$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/4516f892-63b2-3973-9283-54cdbb072576.roa File: 4516f892-63b2-3973-9283-54cdbb072576.roa (raw, json) Hash identifier: SgbN7azrUsO3JTLnNjqoJMkGSPuGR1Vk3zPOtXfXrSI= Subject key identifier: 60:E0:64:BC:A5:27:B5:6C:11:18:10:53:BC:EF:AA:67:FE:37:79:6F Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849CBCF85F480877CF29AE4BD20 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/4516f892-63b2-3973-9283-54cdbb072576.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 42 IP address blocks: 70.40.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:85:f4:80:87:7c:f2:9a:e4:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=b7aefb1f-de2e-4fd1-bf87-f23c741d88c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:4b:07:fc:d4:02:ad:00:12:49:b5:99:76: 28:7a:6f:29:6b:93:e4:f8:b2:b8:6d:ae:a5:eb:e2: 6e:af:b6:44:56:88:26:8e:80:42:fa:3a:ff:c5:64: c5:b1:b4:c1:ef:c8:50:9a:a2:d9:a4:41:ff:ca:4c: 69:a7:6a:3b:ff:ef:03:c7:fa:38:be:2a:9f:67:02: 2c:cb:48:3d:16:b0:da:b2:f1:c4:6f:56:45:06:bf: 57:15:d1:ab:7a:a3:ef:d9:56:be:b9:5a:9e:d5:0e: 51:93:81:6e:b1:5e:78:c7:20:62:12:2e:4c:93:e2: 5a:99:36:4a:93:5c:f6:d9:01:6a:c2:c5:62:af:d8: 4e:e2:b5:9d:4c:2d:9d:20:a7:c7:be:01:40:9e:06: 8c:86:79:d7:f7:31:a5:17:56:e1:e0:a2:cd:7e:a9: 49:f3:33:4f:c8:af:23:39:30:60:22:c1:06:b9:cd: 4c:26:71:06:1d:12:32:d6:61:59:0d:0b:98:be:da: 94:ec:fd:d3:fa:cd:02:00:6c:d8:3e:78:eb:98:63: db:57:53:1a:48:61:05:25:a5:d6:36:bd:a0:01:e5: 65:bf:3d:76:83:74:86:56:34:a0:32:13:df:9e:e6: 2d:c7:88:58:50:b4:7d:28:b3:a1:22:df:be:86:07: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E0:64:BC:A5:27:B5:6C:11:18:10:53:BC:EF:AA:67:FE:37:79:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/4516f892-63b2-3973-9283-54cdbb072576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 70.40.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c6:2f:d0:a0:97:dc:3b:7f:98:b5:94:5b:b2:85:e9:87:92: 3b:2c:8f:53:ce:d8:18:cd:78:a4:3f:5e:f2:79:db:a5:8b:83: cc:84:da:6c:9f:40:3f:5a:1e:0e:bd:49:b8:8f:9b:31:8a:e8: 87:86:ad:c1:03:6b:6f:83:cf:26:3b:9e:a5:98:28:04:77:d7: 0e:3f:83:c7:f1:d8:b5:21:4b:9d:a2:6a:bd:b2:d6:70:be:2c: ed:be:29:7b:4d:c4:74:fc:d8:3b:ce:dd:47:22:c5:a8:6e:bc: ca:98:ec:6f:c5:1f:0a:db:a9:74:6a:b0:65:c0:a5:0c:fc:71: a4:a4:d0:2b:6b:30:8d:4e:74:ba:36:0c:1d:f8:49:78:93:22: 8d:ed:5d:48:ec:30:98:c5:7d:2c:22:af:bc:30:17:50:41:68: 11:a6:f1:4d:12:43:ea:0f:d1:8f:3d:60:e2:50:fb:55:87:9c: c8:1e:de:4a:9b:5b:47:c8:46:c0:93:dd:62:c2:29:f8:ef:b5: 4e:11:4e:94:ff:04:da:4d:8b:c6:57:18:5b:ed:3f:8f:02:5f: 67:02:15:79:05:ba:31:2a:47:a4:78:05:d3:d1:2f:e0:70:43: ec:4b:72:ef:85:6d:ab:20:d2:88:fb:10:a4:ce:2b:10:3a:5d: 99:70:f1:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4X0gId88prkvSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YjdhZWZiMWYtZGUyZS00ZmQxLWJmODctZjIzYzc0MWQ4OGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoahLB/zUAq0AEkm1mXYoem8pa5Pk+LK4ba6l 6+Jur7ZEVogmjoBC+jr/xWTFsbTB78hQmqLZpEH/ykxpp2o7/+8Dx/o4viqfZwIs y0g9FrDasvHEb1ZFBr9XFdGreqPv2Va+uVqe1Q5Rk4FusV54xyBiEi5Mk+JamTZK k1z22QFqwsVir9hO4rWdTC2dIKfHvgFAngaMhnnX9zGlF1bh4KLNfqlJ8zNPyK8j OTBgIsEGuc1MJnEGHRIy1mFZDQuYvtqU7P3T+s0CAGzYPnjrmGPbV1MaSGEFJaXW Nr2gAeVlvz12g3SGVjSgMhPfnuYtx4hYULR9KLOhIt++hgcW+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDgZLylJ7VsERgQU7zvqmf+N3lvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNDUxNmY4OTItNjNiMi0z OTczLTkyODMtNTRjZGJiMDcyNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRigIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzGL9Cgl9w7f5i1lFuyhemHkjssj1PO2BjNeKQ/XvJ526WLg8yE2myf QD9aHg69SbiPmzGK6IeGrcEDa2+DzyY7nqWYKAR31w4/g8fx2LUhS52iar2y1nC+ LO2+KXtNxHT82DvO3UcixahuvMqY7G/FHwrbqXRqsGXApQz8caSk0CtrMI1OdLo2 DB34SXiTIo3tXUjsMJjFfSwir7wwF1BBaBGm8U0SQ+oP0Y89YOJQ+1WHnMge3kqb W0fIRsCT3WLCKfjvtU4RTpT/BNpNi8ZXGFvtP48CX2cCFXkFujEqR6R4BdPRL+Bw Q+xLcu+Fbasg0oj7EKTOKxA6XZlw8So= -----END CERTIFICATE-----Generated at Tue May 13 04:20:44 2025 by rpki-client