$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b23ef70-c6a4-3dd1-8660-4af12ce01012.roa File: 9b23ef70-c6a4-3dd1-8660-4af12ce01012.roa (raw, json) Hash identifier: LP/udca+7SmSNOAK8X4y8vWKBP/dI/fj9AkP4dewJzs= Subject key identifier: BE:1D:37:E8:C1:39:87:C5:8F:C8:78:98:2D:7C:0A:19:85:CA:56:9E Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A7C582E169000DC0F7680 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b23ef70-c6a4-3dd1-8660-4af12ce01012.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 71.89.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:7c:58:2e:16:90:00:dc:0f:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=bc24fea0-5ac8-4968-8d9f-ffb4fe873d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:67:ea:96:21:56:f3:fc:c8:32:0c:a9:e9:ad: 57:98:36:f8:fc:86:e4:fb:38:a7:27:7e:e4:e0:02: ce:e6:9f:77:b1:2a:65:23:58:de:e6:53:3e:f7:5d: 06:89:ed:d7:06:32:36:1d:2f:4b:ba:d9:38:9f:05: b5:83:93:b7:14:23:73:08:04:d1:c3:41:de:af:44: 03:d5:13:6b:29:ea:31:ef:98:c6:ae:84:be:91:a6: d2:a9:99:a2:ba:0f:6e:6d:c7:cf:3d:b9:45:be:42: 10:ab:e8:5a:a0:09:9d:2b:62:12:ae:f6:f5:52:b2: b8:d5:98:56:8c:7b:06:99:42:53:65:e0:a9:48:1d: 5d:42:a4:58:0b:1d:1e:08:70:fb:87:17:7d:61:ff: 8c:ea:e8:e4:ba:3f:3f:43:ef:99:7a:24:ff:5e:91: 8b:f1:da:f5:5e:66:cb:34:30:2e:ab:b5:5e:eb:28: 8d:0b:32:dc:ba:13:e8:c0:a2:35:7d:fe:c5:d5:a2: 45:e2:2e:b0:9b:cf:70:78:94:e9:29:ab:fc:12:7c: e3:2d:07:c2:72:52:a6:7a:98:a9:e4:54:dc:3c:4a: 3d:f9:9c:52:94:ad:6c:f4:92:75:96:38:ec:73:36: fc:78:15:5d:e3:c0:17:60:be:7e:3c:c3:35:a7:bd: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1D:37:E8:C1:39:87:C5:8F:C8:78:98:2D:7C:0A:19:85:CA:56:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9b23ef70-c6a4-3dd1-8660-4af12ce01012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.89.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c8:8f:e4:d2:9e:80:fb:7a:e8:23:fc:76:d3:aa:b5:a2:6a: 1e:f4:94:74:12:b9:e6:dc:75:85:ea:4f:42:aa:35:c7:5e:81: c5:25:2c:c8:97:7f:20:ff:79:e8:2d:c3:c2:d0:10:3f:28:75: fb:60:d2:88:03:94:b3:dc:c3:57:81:42:a4:c9:5d:de:ca:f6: ee:d7:ab:73:ce:b9:46:25:86:6f:39:9f:4e:eb:8f:64:95:15: 12:c8:4d:e8:73:8d:51:e1:d0:20:0c:88:c1:56:ea:78:99:74: cc:ea:b1:b4:c4:6c:05:e3:23:4b:8b:d9:c2:a7:ce:80:ef:b8: fe:d1:26:d3:1e:a2:2d:d4:1e:a7:10:42:87:7d:12:77:86:4f: fb:a0:20:51:fb:5d:c0:60:26:fd:b8:04:79:59:f4:1a:9f:60: ea:72:4f:ca:20:53:be:94:a1:9e:db:89:9c:c6:c3:ff:5b:47: 0f:c8:e3:da:65:8b:f3:c0:2f:86:d4:dc:90:d4:1a:61:1e:06: 82:2b:83:79:c9:cc:51:ee:9f:2c:bc:80:ac:6e:c7:fa:84:89: 12:a5:21:06:c5:af:4b:5b:52:53:50:bb:be:c3:c3:77:fe:78: bc:c7:be:b3:5c:2e:79:3b:d1:f4:b4:9d:f4:41:c6:69:41:98: 73:1b:fd:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCnxYLhaQANwPdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YmMyNGZlYTAtNWFjOC00OTY4LThkOWYtZmZiNGZlODczZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmfqliFW8/zIMgyp6a1XmDb4/Ibk+zinJ37k 4ALO5p93sSplI1je5lM+910Gie3XBjI2HS9Lutk4nwW1g5O3FCNzCATRw0Her0QD 1RNrKeox75jGroS+kabSqZmiug9ubcfPPblFvkIQq+haoAmdK2ISrvb1UrK41ZhW jHsGmUJTZeCpSB1dQqRYCx0eCHD7hxd9Yf+M6ujkuj8/Q++ZeiT/XpGL8dr1XmbL NDAuq7Ve6yiNCzLcuhPowKI1ff7F1aJF4i6wm89weJTpKav8EnzjLQfCclKmepip 5FTcPEo9+ZxSlK1s9JJ1ljjsczb8eBVd48AXYL5+PMM1p71UawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4dN+jBOYfFj8h4mC18ChmFylaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWIyM2VmNzAtYzZhNC0z ZGQxLTg2NjAtNGFmMTJjZTAxMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR1kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3Ij+TSnoD7eugj/HbTqrWiah70lHQSuebcdYXqT0KqNcdegcUlLMiX fyD/eegtw8LQED8odftg0ogDlLPcw1eBQqTJXd7K9u7Xq3POuUYlhm85n07rj2SV FRLITehzjVHh0CAMiMFW6niZdMzqsbTEbAXjI0uL2cKnzoDvuP7RJtMeoi3UHqcQ Qod9EneGT/ugIFH7XcBgJv24BHlZ9BqfYOpyT8ogU76UoZ7biZzGw/9bRw/I49pl i/PAL4bU3JDUGmEeBoIrg3nJzFHunyy8gKxux/qEiRKlIQbFr0tbUlNQu77Dw3f+ eLzHvrNcLnk70fS0nfRBxmlBmHMb/QQ= -----END CERTIFICATE-----Generated at Sat May 10 09:48:46 2025 by rpki-client