$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20961405-4dea-3f00-ae43-5ad81837a9e0.roa File: 20961405-4dea-3f00-ae43-5ad81837a9e0.roa (raw, json) Hash identifier: sNjYjVmSJSeL/5tvObC/C3YQSQdPaPlgyPP2mYkenEU= Subject key identifier: 88:FE:90:1F:6D:D2:D6:B7:3B:8B:F2:CF:2B:FB:A0:B0:48:0E:90:08 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A9180D7EE0DE672F68C10 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20961405-4dea-3f00-ae43-5ad81837a9e0.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 71.11.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:91:80:d7:ee:0d:e6:72:f6:8c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=bfa6a43e-4b2f-41d1-963f-4dc0d0ba6bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:f7:fe:8b:5e:4e:9e:71:d0:d2:d4:9f:86: e0:d6:f4:cb:91:87:60:df:30:88:b0:df:25:5a:e3: 47:44:83:45:a9:86:8c:1c:dd:7a:ed:86:38:80:72: b6:87:83:45:96:52:65:0b:4e:0e:4a:70:e0:48:21: b2:02:18:4d:df:32:3e:fb:33:18:85:80:53:be:d9: cf:3f:b8:99:e5:18:4e:62:4a:1c:ca:d0:9e:06:87: b4:3d:8f:a6:7e:1c:44:99:9b:5a:68:10:e0:02:50: d3:68:9e:0c:d7:14:b0:44:2f:46:63:2f:d8:6f:c9: 39:60:15:17:b9:26:b3:ea:4d:36:1c:98:75:c5:f6: 9e:72:fd:f9:86:ab:d9:ad:d1:b3:28:40:6b:0e:14: 83:de:07:b0:ec:fd:2a:3a:7c:96:a0:10:18:97:8f: 24:92:6a:9c:3a:34:5e:23:04:70:58:ca:13:cc:d4: b5:5b:4d:e6:5c:cc:26:16:3f:66:8c:d0:5c:de:da: 3e:13:8b:d6:98:82:b2:2c:f8:75:76:aa:43:11:bb: 7a:6f:c3:17:5c:ea:27:d1:13:c5:97:49:09:8f:e3: 1e:61:3a:80:29:df:3e:39:43:fa:4e:2c:d1:a0:d1: b8:d2:28:82:6a:62:3d:91:cf:c2:a5:e3:15:44:6e: f7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FE:90:1F:6D:D2:D6:B7:3B:8B:F2:CF:2B:FB:A0:B0:48:0E:90:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/20961405-4dea-3f00-ae43-5ad81837a9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.11.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:0d:92:bc:a9:66:2e:4b:80:d7:df:96:e5:42:01:1e:3c:72: 2a:60:6b:ed:a4:f9:2a:38:06:f1:c0:e6:42:1f:88:08:31:16: 4f:a6:3e:e4:c4:d7:3d:15:5d:0f:7f:67:b9:ee:fb:df:74:46: 45:57:88:91:9a:5a:cb:7a:4a:05:3d:15:e0:12:15:6a:f0:26: bc:8e:fd:83:0c:4d:11:ce:c7:d8:4f:50:3a:2c:f2:f9:82:a5: 68:72:a7:16:75:ac:c9:1c:7e:16:27:e6:34:e7:cc:3a:ad:41: 7d:54:cb:cb:93:f5:d1:e0:96:c5:63:09:0a:48:3a:67:44:7b: 0a:d0:f9:47:8c:92:e1:45:b6:29:19:fb:2d:be:f4:06:e1:bd: 1e:57:0c:40:c8:f1:bf:dd:bd:1b:72:ad:1c:b7:5f:08:1e:10: 28:77:29:59:94:0c:20:28:05:72:02:3b:ee:74:e5:2a:fb:3a: 44:ab:b1:a2:22:98:3f:a1:53:f1:7c:e2:3b:be:03:62:fa:93: cb:c0:55:da:8a:f0:cc:63:a1:95:2a:02:69:b6:4b:47:6a:95: 3e:af:7a:c2:4a:3e:c0:dc:7a:de:4b:58:a5:e2:26:65:ba:c5: 15:6d:cc:72:a1:14:a1:b5:c3:a7:33:b2:d4:2a:76:5f:9a:d1: ec:2c:fd:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCpGA1+4N5nL2jBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YmZhNmE0M2UtNGIyZi00MWQxLTk2M2YtNGRjMGQwYmE2YmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC33/oteTp5x0NLUn4bg1vTLkYdg3zCIsN8l WuNHRINFqYaMHN167YY4gHK2h4NFllJlC04OSnDgSCGyAhhN3zI++zMYhYBTvtnP P7iZ5RhOYkocytCeBoe0PY+mfhxEmZtaaBDgAlDTaJ4M1xSwRC9GYy/Yb8k5YBUX uSaz6k02HJh1xfaecv35hqvZrdGzKEBrDhSD3gew7P0qOnyWoBAYl48kkmqcOjRe IwRwWMoTzNS1W03mXMwmFj9mjNBc3to+E4vWmIKyLPh1dqpDEbt6b8MXXOon0RPF l0kJj+MeYTqAKd8+OUP6TizRoNG40iiCamI9kc/CpeMVRG73rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj+kB9t0ta3O4vyzyv7oLBIDpAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjA5NjE0MDUtNGRlYS0z ZjAwLWFlNDMtNWFkODE4MzdhOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRwvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANkNkrypZi5LgNffluVCAR48cipga+2k+So4BvHA5kIfiAgxFk+mPuTE 1z0VXQ9/Z7nu+990RkVXiJGaWst6SgU9FeASFWrwJryO/YMMTRHOx9hPUDos8vmC pWhypxZ1rMkcfhYn5jTnzDqtQX1Uy8uT9dHglsVjCQpIOmdEewrQ+UeMkuFFtikZ +y2+9AbhvR5XDEDI8b/dvRtyrRy3XwgeECh3KVmUDCAoBXICO+505Sr7OkSrsaIi mD+hU/F84ju+A2L6k8vAVdqK8MxjoZUqAmm2S0dqlT6vesJKPsDcet5LWKXiJmW6 xRVtzHKhFKG1w6czstQqdl+a0ews/aE= -----END CERTIFICATE-----Generated at Fri May 9 18:48:41 2025 by rpki-client