$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cd8b923e-82ca-3b93-b921-ac209cebf9e3.roa File: cd8b923e-82ca-3b93-b921-ac209cebf9e3.roa (raw, json) Hash identifier: YI6OX8lm1gwrU0pDcNjREwGQgChdSrpHs64X3YNSwmE= Subject key identifier: 1B:AC:A5:8C:81:B7:6C:EB:FC:C4:A9:CE:92:DB:75:5F:02:C4:FF:15 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849CBCF86454C26EA3A40C38380 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cd8b923e-82ca-3b93-b921-ac209cebf9e3.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 42 IP address blocks: 68.65.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:86:45:4c:26:ea:3a:40:c3:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=d4363049-ad7d-4be8-ada6-d22b20568865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:29:7f:f4:18:c1:25:74:06:f6:62:1f:dc: a9:71:0d:15:cb:0e:2b:6e:2c:8b:14:d1:51:50:18: 94:85:8f:eb:2b:9f:8b:c1:cf:0c:64:0d:b6:25:46: aa:d3:c1:1a:8a:ff:0a:71:65:f5:17:aa:bf:b5:49: 2f:98:0c:82:4f:29:fa:b6:76:34:61:a5:2b:9e:0d: eb:61:99:f4:c9:0e:44:e0:98:a7:5c:60:b8:20:0c: f9:d5:88:a2:6c:f8:5f:97:09:f0:47:c2:6e:8e:d3: 41:d2:5d:8d:a7:ce:b1:90:01:a6:a3:61:31:87:85: 23:80:f4:0d:1f:7f:d0:c1:42:b4:c7:13:46:cf:42: f7:3d:c4:c7:3a:b8:8b:d0:c2:b1:4e:aa:da:30:17: b1:97:9f:2d:bb:54:41:06:6a:db:62:42:63:c1:33: 93:a5:3a:27:35:5d:53:eb:9f:19:e5:f8:fd:bc:00: 14:89:14:44:3c:89:fc:73:df:bc:53:f5:d2:75:13: 08:57:8b:35:b4:95:6e:32:31:72:da:fe:c2:4e:4c: 33:cd:a5:bd:90:e4:0b:d1:27:b4:a6:31:3a:ec:e7: 69:9c:0f:e2:d6:0b:6e:e8:d0:7b:73:ce:fd:dc:d0: 1e:c7:8c:2d:b6:53:37:d6:c4:e5:c4:96:ea:46:02: c1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AC:A5:8C:81:B7:6C:EB:FC:C4:A9:CE:92:DB:75:5F:02:C4:FF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/cd8b923e-82ca-3b93-b921-ac209cebf9e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 68.65.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:8d:6e:47:63:a3:7e:b4:b3:43:aa:79:93:6f:22:88:0a:5a: 8d:71:37:e3:1e:97:53:fd:f1:4f:ad:57:a2:24:02:82:10:d8: 2d:03:8a:2b:d2:2c:d0:b7:8a:8a:70:72:33:34:52:82:2d:75: 65:99:26:47:88:e1:1a:02:94:e4:56:44:3c:4c:56:53:b6:a7: 9d:c7:cf:92:c8:84:15:be:35:e3:40:9c:cc:4b:34:e7:cb:a8: 7d:3b:df:3b:f7:2a:71:60:15:7f:cf:df:a7:73:07:b6:12:6e: e5:43:41:20:6a:dd:78:54:58:2d:f6:d6:69:c3:98:87:81:8c: 73:44:ef:cb:38:27:b7:3a:b4:6a:9b:7a:32:3d:42:59:19:a3: b0:c9:75:fe:17:97:db:d4:05:28:5b:b7:cf:05:8f:45:0b:19: f3:a1:db:f9:c8:ba:0e:35:88:cd:30:0c:00:e2:46:21:c8:52: fa:74:a3:ab:f8:a2:9c:de:13:a6:6d:f0:a5:fe:c4:d2:68:f4: 64:66:55:f8:0d:be:f5:a6:a4:f7:43:9d:b9:ca:ac:d1:46:54: b2:0b:39:bb:04:ab:f5:fc:64:29:71:be:01:d7:0f:1f:fd:3d: 11:f1:d6:f5:40:fc:86:ce:db:bc:b5:ba:c1:e4:e9:ea:5f:b1: 37:2c:f7:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4ZFTCbqOkDDg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZDQzNjMwNDktYWQ3ZC00YmU4LWFkYTYtZDIyYjIwNTY4ODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIopf/QYwSV0BvZiH9ypcQ0Vyw4rbiyLFNFR UBiUhY/rK5+Lwc8MZA22JUaq08Eaiv8KcWX1F6q/tUkvmAyCTyn6tnY0YaUrng3r YZn0yQ5E4JinXGC4IAz51YiibPhflwnwR8JujtNB0l2Np86xkAGmo2Exh4UjgPQN H3/QwUK0xxNGz0L3PcTHOriL0MKxTqraMBexl58tu1RBBmrbYkJjwTOTpTonNV1T 658Z5fj9vAAUiRREPIn8c9+8U/XSdRMIV4s1tJVuMjFy2v7CTkwzzaW9kOQL0Se0 pjE67OdpnA/i1gtu6NB7c8793NAex4wttlM31sTlxJbqRgLBoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuspYyBt2zr/MSpzpLbdV8CxP8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvY2Q4YjkyM2UtODJjYS0z YjkzLWI5MjEtYWMyMDljZWJmOWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBREF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeNbkdjo360s0OqeZNvIogKWo1xN+Mel1P98U+tV6IkAoIQ2C0DiivS LNC3iopwcjM0UoItdWWZJkeI4RoClORWRDxMVlO2p53Hz5LIhBW+NeNAnMxLNOfL qH073zv3KnFgFX/P36dzB7YSbuVDQSBq3XhUWC321mnDmIeBjHNE78s4J7c6tGqb ejI9QlkZo7DJdf4Xl9vUBShbt88Fj0ULGfOh2/nIug41iM0wDADiRiHIUvp0o6v4 opzeE6Zt8KX+xNJo9GRmVfgNvvWmpPdDnbnKrNFGVLILObsEq/X8ZClxvgHXDx/9 PRHx1vVA/IbO27y1usHk6epfsTcs9wU= -----END CERTIFICATE-----Generated at Sun May 11 13:29:52 2025 by rpki-client