$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4cd57b4c-35d8-335f-ad51-1b7b3987d018.roa File: 4cd57b4c-35d8-335f-ad51-1b7b3987d018.roa (raw, json) Hash identifier: 9frTPCD3XlgRYRGpDVdLi6swlRz/UwZ1q/Zew9BPUAk= Subject key identifier: 7B:9E:C9:45:D7:2D:95:34:44:D1:A6:CB:CC:5F:39:CD:84:47:C9:18 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20B0DD99BA2B68D38D96900 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4cd57b4c-35d8-335f-ad51-1b7b3987d018.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 66.169.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0b:0d:d9:9b:a2:b6:8d:38:d9:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=d2f9cfa0-4ac7-4b04-86b6-d6e79f84f486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9c:5d:08:f6:3b:0a:21:44:6a:f2:96:d9:91: 6f:e3:ab:09:ec:98:cc:9a:29:66:eb:7d:1c:03:8e: 12:8a:cd:c8:c1:ad:ff:6d:03:75:13:ad:49:0c:c8: c5:3b:7e:3c:23:9c:1c:1a:c9:04:16:b5:56:21:99: d9:9b:8e:e1:b6:db:93:92:d7:3c:71:e4:6c:01:45: 8e:20:2d:79:fa:43:b4:53:cb:24:78:ff:f0:10:8c: 51:6a:a8:47:a9:32:e9:31:a9:ec:b6:d1:9e:46:d1: b9:a1:01:76:66:1b:02:c9:db:9a:f8:c4:4b:3d:dd: a8:84:1c:a8:63:cd:4e:a5:61:3f:9f:29:2d:9c:e2: c4:7c:42:f9:09:7e:e3:42:88:fd:a1:44:9c:66:94: 24:dd:2f:1d:26:29:cc:d1:09:14:52:56:28:d1:c5: f7:37:b8:e3:da:ff:95:ec:f3:72:c2:a8:1c:5f:79: 51:75:0d:c4:de:f1:5d:6a:71:1c:45:3b:6d:d6:6f: 78:92:56:0d:9a:dd:7f:8f:b3:42:31:fb:99:eb:1f: 50:dd:31:98:0d:61:58:fc:78:ee:33:bd:2f:a5:90: 93:bc:eb:e7:08:b0:63:88:53:80:c2:dd:97:d8:e5: 5d:fd:29:c4:b2:ab:fa:57:57:08:8b:ea:d9:4c:dd: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9E:C9:45:D7:2D:95:34:44:D1:A6:CB:CC:5F:39:CD:84:47:C9:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4cd57b4c-35d8-335f-ad51-1b7b3987d018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.169.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ea:ef:a5:a4:20:8c:75:b7:92:45:e9:5e:66:4b:c9:4f:14: 0a:ec:69:10:3f:24:2a:29:25:3b:93:83:ed:e1:c2:c8:87:d2: 00:ec:64:76:81:ae:bc:5d:48:96:33:00:72:c9:6f:55:0c:b9: 36:0a:87:33:b5:78:b1:a6:98:80:44:85:f7:10:f2:5c:c2:28: 8a:0f:4b:c8:6b:50:49:b6:5d:d8:30:9e:31:36:90:f0:2e:21: 5f:c1:be:1c:e2:bc:e6:30:a8:17:15:75:db:f9:cc:71:84:fb: 87:bb:03:80:a7:42:61:16:78:60:33:e2:92:fd:72:7f:85:ea: 7e:84:35:47:96:77:f1:c3:3d:cb:b9:a3:cd:2a:0b:c1:f1:01: 42:94:4e:18:01:67:34:b3:fa:6e:6a:fd:c2:45:6d:9f:f6:08: eb:ef:92:53:e3:25:78:85:d0:ee:c2:56:20:5a:35:47:85:2f: f8:ce:a7:3d:8c:bc:13:ac:81:a4:36:46:23:3b:56:b7:55:a3: 43:01:a2:d2:97:df:d5:2d:bd:c5:1f:44:5a:cf:ec:e2:1d:bb: a3:fe:4a:df:5e:22:eb:e3:51:b8:39:d4:fd:1f:04:9d:19:6c: 7f:29:0b:aa:e4:a9:e7:d9:dd:e2:66:00:0b:75:14:c5:d5:b2: 56:fd:fd:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCw3Zm6K2jTjZaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZDJmOWNmYTAtNGFjNy00YjA0LTg2YjYtZDZlNzlmODRmNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJxdCPY7CiFEavKW2ZFv46sJ7JjMmilm630c A44Sis3Iwa3/bQN1E61JDMjFO348I5wcGskEFrVWIZnZm47httuTktc8ceRsAUWO IC15+kO0U8skeP/wEIxRaqhHqTLpMansttGeRtG5oQF2ZhsCydua+MRLPd2ohByo Y81OpWE/nyktnOLEfEL5CX7jQoj9oUScZpQk3S8dJinM0QkUUlYo0cX3N7jj2v+V 7PNywqgcX3lRdQ3E3vFdanEcRTtt1m94klYNmt1/j7NCMfuZ6x9Q3TGYDWFY/Hju M70vpZCTvOvnCLBjiFOAwt2X2OVd/SnEsqv6V1cIi+rZTN3Q8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHueyUXXLZU0RNGmy8xfOc2ER8kYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNGNkNTdiNGMtMzVkOC0z MzVmLWFkNTEtMWI3YjM5ODdkMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQqnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvq76WkIIx1t5JF6V5mS8lPFArsaRA/JCopJTuTg+3hwsiH0gDsZHaB rrxdSJYzAHLJb1UMuTYKhzO1eLGmmIBEhfcQ8lzCKIoPS8hrUEm2XdgwnjE2kPAu IV/BvhzivOYwqBcVddv5zHGE+4e7A4CnQmEWeGAz4pL9cn+F6n6ENUeWd/HDPcu5 o80qC8HxAUKUThgBZzSz+m5q/cJFbZ/2COvvklPjJXiF0O7CViBaNUeFL/jOpz2M vBOsgaQ2RiM7VrdVo0MBotKX39UtvcUfRFrP7OIdu6P+St9eIuvjUbg51P0fBJ0Z bH8pC6rkqefZ3eJmAAt1FMXVslb9/cE= -----END CERTIFICATE-----Generated at Fri May 9 17:35:48 2025 by rpki-client