e-389b-8a68-5c4dc7a13333.roa (raw, json) Hash identifier: N1QkZoya2bMa7gNKaYM/eneyAP7jFngcg0Fs96g0jC0= Subject key identifier: 37:CF:C4:3C:DC:C6:F2:EC:98:AE:88:2B:57:2E:86:1E:F9:06:25:6B Certificate issuer: /CN=74b205b0-206e-45a4-8d98-55b99a30a8f4 Certificate serial: 010D0C9F43285849B57A151D9BA9F92DEEAA31A0 Authority key identifier: F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 12155 IP address blocks: 65.75.240.0/20 maxlen: 24 199.36.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:15:1d:9b:a9:f9:2d:ee:aa:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b205b0-206e-45a4-8d98-55b99a30a8f4 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=d23ba0a2-677c-4bc7-b739-5ff503d99e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ae:eb:a5:4c:43:c7:4f:4f:74:bb:7e:2e:fb: e1:90:9f:a6:e6:c8:ab:9d:ac:bf:b5:7e:52:65:4a: 5e:88:3c:94:34:15:4c:8e:7d:c7:06:40:b5:07:db: 57:a9:20:4d:18:bd:99:7f:86:3d:11:a8:a7:d3:dc: f7:a3:3c:ca:9c:6d:95:7c:4a:aa:34:f4:aa:a7:a6: e8:99:60:bf:cb:35:a3:6e:1b:91:d5:b9:a8:29:c2: 75:69:dc:26:2d:19:9d:4a:e7:21:95:4e:60:6a:28: 0d:54:89:72:8c:59:d5:78:f2:3c:8e:a2:3f:13:28: b7:ab:9e:d2:78:d8:92:de:45:f4:d4:96:e1:b1:2c: d4:dc:95:df:c4:35:70:71:22:01:0b:ab:21:b6:17: a3:d2:a1:c1:dd:5f:3e:ce:09:81:91:7d:a7:89:de: ac:02:1d:44:87:df:12:ad:6c:13:25:50:74:38:ff: d2:20:4a:cf:45:08:7e:8f:d7:64:90:59:13:a9:76: cd:ff:32:83:ac:b9:c9:ed:cb:64:93:3b:40:cd:d6: 79:62:84:85:3a:32:e7:95:88:dc:57:eb:a3:82:52: 62:a6:9d:90:53:77:81:c8:f8:e8:e7:33:f2:58:63: 1b:be:84:31:36:6a:f3:33:c9:c8:73:e0:98:3c:98: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CF:C4:3C:DC:C6:F2:EC:98:AE:88:2B:57:2E:86:1E:F9:06:25:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/959c9920-c69e-389b-8a68-5c4dc7a13333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4/74b205b0-206e-45a4-8d98-55b99a30a8f4.crl X509v3 Authority Key Identifier: keyid:F6:1C:B4:58:8A:47:30:C2:B8:C6:BA:47:E0:F6:EB:21:66:10:89:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/74b205b0-206e-45a4-8d98-55b99a30a8f4.cer sbgp-ipAddrBlock: critical IPv4: 65.75.240.0/20 199.36.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:42:bf:e3:ef:7a:cc:15:5c:a2:4f:92:7d:d2:cf:7c:fd:cc: 0f:5f:90:99:33:20:93:9a:59:d9:39:3a:79:1c:d6:17:a0:cc: f5:c1:f1:88:c9:6c:7a:3f:86:7f:b4:4a:6c:09:3c:4c:cf:3f: 81:89:2b:0e:22:64:db:78:0b:c5:33:53:5d:e3:c7:25:d4:8e: f9:de:45:a5:ec:6f:07:da:f5:2e:d4:a1:ac:7a:90:5d:62:d0: 81:74:72:f4:aa:08:1c:ce:ed:08:0e:7d:7a:16:23:4c:48:09: c3:b4:b0:96:4f:a4:6a:28:c0:40:22:6e:27:06:82:84:0b:53: 6e:f8:e4:55:97:6e:93:26:ed:6f:99:37:0a:c2:48:37:7d:c5: 73:ee:b3:53:1c:17:f6:c8:a3:32:68:48:13:f1:e5:d7:f2:4e: 4e:56:36:9e:f3:b4:34:62:15:b7:ce:d3:d0:f4:98:51:2f:ea: 07:98:00:e4:48:c7:9b:0f:35:34:1f:c0:6f:4a:f9:94:f1:90: 22:0a:2e:62:ee:9c:4a:a6:6f:13:6c:be:48:1a:7a:ef:3a:27: 22:27:e1:55:af:13:22:e8:f9:50:8f:c0:4f:f6:0a:7b:42:6d: 69:ac:ed:fd:f0:47:c9:84:5e:48:b1:e2:9a:43:ab:6c:66:73: ab:39:9d:ab -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEm1ehUdm6n5Le6qMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjA1YjAtMjA2ZS00NWE0LThkOTgtNTViOTlhMzBh OGY0MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ZDIzYmEwYTItNjc3Yy00YmM3LWI3MzktNWZmNTAzZDk5ZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q7rpUxDx09PdLt+LvvhkJ+m5sirnay/tX5S ZUpeiDyUNBVMjn3HBkC1B9tXqSBNGL2Zf4Y9Eain09z3ozzKnG2VfEqqNPSqp6bo mWC/yzWjbhuR1bmoKcJ1adwmLRmdSuchlU5gaigNVIlyjFnVePI8jqI/Eyi3q57S eNiS3kX01JbhsSzU3JXfxDVwcSIBC6shthej0qHB3V8+zgmBkX2nid6sAh1Eh98S rWwTJVB0OP/SIErPRQh+j9dkkFkTqXbN/zKDrLnJ7ctkkztAzdZ5YoSFOjLnlYjc V+ujglJipp2QU3eByPjo5zPyWGMbvoQxNmrzM8nIc+CYPJhvtwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDfPxDzcxvLsmK6IK1cuhh75BiVrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NGIy MDViMC0yMDZlLTQ1YTQtOGQ5OC01NWI5OWEzMGE4ZjQvOTU5Yzk5MjAtYzY5ZS0z ODliLThhNjgtNWM0ZGM3YTEzMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzRiMjA1YjAtMjA2ZS00NWE0LThk OTgtNTViOTlhMzBhOGY0Lzc0YjIwNWIwLTIwNmUtNDVhNC04ZDk4LTU1Yjk5YTMw YThmNC5jcmwwHwYDVR0jBBgwFoAU9hy0WIpHMMK4xrpH4PbrIWYQiTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NGIyMDViMC0yMDZlLTQ1YTQtOGQ5OC01NWI5 OWEzMGE4ZjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQUvwAwQD xyTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABhCv+PveswVXKJPkn3Sz3z9zA9fkJkzIJOaWdk5Onkc1heg zPXB8YjJbHo/hn+0SmwJPEzPP4GJKw4iZNt4C8UzU13jxyXUjvneRaXsbwfa9S7U oax6kF1i0IF0cvSqCBzO7QgOfXoWI0xICcO0sJZPpGoowEAibicGgoQLU2745FWX bpMm7W+ZNwrCSDd9xXPus1McF/bIozJoSBPx5dfyTk5WNp7ztDRiFbfO09D0mFEv 6geYAORIx5sPNTQfwG9K+ZTxkCIKLmLunEqmbxNsvkgaeu86JyIn4VWvEyLo+VCP wE/2CntCbWms7f3wR8mEXkix4ppDq2xmc6s5nas= -----END CERTIFICATE-----Generated at Thu May 15 01:19:43 2025 by rpki-client