$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/210055bb-566f-3bf6-9266-c17c51284e6c.roa File: 210055bb-566f-3bf6-9266-c17c51284e6c.roa (raw, json) Hash identifier: pxoz8NdweNFK+8lMio8P3o24kJuJ0o2kuM/DRt8UGXo= Subject key identifier: 58:35:EC:8A:A3:AA:3A:B0:47:40:0A:90:99:D0:38:42:4C:37:64:3B Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20AA87769923F0C7D047DC0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/210055bb-566f-3bf6-9266-c17c51284e6c.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 47.231.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:a8:77:69:92:3f:0c:7d:04:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=04bf560c-abb6-4f2e-9046-90ad635c020f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:6c:36:f8:46:aa:81:09:55:b6:47:96:62: a0:07:c8:e7:89:be:cb:86:79:83:35:64:6d:0a:c0: 20:c7:49:de:a9:fb:fe:d8:b6:a2:93:4e:c0:06:0a: 98:1e:79:a1:de:8f:f3:b4:89:01:52:0c:92:b6:6a: c8:0c:19:c7:d2:bb:12:92:0d:0d:85:db:9d:19:8d: a1:8c:bd:95:eb:fb:9b:ef:21:de:d4:54:61:85:32: 14:ac:69:2d:c8:e7:f9:f7:77:05:d2:ba:5d:1e:71: 9d:69:13:b4:62:bc:24:de:cd:60:b5:0c:34:2c:ab: c4:82:e3:9f:75:f1:b1:79:83:5f:e0:8a:5f:7c:01: 06:81:00:57:fd:12:ac:93:90:8c:2e:75:7c:24:a0: 47:f4:5b:6f:0b:61:db:c7:d6:a7:0c:8a:ee:65:2d: 90:2d:f1:80:e3:ed:a5:05:60:b3:e8:d1:77:f1:be: eb:7b:26:da:70:f3:ba:05:5a:f8:3e:c0:78:22:fc: a0:bc:a7:1c:2d:77:45:11:c7:7f:f9:ce:bc:61:e2: 8c:af:17:6a:85:99:78:e8:53:f1:c4:c7:1f:a9:27: 02:e9:f7:24:ef:bd:5e:cb:58:f6:d6:2a:8e:b9:df: 70:ae:ca:f6:ed:b4:eb:68:02:dc:1a:f5:74:e2:fc: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:35:EC:8A:A3:AA:3A:B0:47:40:0A:90:99:D0:38:42:4C:37:64:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/210055bb-566f-3bf6-9266-c17c51284e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.231.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:32:c8:2c:4d:e8:e8:a8:98:3d:45:09:e6:86:7e:29:0d:6b: f3:5a:39:03:9a:27:e2:c1:b4:da:4e:dc:2e:fd:c7:60:a7:51: 27:4b:11:1d:3a:cc:1a:e1:92:32:4f:90:c7:53:dd:df:0d:f9: 4c:64:17:ec:ba:cc:c1:9e:a3:58:9a:68:db:93:2d:0b:32:fe: 63:90:c4:0b:15:2c:26:ee:03:eb:06:a7:cd:e1:04:08:1c:32: 4d:82:03:cf:80:b5:f0:29:7f:4c:3d:d5:18:d8:48:7b:83:87: 41:61:6c:89:11:f2:22:25:a2:3d:cd:27:52:6a:6d:31:69:f8: 27:b6:35:62:38:7f:c8:68:aa:b7:74:6d:06:26:21:cb:36:b5: 70:a7:5b:cd:c7:77:09:9e:8a:17:e2:cd:2d:72:b9:5f:0b:12: e1:e5:f4:b7:c1:0e:bc:d3:26:7c:c2:e3:6e:e9:73:b7:60:63: 5e:71:15:2e:1e:32:d7:0f:17:9b:b9:27:39:3c:7e:51:7a:5a: 48:a1:e2:8e:88:85:0a:97:d8:f7:03:8a:26:63:c6:33:9a:6e: 44:95:aa:ca:b4:31:3a:ce:a6:43:c3:df:07:eb:de:e1:9b:2b: c1:d8:4f:f4:f0:99:cb:36:25:20:39:43:2f:d3:03:7e:29:57: 3e:8d:67:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCqh3aZI/DH0EfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MDRiZjU2MGMtYWJiNi00ZjJlLTkwNDYtOTBhZDYzNWMwMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HdsNvhGqoEJVbZHlmKgB8jnib7LhnmDNWRt CsAgx0neqfv+2Laik07ABgqYHnmh3o/ztIkBUgyStmrIDBnH0rsSkg0NhdudGY2h jL2V6/ub7yHe1FRhhTIUrGktyOf593cF0rpdHnGdaRO0Yrwk3s1gtQw0LKvEguOf dfGxeYNf4IpffAEGgQBX/RKsk5CMLnV8JKBH9FtvC2Hbx9anDIruZS2QLfGA4+2l BWCz6NF38b7reybacPO6BVr4PsB4IvygvKccLXdFEcd/+c68YeKMrxdqhZl46FPx xMcfqScC6fck771ey1j21iqOud9wrsr27bTraALcGvV04vyTYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg17IqjqjqwR0AKkJnQOEJMN2Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjEwMDU1YmItNTY2Zi0z YmY2LTkyNjYtYzE3YzUxMjg0ZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDL+fIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAyyCxN6OiomD1FCeaGfikNa/NaOQOaJ+LBtNpO3C79x2CnUSdLER06 zBrhkjJPkMdT3d8N+UxkF+y6zMGeo1iaaNuTLQsy/mOQxAsVLCbuA+sGp83hBAgc Mk2CA8+AtfApf0w91RjYSHuDh0FhbIkR8iIloj3NJ1JqbTFp+Ce2NWI4f8hoqrd0 bQYmIcs2tXCnW83HdwmeihfizS1yuV8LEuHl9LfBDrzTJnzC427pc7dgY15xFS4e MtcPF5u5Jzk8flF6Wkih4o6IhQqX2PcDiiZjxjOabkSVqsq0MTrOpkPD3wfr3uGb K8HYT/Twmcs2JSA5Qy/TA34pVz6NZ9U= -----END CERTIFICATE-----Generated at Fri May 9 13:05:16 2025 by rpki-client