$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/29905d1b-b2ec-374e-8a34-ae357a2d648d.roa File: 29905d1b-b2ec-374e-8a34-ae357a2d648d.roa (raw, json) Hash identifier: fhv+XfYzdCWJI51/kex/4DvhhAOzk07gIo5aAa/ALrM= Subject key identifier: 7A:B2:68:D5:D8:5D:ED:38:F7:18:0D:64:F5:3D:8E:02:9D:6A:1C:6D Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849CBCF85CE8FB7B831B6F08340 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/29905d1b-b2ec-374e-8a34-ae357a2d648d.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 42 IP address blocks: 70.40.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:85:ce:8f:b7:b8:31:b6:f0:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=60f953d8-f5de-48eb-bc35-4d44eed23563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:7d:db:2a:a7:33:f3:11:dc:eb:01:c1:50: ff:cc:3b:67:5a:02:6d:1f:75:3e:5a:f1:89:c4:5f: e0:6f:3b:9f:bd:ab:7b:84:ac:a3:df:69:33:7b:20: d1:da:d1:5d:90:c4:34:9a:7d:aa:a4:7c:e8:5a:a2: cc:43:e4:bc:e5:88:b5:41:67:ba:31:56:46:fd:e8: e4:cb:d0:6a:c3:71:05:43:72:08:3f:5a:08:a4:a5: b7:40:31:fb:d4:6c:ae:81:43:ff:e0:6e:96:37:3b: 8c:97:7d:fc:a4:e0:36:3f:a1:a2:c1:6b:bb:92:2a: 47:f0:71:b4:dd:a1:b4:7c:89:ed:9c:03:3c:b5:d2: 82:79:df:74:ee:6d:b8:3a:97:b0:12:ae:47:16:8b: 15:b9:6f:a5:b3:0c:12:2f:6f:05:f8:7b:5d:78:6f: 7a:01:db:26:8d:50:19:16:e3:71:d1:04:1d:46:27: 58:3f:fa:23:0d:5f:1b:14:0e:a3:a0:73:42:92:a4: e4:ed:be:1b:29:4e:ea:a0:0f:a4:bc:0e:8e:ba:c5: 38:cb:19:c7:bc:c2:6f:38:fa:c5:8a:ad:3d:95:1c: 27:62:62:c2:0e:65:16:d2:8c:8f:2c:aa:41:9b:1c: dc:4f:73:96:45:fa:f0:26:06:66:0d:49:b4:29:1c: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B2:68:D5:D8:5D:ED:38:F7:18:0D:64:F5:3D:8E:02:9D:6A:1C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/29905d1b-b2ec-374e-8a34-ae357a2d648d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 70.40.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b0:57:bd:dd:11:dd:97:86:3f:f5:03:bb:84:e9:e9:e4:b5: 0b:af:df:95:ff:b1:60:45:94:b2:af:81:98:b4:39:ca:24:8e: 9f:a9:14:d7:be:57:dd:10:37:32:85:8e:19:f5:6e:c0:c0:cf: e4:33:16:56:c5:25:a9:79:22:5c:0d:c5:ee:da:4e:45:e2:fb: 80:b9:d1:b8:d1:c8:33:46:b9:85:1b:de:7a:8c:ff:75:18:08: 51:33:af:0e:84:a1:6c:0b:94:ac:b3:f5:b6:5a:ec:a6:64:ca: 29:ee:8a:5d:81:e0:16:af:1e:a9:f5:1a:b7:76:16:9f:f0:cb: fb:c5:a5:52:a6:0e:60:76:d7:8f:f5:96:41:c0:58:a7:17:d5: f5:8d:bd:59:c8:cf:5d:b3:1a:7b:f5:cd:c1:1f:ab:b1:5d:c0: 34:d5:f6:92:1a:84:77:93:36:f4:88:d4:6a:47:bd:27:8c:ae: 0e:8d:a6:10:04:62:f2:15:ae:01:9b:81:4a:c3:be:37:20:79: e7:e4:0b:34:a4:e2:7a:a0:d7:3b:f2:8a:8b:64:d5:8a:2d:f9: 94:2a:07:30:16:47:03:82:5e:38:d0:08:3e:31:26:c9:04:29: de:3c:26:4f:d0:58:0b:91:e8:59:45:ca:11:2d:d6:49:51:29: 3c:52:20:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4XOj7e4Mbbwg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NjBmOTUzZDgtZjVkZS00OGViLWJjMzUtNGQ0NGVlZDIzNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM192yqnM/MR3OsBwVD/zDtnWgJtH3U+WvGJ xF/gbzufvat7hKyj32kzeyDR2tFdkMQ0mn2qpHzoWqLMQ+S85Yi1QWe6MVZG/ejk y9Bqw3EFQ3IIP1oIpKW3QDH71GyugUP/4G6WNzuMl338pOA2P6GiwWu7kipH8HG0 3aG0fIntnAM8tdKCed907m24OpewEq5HFosVuW+lswwSL28F+HtdeG96AdsmjVAZ FuNx0QQdRidYP/ojDV8bFA6joHNCkqTk7b4bKU7qoA+kvA6OusU4yxnHvMJvOPrF iq09lRwnYmLCDmUW0oyPLKpBmxzcT3OWRfrwJgZmDUm0KRyPgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqyaNXYXe049xgNZPU9jgKdahxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMjk5MDVkMWItYjJlYy0z NzRlLThhMzQtYWUzNTdhMmQ2NDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRigAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2wV73dEd2Xhj/1A7uE6enktQuv35X/sWBFlLKvgZi0Ocokjp+pFNe+ V90QNzKFjhn1bsDAz+QzFlbFJal5IlwNxe7aTkXi+4C50bjRyDNGuYUb3nqM/3UY CFEzrw6EoWwLlKyz9bZa7KZkyinuil2B4BavHqn1Grd2Fp/wy/vFpVKmDmB214/1 lkHAWKcX1fWNvVnIz12zGnv1zcEfq7FdwDTV9pIahHeTNvSI1GpHvSeMrg6NphAE YvIVrgGbgUrDvjcgeefkCzSk4nqg1zvyiotk1Yot+ZQqBzAWRwOCXjjQCD4xJskE Kd48Jk/QWAuR6FlFyhEt1klRKTxSIF8= -----END CERTIFICATE-----Generated at Sun May 11 16:01:10 2025 by rpki-client