$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa File: 96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa (raw, json) Hash identifier: qUe9uOKF8bxXBx5XPQW/c+Lz9C+jbjZk74OPN8I7QXw= Subject key identifier: 70:E6:BC:A5:2E:E8:62:7C:84:0D:65:51:C0:A1:24:38:90:16:3A:64 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A8CDC8DE4EE2DA20AAB90 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 66.188.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:8c:dc:8d:e4:ee:2d:a2:0a:ab:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=ebeae775-bf3b-4f62-9862-4bd3ce5aba79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c8:a3:62:b0:0a:b3:a2:33:86:14:e5:ea:00: 9e:89:91:65:2c:7a:5b:76:db:8b:20:36:73:05:dd: 1f:1e:1c:5f:a0:d8:01:7c:d0:47:a2:77:72:06:a6: ea:11:7e:09:69:9c:ae:04:d7:ed:90:12:4c:de:dd: e0:83:38:64:39:da:53:28:ae:8c:ad:a2:a0:48:7d: 9b:92:d8:93:6e:bd:51:53:89:c9:16:52:a9:76:00: e1:6b:10:16:6c:b3:2a:12:6f:50:a6:0b:1f:3c:5b: 7c:e0:d3:f0:fd:39:a8:3a:d4:05:fc:77:9c:d8:dc: e4:63:63:22:cf:46:c2:42:a8:ba:c7:ea:94:e8:b6: 89:75:32:09:26:66:1b:34:c3:4c:05:6d:f5:0f:4c: 6f:31:4f:a8:af:55:df:1f:91:9d:b0:8f:09:98:4d: 4a:78:9a:d6:a6:38:3d:e2:2b:ee:66:f2:5c:30:a5: f7:f7:ce:40:a0:be:0f:f1:6c:cd:e8:0f:ae:9a:24: 74:d2:d0:4f:2a:2f:ac:73:be:f9:66:74:fc:f3:68: 40:8d:b6:d7:0e:82:98:88:40:cb:db:a0:31:0d:4a: 9a:34:8b:bd:99:d7:ca:11:0c:22:62:3a:f0:0f:88: 96:92:7e:ff:cb:11:64:0d:ef:7b:d0:0c:fd:f9:96: 49:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E6:BC:A5:2E:E8:62:7C:84:0D:65:51:C0:A1:24:38:90:16:3A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/96f70ceb-04e1-3bf2-9135-f4119e413a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.188.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8b:c6:45:fd:a8:60:a1:82:27:a0:2a:fa:90:7b:34:a8:c9: 20:2f:e9:7f:00:36:d2:ad:ec:84:37:aa:fb:76:7f:cf:0d:64: 84:d6:2a:ac:3e:b3:6b:f9:19:fd:4b:99:9b:2c:17:f5:ae:0c: a4:d5:ec:ed:12:10:c7:e4:23:ab:cc:55:6c:9a:6a:6a:c7:f4: 7c:5e:26:56:19:da:59:49:49:63:e4:d0:40:22:02:a2:7e:ba: 53:dd:81:7d:5f:6e:d6:90:d7:f6:b7:c2:54:97:2d:c9:c9:d3: 7e:ab:bf:84:97:16:3d:4f:8d:8c:fb:0d:f9:3b:9b:61:29:fc: a5:89:35:e0:4f:55:03:38:2d:57:f0:25:bf:ef:06:91:4f:67: 2c:5f:1f:b4:08:fc:4f:cd:79:03:96:6e:1a:7b:a9:72:43:36: 95:1f:ab:62:e7:b3:5b:35:fb:66:ac:9b:82:7d:75:4a:fa:2d: 68:ae:b1:18:a0:13:98:ac:61:f7:d0:31:d9:cf:da:19:03:2f: c9:16:bc:aa:f9:65:2c:5a:d6:24:e7:14:20:b6:55:e5:62:91: b1:ad:f5:12:2a:d4:2f:32:28:bb:d8:75:be:9e:92:ce:0f:6a: e5:41:f7:d6:99:b2:e3:2d:08:f6:a6:80:3e:a1:4b:37:ac:fa: 3b:05:e7:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCozcjeTuLaIKq5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZWJlYWU3NzUtYmYzYi00ZjYyLTk4NjItNGJkM2NlNWFiYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MijYrAKs6IzhhTl6gCeiZFlLHpbdtuLIDZz Bd0fHhxfoNgBfNBHondyBqbqEX4JaZyuBNftkBJM3t3ggzhkOdpTKK6MraKgSH2b ktiTbr1RU4nJFlKpdgDhaxAWbLMqEm9QpgsfPFt84NPw/TmoOtQF/Hec2NzkY2Mi z0bCQqi6x+qU6LaJdTIJJmYbNMNMBW31D0xvMU+or1XfH5GdsI8JmE1KeJrWpjg9 4ivuZvJcMKX3985AoL4P8WzN6A+umiR00tBPKi+sc775ZnT882hAjbbXDoKYiEDL 26AxDUqaNIu9mdfKEQwiYjrwD4iWkn7/yxFkDe970Az9+ZZJOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDmvKUu6GJ8hA1lUcChJDiQFjpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTZmNzBjZWItMDRlMS0z YmYyLTkxMzUtZjQxMTllNDEzYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQryAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqLxkX9qGChgiegKvqQezSoySAv6X8ANtKt7IQ3qvt2f88NZITWKqw+ s2v5Gf1LmZssF/WuDKTV7O0SEMfkI6vMVWyaamrH9HxeJlYZ2llJSWPk0EAiAqJ+ ulPdgX1fbtaQ1/a3wlSXLcnJ036rv4SXFj1PjYz7Dfk7m2Ep/KWJNeBPVQM4LVfw Jb/vBpFPZyxfH7QI/E/NeQOWbhp7qXJDNpUfq2Lns1s1+2asm4J9dUr6LWiusRig E5isYffQMdnP2hkDL8kWvKr5ZSxa1iTnFCC2VeVikbGt9RIq1C8yKLvYdb6eks4P auVB99aZsuMtCPamgD6hSzes+jsF50M= -----END CERTIFICATE-----Generated at Sat May 10 03:46:23 2025 by rpki-client