$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35129c0a-c67b-3629-a437-9bdd546d811b.roa File: 35129c0a-c67b-3629-a437-9bdd546d811b.roa (raw, json) Hash identifier: S/rHwd3Na5whH+2v23aWSkWevQ3CJ6bhEcYHIu8rRGc= Subject key identifier: FF:F5:F7:D4:E9:BE:48:8B:D3:C7:E9:14:8D:61:09:93:95:E7:70:BF Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A79FF8C3203138299A800 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35129c0a-c67b-3629-a437-9bdd546d811b.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 71.87.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:79:ff:8c:32:03:13:82:99:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=987cc7a7-b7ed-4db6-9e5e-ddf3c0510d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:ac:29:98:0f:5f:bf:78:26:7c:1c:8f:30: 39:ca:bb:2e:17:eb:49:fc:16:b2:da:77:0d:cf:62: f3:9a:b1:08:a5:81:90:6a:76:39:ed:34:cb:37:5c: dc:2b:f0:4c:76:9b:cb:36:14:25:b3:9e:9c:0a:ae: 5f:af:a5:28:a9:e7:72:71:4d:d1:12:25:18:5c:94: 7c:34:5a:9e:41:9c:04:09:98:e4:99:fb:36:d0:49: 53:b0:55:87:87:f0:83:42:ae:b7:3c:f1:6e:55:4c: 5f:52:a3:73:bc:97:9f:11:ec:b7:5c:ea:0f:78:2a: 83:9c:2d:75:e5:97:d9:c6:6d:ff:ec:a8:bb:df:96: d2:b3:08:0c:7a:07:8a:a8:d9:e1:8e:a2:3a:de:31: 85:a1:ed:c2:ea:25:6b:51:1f:42:9e:74:b5:72:4d: 69:0a:b6:00:a3:fb:4f:da:44:f9:29:64:63:7f:b9: 45:5b:f8:e4:c4:db:84:35:01:9a:af:40:c7:0a:04: 0d:16:ae:47:8e:6b:d5:c3:b8:5a:d0:1a:4f:dd:52: 09:78:90:c9:25:d6:87:60:69:43:a9:22:fc:70:dc: ba:44:47:1e:20:56:dc:43:ce:a6:7e:11:2a:66:75: 3d:21:fa:2e:c5:0b:d8:d7:d0:e8:68:27:9c:fa:1a: d9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F5:F7:D4:E9:BE:48:8B:D3:C7:E9:14:8D:61:09:93:95:E7:70:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35129c0a-c67b-3629-a437-9bdd546d811b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.87.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:be:ae:b6:aa:bd:1b:3b:89:a2:2c:06:bf:d5:f1:23:7a:d4: 27:5e:46:50:5f:e5:f4:a8:d8:f0:86:9d:bb:1e:4a:c0:0e:64: a8:66:b1:66:81:ba:89:e4:af:32:78:2f:14:fb:1b:9e:5f:e6: 8e:34:fd:4f:59:d6:c4:f0:c5:93:56:f8:da:00:69:c8:ce:6e: f1:0b:e0:4b:eb:56:fc:33:ea:b9:72:de:ef:e7:32:3d:46:13: 8f:6f:49:df:a3:16:8c:5a:f9:7e:f6:53:99:d6:40:01:d6:57: 35:1b:e7:64:07:ba:14:05:05:33:e7:10:58:77:ee:0a:43:25: 3c:6f:46:63:02:5b:be:68:01:56:df:29:df:0a:ed:e1:6b:21: cd:5c:84:26:e7:ae:6e:68:fe:c6:4b:0d:92:5f:51:63:c4:32: 47:0e:9e:97:3c:75:fa:ee:ae:7e:ba:af:5a:ae:e7:83:b1:12: a5:55:c8:b3:50:84:8b:ff:37:87:24:01:2f:93:e3:35:7b:7f: 75:2b:fd:2d:5e:5c:ca:76:29:a5:e7:4e:55:78:83:6b:81:94: dd:62:be:70:2e:fe:ef:c2:22:48:09:4e:01:12:8b:28:0c:02: 69:21:f8:bc:ae:0c:ca:86:5b:49:57:b4:82:04:71:7f:89:8e: f1:19:d3:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCnn/jDIDE4KZqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk OTg3Y2M3YTctYjdlZC00ZGI2LTllNWUtZGRmM2MwNTEwZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6usKZgPX794JnwcjzA5yrsuF+tJ/Bay2ncN z2LzmrEIpYGQanY57TTLN1zcK/BMdpvLNhQls56cCq5fr6UoqedycU3REiUYXJR8 NFqeQZwECZjkmfs20ElTsFWHh/CDQq63PPFuVUxfUqNzvJefEey3XOoPeCqDnC11 5ZfZxm3/7Ki735bSswgMegeKqNnhjqI63jGFoe3C6iVrUR9CnnS1ck1pCrYAo/tP 2kT5KWRjf7lFW/jkxNuENQGar0DHCgQNFq5HjmvVw7ha0BpP3VIJeJDJJdaHYGlD qSL8cNy6REceIFbcQ86mfhEqZnU9IfouxQvY19DoaCec+hrZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/199TpvkiL08fpFI1hCZOV53C/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzUxMjljMGEtYzY3Yi0z NjI5LWE0MzctOWJkZDU0NmQ4MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER1dgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMu+rraqvRs7iaIsBr/V8SN61CdeRlBf5fSo2PCGnbseSsAOZKhmsWaB uonkrzJ4LxT7G55f5o40/U9Z1sTwxZNW+NoAacjObvEL4EvrVvwz6rly3u/nMj1G E49vSd+jFoxa+X72U5nWQAHWVzUb52QHuhQFBTPnEFh37gpDJTxvRmMCW75oAVbf Kd8K7eFrIc1chCbnrm5o/sZLDZJfUWPEMkcOnpc8dfrurn66r1qu54OxEqVVyLNQ hIv/N4ckAS+T4zV7f3Ur/S1eXMp2KaXnTlV4g2uBlN1ivnAu/u/CIkgJTgESiygM Amkh+LyuDMqGW0lXtIIEcX+JjvEZ0/o= -----END CERTIFICATE-----Generated at Sat May 10 13:33:12 2025 by rpki-client