$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38a505c0-0eb0-3cbb-bc92-98f004332e3a.roa File: 38a505c0-0eb0-3cbb-bc92-98f004332e3a.roa (raw, json) Hash identifier: f/MGc4saUa56PvOl7Mw3PSoVZMCg2sIdjv9rmvco+Bs= Subject key identifier: 4C:72:8E:87:BF:19:5F:83:89:93:13:2F:83:D2:81:C9:54:9F:F1:9C Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20B1EA2CC61D5BB1405D530 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38a505c0-0eb0-3cbb-bc92-98f004332e3a.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 97.87.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0b:1e:a2:cc:61:d5:bb:14:05:d5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=44ebe807-f7fb-44fb-9e7a-25c65245c444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:39:77:07:c3:f8:d7:1f:d7:65:88:5f:a1:7b: 0e:cf:99:bd:31:18:85:57:d2:3e:3a:28:cd:a5:3c: 06:22:6b:96:c3:df:2c:a7:54:68:40:0d:8b:a0:f1: c9:65:57:12:54:9b:f8:a1:59:9e:b8:d7:d5:59:94: c3:1f:c2:4f:e2:11:7e:c2:13:28:60:64:36:4b:01: 46:d8:7f:0a:f5:1e:88:39:5b:2c:3a:c4:50:4c:ca: 44:f4:81:9c:17:6c:88:0e:0e:7d:1e:02:de:a9:34: a6:5c:f5:69:5b:10:99:40:b5:4a:b9:b5:71:14:1a: 09:bb:38:89:3c:0e:8b:73:28:96:c8:66:2b:b4:81: 6d:9f:bc:45:f5:f1:bd:2d:7c:19:9d:47:63:1e:bd: 48:8f:c1:0b:b4:f8:31:f9:57:d3:52:29:01:6b:90: 48:c6:73:d2:5f:0c:01:cb:fb:61:6c:f6:b2:c8:90: 29:4c:c7:8d:59:cc:9f:65:b5:74:a4:e6:c5:6d:58: ba:de:8e:1b:3a:c0:cd:ac:28:dc:23:1c:1f:1b:a9: 09:2a:d7:35:57:8d:03:d9:a8:c4:6a:ef:07:8f:af: 9a:0b:bd:48:3a:04:d3:03:3c:43:81:7e:2f:36:4e: b8:02:d0:61:21:16:56:92:9d:5e:a0:71:d2:f1:c2: b7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:72:8E:87:BF:19:5F:83:89:93:13:2F:83:D2:81:C9:54:9F:F1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/38a505c0-0eb0-3cbb-bc92-98f004332e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 97.87.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:42:79:5f:26:c1:b3:59:f5:26:3e:a3:c5:21:9b:ba:6d:b5: 53:4c:f4:26:1a:ce:19:54:68:27:49:ba:bd:51:1d:99:f2:12: 31:3b:f9:b5:95:7d:8b:6d:d0:39:2d:92:7a:f4:d5:a9:39:6d: 14:59:81:fa:b5:05:04:1b:42:c3:b6:c8:d6:6c:de:53:60:b1: 39:31:9a:e0:c1:75:4a:2d:be:a6:34:12:2c:26:73:41:76:a7: 9a:38:f8:36:c3:14:a1:ee:65:7c:03:d8:2f:e5:48:3b:4f:75: 82:f7:71:31:1d:87:b0:94:77:8c:df:30:77:66:33:f7:a7:af: 11:d0:10:a0:23:9a:22:87:43:50:f5:61:92:80:ef:af:5b:4c: 12:13:de:63:23:3b:c4:c9:e5:12:66:96:03:0f:da:c8:26:24: 2b:1c:2c:9e:a7:ef:72:78:ae:eb:ee:eb:15:37:46:97:4b:f9: 63:25:ee:59:5e:d8:6c:c6:1d:2b:55:33:15:63:4c:8a:e6:ad: 61:cf:f6:33:08:9a:0d:96:6c:46:f7:77:80:d1:ac:5d:0c:ec: 6e:af:e7:ea:1d:8a:b5:a4:99:cf:72:4e:db:40:e6:02:50:84: 68:50:79:dc:c5:3c:b0:4b:40:5b:6f:77:7f:3e:63:83:70:be: 09:b2:bd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCx6izGHVuxQF1TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NDRlYmU4MDctZjdmYi00NGZiLTllN2EtMjVjNjUyNDVjNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzl3B8P41x/XZYhfoXsOz5m9MRiFV9I+OijN pTwGImuWw98sp1RoQA2LoPHJZVcSVJv4oVmeuNfVWZTDH8JP4hF+whMoYGQ2SwFG 2H8K9R6IOVssOsRQTMpE9IGcF2yIDg59HgLeqTSmXPVpWxCZQLVKubVxFBoJuziJ PA6LcyiWyGYrtIFtn7xF9fG9LXwZnUdjHr1Ij8ELtPgx+VfTUikBa5BIxnPSXwwB y/thbPayyJApTMeNWcyfZbV0pObFbVi63o4bOsDNrCjcIxwfG6kJKtc1V40D2ajE au8Hj6+aC71IOgTTAzxDgX4vNk64AtBhIRZWkp1eoHHS8cK3rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExyjoe/GV+DiZMTL4PSgclUn/GcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzhhNTA1YzAtMGViMC0z Y2JiLWJjOTItOThmMDA0MzMyZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYVfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdCeV8mwbNZ9SY+o8Uhm7pttVNM9CYazhlUaCdJur1RHZnyEjE7+bWV fYtt0Dktknr01ak5bRRZgfq1BQQbQsO2yNZs3lNgsTkxmuDBdUotvqY0Eiwmc0F2 p5o4+DbDFKHuZXwD2C/lSDtPdYL3cTEdh7CUd4zfMHdmM/enrxHQEKAjmiKHQ1D1 YZKA769bTBIT3mMjO8TJ5RJmlgMP2sgmJCscLJ6n73J4ruvu6xU3RpdL+WMl7lle 2GzGHStVMxVjTIrmrWHP9jMImg2WbEb3d4DRrF0M7G6v5+odirWkmc9yTttA5gJQ hGhQedzFPLBLQFtvd38+Y4NwvgmyveA= -----END CERTIFICATE-----Generated at Fri May 9 17:34:56 2025 by rpki-client