$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa File: 59042824-a974-3473-be58-532204e52132.roa (raw, json) Hash identifier: LZ6Dlfv6vTf2cX1quhHkAgwvok+uX4Yvot1jYrsQzwQ= Subject key identifier: CC:81:6D:0C:1B:A8:DC:F1:4A:5B:37:D7:C6:D3:7D:C3:2D:D2:25:8D Certificate issuer: /CN=60b944fb-40a6-4574-a25b-dd101d7b668d Certificate serial: 010D0C9F43285849CE9A4A973BC2DE370A8E9900 Authority key identifier: 7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 46445 IP address blocks: 192.40.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:4a:97:3b:c2:de:37:0a:8e:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60b944fb-40a6-4574-a25b-dd101d7b668d Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d591bc8d-4f44-4159-b548-5c1ec10f04b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ab:98:04:84:0a:e7:f9:b9:dc:05:b4:06:89: 39:32:4c:d7:2d:51:60:37:21:2d:54:40:23:8e:b4: 3e:7f:75:06:32:b0:33:44:4c:fe:1e:12:8e:96:26: b5:80:85:6f:2a:00:ac:fc:54:a1:e8:e3:57:66:0f: ad:88:88:64:32:da:74:88:ee:83:12:30:8f:42:de: 7b:1b:f8:f6:e4:d7:b2:b2:93:e9:96:aa:bb:13:31: 0a:2c:6a:42:32:98:61:2f:b9:fd:b4:41:dd:fb:67: e8:90:57:55:aa:02:74:22:22:ac:3a:2f:62:d6:ea: d1:48:ae:f0:ef:f5:28:ce:14:52:91:07:a6:56:da: 25:98:2a:22:cb:5d:a2:ef:d3:0e:b8:02:be:86:3e: 58:d9:0a:48:44:81:64:36:a6:0f:8e:80:c1:f5:bf: ab:74:4a:de:ca:2b:33:c1:11:1e:a8:40:1f:e2:70: a2:b0:46:93:b4:9d:47:59:93:ff:64:94:45:eb:1c: 8a:53:c6:96:f9:d6:64:28:0e:19:95:7e:c5:24:f0: 8d:79:42:b9:1d:91:7e:0e:13:9d:3d:6c:67:2a:08: 29:b4:33:4a:9b:2c:09:1e:8a:05:c5:a9:58:95:d3: 99:87:7e:c4:04:b8:e1:e7:64:d6:4f:b7:8c:60:ca: 6c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:81:6D:0C:1B:A8:DC:F1:4A:5B:37:D7:C6:D3:7D:C3:2D:D2:25:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/59042824-a974-3473-be58-532204e52132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d/60b944fb-40a6-4574-a25b-dd101d7b668d.crl X509v3 Authority Key Identifier: keyid:7D:A3:CC:7C:7B:D7:DD:68:2A:7F:4B:57:8D:7B:AC:45:0B:11:A0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/60b944fb-40a6-4574-a25b-dd101d7b668d.cer sbgp-ipAddrBlock: critical IPv4: 192.40.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:83:10:b8:aa:f4:23:02:b9:c5:c4:a6:a6:a9:59:d9:83:13: 7f:ac:3b:eb:a1:6d:85:dd:fa:68:02:3a:71:71:a3:bb:30:03: dc:34:ca:e9:60:80:55:23:f3:b2:1f:4a:b2:c1:a8:cf:5e:b4: a2:78:3d:d1:91:34:d9:60:55:f8:30:69:7e:f0:67:a1:73:cb: 38:6a:84:18:69:b7:c0:0f:a2:49:c3:e5:c3:66:73:c8:ca:75: 6f:4e:ed:d8:22:99:7f:da:b7:58:47:1f:4e:ce:33:d2:d8:a0: aa:2b:0a:f9:ad:30:c3:29:5e:ba:36:64:3a:c8:c9:06:90:5f: 87:71:a3:5f:19:c1:41:ce:05:1e:a3:72:b8:ca:f7:c6:5f:05: 53:90:5f:52:7b:a3:c8:66:35:05:61:c4:6f:05:18:48:c9:b3: b8:7d:82:5a:fc:a8:c1:f1:48:e8:aa:19:a1:b1:85:3e:39:5a: 67:a9:02:cf:0c:52:f9:5b:ba:12:41:b2:3d:c6:6b:cc:d8:fd: 42:91:93:0c:2a:66:73:8c:eb:8c:bb:75:f9:4e:47:ff:be:0d: 14:ac:a2:df:ce:89:3d:8e:b5:4b:77:78:80:dc:13:98:75:7c: dd:66:d1:8a:8d:d5:b1:ca:9f:91:7d:e8:59:33:cc:3c:9b:31: a6:af:d8:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmkqXO8LeNwqOmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBiOTQ0ZmItNDBhNi00NTc0LWEyNWItZGQxMDFkN2I2 NjhkMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDU5MWJjOGQtNGY0NC00MTU5LWI1NDgtNWMxZWMxMGYwNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76uYBIQK5/m53AW0Bok5MkzXLVFgNyEtVEAj jrQ+f3UGMrAzREz+HhKOlia1gIVvKgCs/FSh6ONXZg+tiIhkMtp0iO6DEjCPQt57 G/j25NeyspPplqq7EzEKLGpCMphhL7n9tEHd+2fokFdVqgJ0IiKsOi9i1urRSK7w 7/UozhRSkQemVtolmCoiy12i79MOuAK+hj5Y2QpIRIFkNqYPjoDB9b+rdEreyisz wREeqEAf4nCisEaTtJ1HWZP/ZJRF6xyKU8aW+dZkKA4ZlX7FJPCNeUK5HZF+DhOd PWxnKggptDNKmywJHooFxalYldOZh37EBLjh52TWT7eMYMps0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyBbQwbqNzxSls318bTfcMt0iWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5 NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEwMWQ3YjY2OGQvNTkwNDI4MjQtYTk3NC0z NDczLWJlNTgtNTMyMjA0ZTUyMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjBiOTQ0ZmItNDBhNi00NTc0LWEy NWItZGQxMDFkN2I2NjhkLzYwYjk0NGZiLTQwYTYtNDU3NC1hMjViLWRkMTAxZDdi NjY4ZC5jcmwwHwYDVR0jBBgwFoAUfaPMfHvX3Wgqf0tXjXusRQsRoPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82MGI5NDRmYi00MGE2LTQ1NzQtYTI1Yi1kZDEw MWQ3YjY2OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwCh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2DELiq9CMCucXEpqapWdmDE3+sO+uhbYXd+mgCOnFxo7swA9w0yulg gFUj87IfSrLBqM9etKJ4PdGRNNlgVfgwaX7wZ6FzyzhqhBhpt8APoknD5cNmc8jK dW9O7dgimX/at1hHH07OM9LYoKorCvmtMMMpXro2ZDrIyQaQX4dxo18ZwUHOBR6j crjK98ZfBVOQX1J7o8hmNQVhxG8FGEjJs7h9glr8qMHxSOiqGaGxhT45WmepAs8M UvlbuhJBsj3Ga8zY/UKRkwwqZnOM64y7dflOR/++DRSsot/OiT2OtUt3eIDcE5h1 fN1m0YqN1bHKn5F96FkzzDybMaav2Do= -----END CERTIFICATE-----Generated at Sat May 10 19:05:12 2025 by rpki-client