$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/0da20598-0c78-3593-9468-c1e87c1f6bd2.roa File: 0da20598-0c78-3593-9468-c1e87c1f6bd2.roa (raw, json) Hash identifier: GvsADxgnW8gRR2gvkpb5WGLV94forsT9J+QZYuNZoxU= Subject key identifier: 4D:7D:70:F9:0B:B6:AB:53:21:71:86:A6:83:D2:DD:C8:24:F4:D1:AC Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849CBCF851E60EE9957DE3CBA00 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/0da20598-0c78-3593-9468-c1e87c1f6bd2.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 42 IP address blocks: 63.246.32.0/20 maxlen: 24 66.185.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:85:1e:60:ee:99:57:de:3c:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=b9e72bae-bbda-4064-a898-b7edc0be0419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:49:bd:48:45:c6:0b:57:53:c4:82:d0:35: 2e:09:e1:f8:05:69:cc:58:95:b5:46:8b:29:f8:1d: 68:00:9f:99:16:bd:99:9b:6a:17:b6:e8:e0:98:27: 31:49:ef:90:fd:66:d7:d2:30:8c:be:68:c2:f5:62: 73:73:0a:5b:a8:f1:5d:50:8a:76:26:f6:f9:5d:27: 61:07:6a:35:f3:c9:5a:39:90:d5:9d:99:6b:82:4b: 71:06:92:0f:82:b4:66:77:9e:f0:5a:bf:66:cf:2d: e3:92:47:4a:25:1e:ec:8f:90:17:b5:0a:99:98:f1: d1:57:6b:2c:b7:64:69:14:12:31:97:ff:f3:4d:36: 1a:da:6a:2d:a1:c8:ce:9f:ba:4d:b0:0d:8c:55:52: c2:cb:72:c5:fa:60:be:77:62:f6:53:e8:fb:c4:63: 9f:48:b6:8a:4a:d8:c5:3e:6c:09:4c:43:04:a9:18: 13:29:cd:2b:bc:a4:3b:b3:c7:10:a0:23:c9:d4:f6: 41:0b:ce:2c:8f:1c:13:86:7e:fd:8b:a0:f0:f8:7b: ce:3f:85:a6:3d:28:55:ed:e3:14:e2:8d:e0:b7:f9: 53:4e:d6:2f:b7:b7:b5:d1:e4:2d:ed:81:67:8c:2f: 6c:ab:f3:da:98:85:61:e7:29:d3:99:03:56:56:dc: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7D:70:F9:0B:B6:AB:53:21:71:86:A6:83:D2:DD:C8:24:F4:D1:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/0da20598-0c78-3593-9468-c1e87c1f6bd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 63.246.32.0/20 66.185.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6c:30:07:93:12:fb:20:5f:d2:90:67:d2:88:79:44:d4:08: 3f:07:98:cc:cb:7a:16:37:3a:02:36:12:1e:06:b7:85:cb:57: 91:cf:9d:0d:3a:5b:ea:e5:2c:a7:d5:a8:5e:3c:fb:7d:6b:06: 30:34:8d:8d:b9:13:57:23:83:94:29:3b:9e:8f:56:9f:af:eb: 23:dc:60:20:e4:1c:98:17:6f:17:aa:90:f3:22:41:8a:ee:02: ae:73:e2:de:29:b7:d7:d9:e2:3e:84:41:ba:5a:be:7d:a9:58: b3:62:9c:8f:c8:f4:a4:3d:58:9b:e8:04:22:bb:19:c5:38:e4: db:8d:9c:d7:5e:da:04:0a:1b:23:ec:d8:65:11:f8:dc:df:89: 1e:24:c8:ab:43:e1:57:2a:fe:e9:ae:d6:3b:e3:a6:73:59:f7: dd:2c:90:6b:7a:24:b0:8e:3f:7d:ed:09:30:39:d8:2c:af:54: 63:8a:73:7a:ae:24:58:6f:90:bb:75:ff:35:26:1c:e5:f5:c3: 63:8a:6f:a9:86:48:d9:78:af:06:de:cc:45:9b:bf:92:ed:d8: 48:d0:73:bf:a3:4d:66:49:06:0b:73:fd:3c:0b:0b:c2:3b:4c: 4e:c5:62:9f:49:a8:71:76:ac:04:4e:e6:00:46:e8:f3:2f:57: 66:89:01:e2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnLz4UeYO6ZV948ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YjllNzJiYWUtYmJkYS00MDY0LWE4OTgtYjdlZGMwYmUwNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC9JvUhFxgtXU8SC0DUuCeH4BWnMWJW1Rosp +B1oAJ+ZFr2Zm2oXtujgmCcxSe+Q/WbX0jCMvmjC9WJzcwpbqPFdUIp2Jvb5XSdh B2o188laOZDVnZlrgktxBpIPgrRmd57wWr9mzy3jkkdKJR7sj5AXtQqZmPHRV2ss t2RpFBIxl//zTTYa2motocjOn7pNsA2MVVLCy3LF+mC+d2L2U+j7xGOfSLaKStjF PmwJTEMEqRgTKc0rvKQ7s8cQoCPJ1PZBC84sjxwThn79i6Dw+HvOP4WmPShV7eMU 4o3gt/lTTtYvt7e10eQt7YFnjC9sq/PamIVh5ynTmQNWVtxJvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE19cPkLtqtTIXGGpoPS3cgk9NGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMGRhMjA1OTgtMGM3OC0z NTkzLTk0NjgtYzFlODdjMWY2YmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEP/YgAwQE QrlwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFxsMAeTEvsgX9KQZ9KIeUTUCD8HmMzLehY3OgI2Eh4Gt4XL V5HPnQ06W+rlLKfVqF48+31rBjA0jY25E1cjg5QpO56PVp+v6yPcYCDkHJgXbxeq kPMiQYruAq5z4t4pt9fZ4j6EQbpavn2pWLNinI/I9KQ9WJvoBCK7GcU45NuNnNde 2gQKGyPs2GUR+NzfiR4kyKtD4Vcq/umu1jvjpnNZ990skGt6JLCOP33tCTA52Cyv VGOKc3quJFhvkLt1/zUmHOX1w2OKb6mGSNl4rwbezEWbv5Lt2EjQc7+jTWZJBgtz /TwLC8I7TE7FYp9JqHF2rARO5gBG6PMvV2aJAeI= -----END CERTIFICATE-----Generated at Sun May 11 22:52:36 2025 by rpki-client