$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/878ee787-0669-3692-ab00-d2153abeaaf5.roa File: 878ee787-0669-3692-ab00-d2153abeaaf5.roa (raw, json) Hash identifier: lHu68eUccunaLG2Vo1AZzkcbSV5NW5jA3x+6Blw1/n0= Subject key identifier: EC:FD:C9:1B:98:8C:46:7D:AF:14:29:EB:88:48:76:FF:27:BE:29:10 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A723B179E44A2CDF79E10 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/878ee787-0669-3692-ab00-d2153abeaaf5.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 24.171.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:72:3b:17:9e:44:a2:cd:f7:9e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=64d392c8-882d-4ed2-804b-6fd6b2c8b6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:05:6b:94:66:6a:25:d5:5c:c6:5a:dc:ad: 8c:6e:03:df:4a:87:1a:04:2f:e5:1d:a3:18:db:fc: fa:1b:8a:e8:6c:94:3b:7c:89:b1:dd:ad:20:65:b6: 87:ec:5e:d5:fb:41:90:66:a2:f9:95:1b:67:28:08: 4d:81:13:a1:42:7b:a2:9d:77:c0:4e:39:df:27:e5: 31:d7:57:ca:aa:50:10:a5:2e:c6:5c:42:0f:31:5a: 7b:a4:30:29:fa:52:4a:24:5e:c6:70:21:6d:83:3b: a9:60:d9:cb:72:02:40:bc:68:67:45:f6:e6:66:3f: 2c:6f:24:9c:d8:46:7b:ea:23:93:2a:7f:de:ec:36: d1:33:df:17:4b:37:66:82:7d:27:d0:de:77:76:99: b0:03:c2:3c:9c:c4:28:ee:f6:95:ea:b8:9d:31:b7: ba:dc:fd:36:4e:62:af:77:20:be:c9:a6:54:f6:d8: 36:ee:1b:00:42:53:b9:7b:03:47:0a:72:37:cd:a8: 1e:da:e4:5f:84:97:47:12:29:0b:66:3d:c0:8f:08: 70:fb:b2:01:75:9b:5f:9d:a9:d1:a2:ae:4f:91:56: bc:2d:e0:95:6a:d1:0b:05:a5:10:cb:75:14:74:48: bb:a9:c2:d2:61:15:0b:dd:90:87:d1:18:8d:15:05: 41:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FD:C9:1B:98:8C:46:7D:AF:14:29:EB:88:48:76:FF:27:BE:29:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/878ee787-0669-3692-ab00-d2153abeaaf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.171.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ce:25:63:22:cd:ae:72:ae:42:55:0a:68:1f:55:1f:33:b6: d0:bc:a5:d0:ba:dc:44:24:38:c4:e9:bc:a4:e9:da:d0:39:d9: 0e:a9:72:1a:c8:68:ab:21:69:5d:5a:71:5b:00:93:e4:99:75: 1f:23:98:68:52:d1:c3:c2:7d:dc:6a:c2:9f:e4:3b:29:95:db: 75:1b:8c:38:a2:49:df:89:7d:96:e4:46:a0:7e:cb:b2:28:fe: 57:83:ce:03:65:ff:79:16:f5:4a:29:67:42:75:1b:6b:37:84: 7b:80:61:50:fc:37:e0:1c:a2:d3:4d:a6:50:be:68:f5:de:b9: 16:61:04:9e:99:cf:d4:53:a4:58:a6:c6:6e:73:55:6a:1a:6e: 6e:89:ef:40:17:31:62:22:db:1b:c0:3c:ea:f5:69:a0:ca:27: 76:12:7e:91:9a:a3:7e:d9:95:4f:8b:95:67:b8:f3:5f:32:b3: 84:17:ad:0d:7d:0f:18:4a:37:10:94:1b:9a:97:62:41:c9:0c: a2:a0:73:73:3b:f4:9c:a0:b3:68:0d:6a:05:22:73:4e:4d:03: 22:79:24:e1:93:a1:3a:f3:af:d6:0c:52:2c:67:30:e0:b7:82: 84:31:44:4d:9d:08:51:dc:3b:1d:e4:0b:ee:35:42:0f:b5:4e: 9d:70:0e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCnI7F55Eos33nhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NjRkMzkyYzgtODgyZC00ZWQyLTgwNGItNmZkNmIyYzhiNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVQFa5RmaiXVXMZa3K2MbgPfSocaBC/lHaMY 2/z6G4robJQ7fImx3a0gZbaH7F7V+0GQZqL5lRtnKAhNgROhQnuinXfATjnfJ+Ux 11fKqlAQpS7GXEIPMVp7pDAp+lJKJF7GcCFtgzupYNnLcgJAvGhnRfbmZj8sbySc 2EZ76iOTKn/e7DbRM98XSzdmgn0n0N53dpmwA8I8nMQo7vaV6ridMbe63P02TmKv dyC+yaZU9tg27hsAQlO5ewNHCnI3zage2uRfhJdHEikLZj3Ajwhw+7IBdZtfnanR oq5PkVa8LeCVatELBaUQy3UUdEi7qcLSYRUL3ZCH0RiNFQVBywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOz9yRuYjEZ9rxQp64hIdv8nvikQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODc4ZWU3ODctMDY2OS0z NjkyLWFiMDAtZDIxNTNhYmVhYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGKsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjOJWMiza5yrkJVCmgfVR8zttC8pdC63EQkOMTpvKTp2tA52Q6pchrI aKshaV1acVsAk+SZdR8jmGhS0cPCfdxqwp/kOymV23UbjDiiSd+JfZbkRqB+y7Io /leDzgNl/3kW9UopZ0J1G2s3hHuAYVD8N+AcotNNplC+aPXeuRZhBJ6Zz9RTpFim xm5zVWoabm6J70AXMWIi2xvAPOr1aaDKJ3YSfpGao37ZlU+LlWe4818ys4QXrQ19 DxhKNxCUG5qXYkHJDKKgc3M79Jygs2gNagUic05NAyJ5JOGToTrzr9YMUixnMOC3 goQxRE2dCFHcOx3kC+41Qg+1Tp1wDq0= -----END CERTIFICATE-----Generated at Sun May 11 13:27:53 2025 by rpki-client