$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/28ce63a9-38cc-3b45-90d9-d3ca464a1448.roa File: 28ce63a9-38cc-3b45-90d9-d3ca464a1448.roa (raw, json) Hash identifier: Qr3wY8bZZr9+ACVnd2jF02vTvMvJgZJjaNttPoO47Ng= Subject key identifier: DA:C8:8A:6D:59:42:BC:62:A4:57:B6:89:DA:D4:51:D9:CA:92:4D:F6 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A84947136A39C331CC400 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/28ce63a9-38cc-3b45-90d9-d3ca464a1448.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 128.92.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:84:94:71:36:a3:9c:33:1c:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=c25cb316-5a6a-40c5-b700-7f525d7cf509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:49:78:d5:62:8b:e6:ed:0a:7d:8d:57:b5: fe:41:08:bf:2e:ef:c9:f3:e0:1d:79:0a:74:08:23: 0d:96:e4:fb:05:87:04:4f:df:98:04:03:ba:c1:9a: 25:3b:73:d1:85:86:c1:dc:86:f1:61:81:e3:21:8f: 9b:fa:04:e1:82:11:82:31:57:47:34:4a:36:a6:ae: e9:6d:bd:bc:55:6c:d2:ab:42:c8:c2:08:69:6b:44: b3:31:b0:aa:c6:9b:62:39:77:a6:e0:20:51:d7:cf: 29:2d:5f:56:30:45:76:c2:18:ae:83:1a:df:dd:b7: 3b:9c:17:46:63:8b:7b:32:d9:8f:74:1e:b8:e9:a1: 91:86:21:17:5e:6b:f9:11:6e:70:38:44:a6:ae:73: 48:33:1f:2d:b7:a7:c8:1e:ad:19:5e:07:a0:03:66: ad:e0:c9:7d:13:be:12:e1:44:05:52:00:34:e5:91: 11:78:1d:37:98:dd:45:13:79:83:1f:7a:c3:88:c9: 51:de:7e:c1:a1:d1:96:c3:33:9d:8d:8f:ce:3a:53: 67:63:9a:b2:19:1e:83:b6:59:72:07:ca:b7:08:9f: 6c:6b:d9:b8:6a:51:78:8c:f8:63:71:b2:b0:b1:da: 28:93:22:c6:0a:02:a2:db:f8:40:18:33:2e:5b:01: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C8:8A:6D:59:42:BC:62:A4:57:B6:89:DA:D4:51:D9:CA:92:4D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/28ce63a9-38cc-3b45-90d9-d3ca464a1448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 128.92.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:47:50:a6:8c:10:a5:f1:91:b6:90:b7:84:01:0d:a6:b3:42: 8e:e6:71:8c:0a:d2:bd:18:70:b7:bb:e5:e4:66:ec:41:8e:40: c4:a8:02:50:40:d0:a7:f6:ca:24:9f:a3:8e:d4:50:d6:ce:37: c0:18:29:76:a7:3f:a9:a7:5c:6c:58:5f:75:a5:b3:3a:fe:ba: fe:c5:fb:a1:dd:83:20:98:2e:8b:e0:68:99:aa:dc:c1:ac:74: 71:68:4a:87:4f:4b:4b:cb:2f:86:0d:8e:e7:50:c0:02:e1:db: b7:6f:94:c5:d1:8c:b0:b5:de:3b:45:1b:50:40:c0:58:e2:fc: bc:b7:66:80:16:ff:63:1b:09:c9:2c:c4:75:06:27:8b:1b:4a: 79:54:3e:dc:e1:75:cd:d8:f1:05:7c:0b:86:a9:31:88:32:c2: 49:33:9d:12:8d:9c:3e:a7:3f:de:c4:fb:76:51:4d:28:72:65: 37:79:ee:cf:06:96:2c:3f:6f:d5:65:e4:e9:fe:36:ab:34:33: 40:92:fe:f2:ed:c4:84:57:80:6d:54:71:d1:9d:bf:73:5e:b8: 46:e2:22:31:5e:76:82:09:e0:95:24:26:df:ce:64:ef:61:fb: fc:d7:cf:d1:fa:96:02:72:d3:50:12:8b:b1:aa:de:3f:03:f8: bc:52:ca:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCoSUcTajnDMcxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YzI1Y2IzMTYtNWE2YS00MGM1LWI3MDAtN2Y1MjVkN2NmNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy71JeNVii+btCn2NV7X+QQi/Lu/J8+AdeQp0 CCMNluT7BYcET9+YBAO6wZolO3PRhYbB3IbxYYHjIY+b+gThghGCMVdHNEo2pq7p bb28VWzSq0LIwghpa0SzMbCqxptiOXem4CBR188pLV9WMEV2whiugxrf3bc7nBdG Y4t7MtmPdB646aGRhiEXXmv5EW5wOESmrnNIMx8tt6fIHq0ZXgegA2at4Ml9E74S 4UQFUgA05ZEReB03mN1FE3mDH3rDiMlR3n7BodGWwzOdjY/OOlNnY5qyGR6Dtlly B8q3CJ9sa9m4alF4jPhjcbKwsdookyLGCgKi2/hAGDMuWwH9zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrIim1ZQrxipFe2idrUUdnKkk32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjhjZTYzYTktMzhjYy0z YjQ1LTkwZDktZDNjYTQ2NGExNDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgFzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRHUKaMEKXxkbaQt4QBDaazQo7mcYwK0r0YcLe75eRm7EGOQMSoAlBA 0Kf2yiSfo47UUNbON8AYKXanP6mnXGxYX3Wlszr+uv7F+6HdgyCYLovgaJmq3MGs dHFoSodPS0vLL4YNjudQwALh27dvlMXRjLC13jtFG1BAwFji/Ly3ZoAW/2MbCcks xHUGJ4sbSnlUPtzhdc3Y8QV8C4apMYgywkkznRKNnD6nP97E+3ZRTShyZTd57s8G liw/b9Vl5On+Nqs0M0CS/vLtxIRXgG1UcdGdv3NeuEbiIjFedoIJ4JUkJt/OZO9h +/zXz9H6lgJy01ASi7Gq3j8D+LxSylQ= -----END CERTIFICATE-----Generated at Sat May 10 06:35:48 2025 by rpki-client