$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/042b1a3c-8aed-3ec0-8d85-ecf60b6a261f.roa File: 042b1a3c-8aed-3ec0-8d85-ecf60b6a261f.roa (raw, json) Hash identifier: 2tj2cK6NHesA76lqt3y8V4xAcxyK8FLaMYlHbOmDdDM= Subject key identifier: 83:E0:6F:FD:65:49:B9:E2:EC:C1:A5:00:ED:76:43:00:93:0C:05:C8 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20AF9A702B5D5B9CEE98140 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/042b1a3c-8aed-3ec0-8d85-ecf60b6a261f.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 96.40.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:f9:a7:02:b5:d5:b9:ce:e9:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=4c5b56d0-4eef-4c3d-a71b-75002ba9df70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:69:19:c1:44:e0:0a:6d:98:7c:b2:f7:48: 20:68:20:aa:26:2c:e3:c1:4e:b5:46:e6:de:dc:00: 06:d1:fa:02:f4:0a:b9:ae:72:9d:13:df:1f:ad:ee: 38:cf:06:ac:bc:0b:6b:66:fa:dc:7d:e0:2b:aa:61: 59:cb:71:b1:98:fb:ea:52:11:10:3c:18:45:bf:32: e0:a1:53:9e:d4:8f:f6:66:62:97:6f:ed:5f:e3:25: 22:8f:b0:fc:dd:fa:c4:af:14:7c:0d:ed:6d:46:88: cf:54:2a:b3:c1:cf:13:11:6b:33:61:b5:b4:3c:bb: 3d:8b:5b:c9:37:0f:b0:ee:36:00:53:7c:8d:a9:c7: 6f:00:1e:94:68:89:47:ca:a7:de:fb:80:57:7e:4a: 70:b7:8b:47:4a:91:6d:63:b6:92:56:87:97:75:fa: a6:91:7f:b1:33:a1:42:f8:d0:d1:32:f2:32:4e:4f: 98:1e:42:8d:8d:ec:9d:04:eb:13:fa:31:0a:9b:8f: cf:66:4c:79:ec:d0:d0:91:90:ed:eb:d1:86:5a:5e: f1:b8:84:5a:6e:30:de:fd:94:a6:fa:79:4f:cf:2d: f1:42:c2:81:56:2f:08:60:b7:34:90:bf:bb:94:07: 3f:bc:8e:85:31:c1:bc:f1:f3:fe:b9:7a:46:a8:37: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E0:6F:FD:65:49:B9:E2:EC:C1:A5:00:ED:76:43:00:93:0C:05:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/042b1a3c-8aed-3ec0-8d85-ecf60b6a261f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 96.40.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:39:b0:b1:29:6a:58:2b:1c:9c:f1:f5:38:3f:48:6c:4f:90: 71:d6:53:3a:2d:72:3e:88:52:cc:7f:cf:25:75:6d:82:b9:13: a0:a9:ee:13:e3:78:74:50:03:75:e2:90:69:f5:5a:e8:64:8b: 5b:f7:89:e4:1b:f4:63:21:82:0f:31:e4:a9:64:19:fb:df:c5: a8:6d:88:61:8e:86:cb:1b:f5:e6:f1:1c:34:74:f1:19:9f:4f: a6:18:e1:fe:87:60:b2:ef:5a:95:bc:09:16:c5:43:66:a3:4b: d9:59:f5:b9:f6:0e:79:58:a5:7b:70:65:de:a3:e1:90:ac:41: 2e:49:3b:c3:7a:10:44:37:92:c4:9c:6e:2c:8f:69:e7:5d:18: c3:2c:76:c9:d4:dd:12:ce:88:eb:66:0f:8e:7e:c0:8b:f4:25: 3f:f1:f0:99:d2:e9:df:35:4f:df:a6:05:60:07:62:ff:c0:33: fe:1b:e7:0d:c4:b6:7a:5c:22:d0:e0:48:b8:92:3e:33:f6:cb: 3f:86:c9:5e:d1:b0:e8:df:fe:26:40:55:e5:16:e4:1b:3c:ea: 02:44:83:24:9d:66:37:1d:e1:b4:05:24:9f:7c:d2:f2:4f:af: 62:be:bb:44:ae:eb:75:ee:97:6f:88:13:92:46:55:2f:e3:97: a6:ec:73:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCvmnArXVuc7pgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NGM1YjU2ZDAtNGVlZi00YzNkLWE3MWItNzUwMDJiYTlkZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCZpGcFE4AptmHyy90ggaCCqJizjwU61Rube 3AAG0foC9Aq5rnKdE98fre44zwasvAtrZvrcfeArqmFZy3GxmPvqUhEQPBhFvzLg oVOe1I/2ZmKXb+1f4yUij7D83frErxR8De1tRojPVCqzwc8TEWszYbW0PLs9i1vJ Nw+w7jYAU3yNqcdvAB6UaIlHyqfe+4BXfkpwt4tHSpFtY7aSVoeXdfqmkX+xM6FC +NDRMvIyTk+YHkKNjeydBOsT+jEKm4/PZkx57NDQkZDt69GGWl7xuIRabjDe/ZSm +nlPzy3xQsKBVi8IYLc0kL+7lAc/vI6FMcG88fP+uXpGqDdIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPgb/1lSbni7MGlAO12QwCTDAXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMDQyYjFhM2MtOGFlZC0z ZWMwLThkODUtZWNmNjBiNmEyNjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYCjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE05sLEpalgrHJzx9Tg/SGxPkHHWUzotcj6IUsx/zyV1bYK5E6Cp7hPj eHRQA3XikGn1Wuhki1v3ieQb9GMhgg8x5KlkGfvfxahtiGGOhssb9ebxHDR08Rmf T6YY4f6HYLLvWpW8CRbFQ2ajS9lZ9bn2DnlYpXtwZd6j4ZCsQS5JO8N6EEQ3ksSc biyPaeddGMMsdsnU3RLOiOtmD45+wIv0JT/x8JnS6d81T9+mBWAHYv/AM/4b5w3E tnpcItDgSLiSPjP2yz+GyV7RsOjf/iZAVeUW5Bs86gJEgySdZjcd4bQFJJ980vJP r2K+u0Su63Xul2+IE5JGVS/jl6bsc1c= -----END CERTIFICATE-----Generated at Fri May 9 11:58:00 2025 by rpki-client