$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa File: 9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa (raw, json) Hash identifier: aB3iOmwO+QU7xUk3duXNu5ofECl49Sl9GUX6MCQKCOg= Subject key identifier: 39:37:B6:9E:CC:4A:64:75:48:CA:C5:F3:FC:F5:8C:07:E4:0E:EA:A7 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A954BC587FDC25F07BE00 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 68.189.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:95:4b:c5:87:fd:c2:5f:07:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=387f7067-bd10-49d9-b5ec-073bea05d234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bb:5f:00:87:f4:05:38:79:62:99:24:2d:1a: 13:65:ac:cd:f6:c9:a8:de:7b:3c:33:12:87:06:3b: 97:8f:79:94:c4:12:96:ee:4e:77:71:3c:ef:bb:c4: c7:81:cd:7f:e3:3d:03:a6:d6:af:7b:a9:74:73:67: 18:87:a9:29:98:e7:12:d7:66:be:30:3a:b7:af:ff: 27:e4:7c:92:c4:06:dd:e6:cf:51:68:a2:23:83:b0: dc:ac:eb:c2:77:75:6c:c6:fc:01:cd:64:92:6c:30: 9b:7c:24:a7:d3:03:a1:0a:51:4b:70:e8:b2:c4:99: a2:de:ab:b4:31:eb:ef:2b:64:28:0f:ad:2f:2f:f7: 5d:1c:b6:a5:ec:d0:b7:a1:6f:75:f5:7d:c4:11:7e: c9:e8:f2:6b:2e:ab:16:c4:5e:34:a8:8a:c3:fe:10: 40:b7:4b:18:30:e4:c0:7e:c9:32:c4:d1:36:92:35: 3f:05:99:e1:2d:2a:7e:c1:27:ec:75:82:50:67:2f: ed:c6:03:b7:3c:59:c4:c3:56:fb:8b:52:d2:96:84: a9:27:31:ac:5e:38:8b:fd:89:ed:09:b8:75:a2:51: 12:d6:77:0e:68:10:d3:7c:0c:85:ff:7e:fc:31:95: 60:1b:60:40:97:06:4e:5b:cd:85:bb:ea:8f:12:80: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:37:B6:9E:CC:4A:64:75:48:CA:C5:F3:FC:F5:8C:07:E4:0E:EA:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9caa7aa3-b255-3974-b8be-616a9cf7b8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.189.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d0:23:1d:da:5b:6d:a8:43:84:f3:e6:05:76:50:74:2e:35: 45:0e:06:f5:05:de:bb:5d:07:8a:eb:de:b8:04:e0:54:87:22: c6:5c:a3:4c:c0:11:e9:88:86:d0:0e:58:9f:72:81:ca:6c:05: 8a:c7:23:b2:34:c2:88:01:73:04:97:5f:83:ec:a7:aa:21:1c: da:70:68:5a:1d:e1:0c:e2:0f:7a:98:09:01:df:0a:55:81:57: 6b:99:3f:e5:35:07:50:67:84:21:10:c9:18:9b:e2:64:9c:82: f8:45:d8:5a:cc:aa:ba:42:f7:7b:f3:a3:cc:69:84:f1:80:1f: 56:39:a4:f6:a8:ce:6a:ad:d5:0f:73:59:e4:a2:c7:c9:93:cd: de:57:1f:cd:5d:db:36:57:43:a7:13:32:0f:f2:9a:37:08:45: b9:60:ea:97:18:bd:9d:6e:53:d9:37:a7:5e:bd:59:16:6a:15: cd:dd:03:d1:54:b9:35:e4:29:33:af:d6:8e:c5:20:8e:70:7a: c2:91:9e:b2:31:43:3d:ff:a9:35:25:7a:f8:e9:ab:15:08:1f: 87:4d:21:1a:e8:d5:11:7c:ef:72:b6:f7:f4:22:ea:c2:29:7d: a9:a8:21:b0:0b:5e:e1:b2:3a:71:6c:49:2e:58:f6:ff:b5:ac: 76:90:6c:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCpVLxYf9wl8HvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk Mzg3ZjcwNjctYmQxMC00OWQ5LWI1ZWMtMDczYmVhMDVkMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7tfAIf0BTh5YpkkLRoTZazN9smo3ns8MxKH BjuXj3mUxBKW7k53cTzvu8THgc1/4z0Dptave6l0c2cYh6kpmOcS12a+MDq3r/8n 5HySxAbd5s9RaKIjg7DcrOvCd3VsxvwBzWSSbDCbfCSn0wOhClFLcOiyxJmi3qu0 MevvK2QoD60vL/ddHLal7NC3oW919X3EEX7J6PJrLqsWxF40qIrD/hBAt0sYMOTA fskyxNE2kjU/BZnhLSp+wSfsdYJQZy/txgO3PFnEw1b7i1LSloSpJzGsXjiL/Ynt Cbh1olES1ncOaBDTfAyF/378MZVgG2BAlwZOW82Fu+qPEoAYDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk3tp7MSmR1SMrF8/z1jAfkDuqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWNhYTdhYTMtYjI1NS0z OTc0LWI4YmUtNjE2YTljZjdiOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrQIx3aW22oQ4Tz5gV2UHQuNUUOBvUF3rtdB4rr3rgE4FSHIsZco0zA EemIhtAOWJ9ygcpsBYrHI7I0wogBcwSXX4Psp6ohHNpwaFod4QziD3qYCQHfClWB V2uZP+U1B1BnhCEQyRib4mScgvhF2FrMqrpC93vzo8xphPGAH1Y5pPaozmqt1Q9z WeSix8mTzd5XH81d2zZXQ6cTMg/ymjcIRblg6pcYvZ1uU9k3p169WRZqFc3dA9FU uTXkKTOv1o7FII5wesKRnrIxQz3/qTUlevjpqxUIH4dNIRro1RF873K29/Qi6sIp famoIbALXuGyOnFsSS5Y9v+1rHaQbCo= -----END CERTIFICATE-----Generated at Sat May 10 02:16:53 2025 by rpki-client