$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa File: 9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa (raw, json) Hash identifier: PKFxZU8mCixUPGnG9w4tWaz5/gXCqY4FXtHdzXhTycw= Subject key identifier: F0:B8:7D:3E:24:1C:7F:C2:A6:50:41:32:E7:7B:22:BF:A0:F5:E1:8A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A915EB198AD14F85A6400 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 68.191.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:91:5e:b1:98:ad:14:f8:5a:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=11220d97-8afd-4ad8-9638-dbd1e7081445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:35:d6:1d:33:af:cc:8f:cc:dc:79:7e:5a:16: ce:8c:f4:be:20:88:2d:8d:8c:65:15:87:88:c5:ea: 2c:7f:bf:3b:d5:30:55:9a:4b:2e:a8:85:3a:44:94: 0d:ba:e1:6b:f0:18:93:86:67:73:8b:d6:e3:3b:75: bd:89:d1:3b:1c:0e:bd:5a:4b:f6:ab:99:f9:7d:0a: 8d:4c:17:97:ea:0f:e3:49:b5:d6:cc:36:9f:64:6a: f5:9f:2f:c6:99:ee:09:66:f7:c6:6c:5a:8c:f8:de: 21:9a:68:18:f7:9c:f9:33:64:8a:0c:7c:10:68:89: c2:bc:10:65:c2:58:3d:ac:35:eb:af:d7:08:fe:12: 01:a1:68:09:cc:43:36:cf:04:e3:bc:19:a0:f8:56: 5f:9d:76:b3:15:24:3e:f0:77:0b:80:32:eb:cd:78: 7f:63:cd:5f:66:e6:b5:28:7d:ca:5f:1a:38:1e:5f: 9c:5d:00:08:b7:00:c6:62:bc:1a:7a:58:7b:40:64: 36:61:ca:d9:e3:63:4d:7e:32:aa:ac:e3:8f:01:21: 98:b9:5a:9c:1b:7b:d1:a8:73:05:1e:21:cc:c5:af: 21:fa:a2:dc:04:d9:6f:16:4e:93:c6:6c:f4:bc:31: b8:b6:55:df:c9:a3:9d:ee:98:d1:aa:9e:13:3d:a9: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:7D:3E:24:1C:7F:C2:A6:50:41:32:E7:7B:22:BF:A0:F5:E1:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9d87d954-b3c9-3c5f-8fa1-31ea85fdef6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.191.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:14:99:9a:1b:8c:f3:67:98:51:09:76:99:21:23:c1:c8:fc: a3:3d:b4:d3:32:50:76:24:d2:bb:73:45:9e:1f:2c:14:eb:40: 22:42:6e:35:b9:b7:0a:20:01:5f:ed:d2:0d:96:77:ca:b9:54: 12:b4:91:a0:9a:ba:b7:6d:6a:8c:d3:0d:d4:b3:6a:ff:bf:95: 8a:95:95:06:0d:3a:28:22:91:2e:88:27:83:f1:ba:c0:8b:36: 46:ef:54:be:a9:22:5a:97:11:6e:69:83:ad:8a:06:98:7b:45: 8f:c3:34:e6:58:90:91:11:2f:c7:48:00:26:6c:4b:b9:87:65: cc:84:15:99:f8:ef:5e:a6:83:56:05:7a:4f:0e:46:df:3f:51: 99:92:6f:ea:04:39:fb:f8:5c:b8:c8:09:6c:a3:b4:d8:ae:0d: f8:ce:cd:d3:c1:6a:99:c8:37:74:b7:8d:b6:18:7f:d2:59:ff: d5:0c:c2:38:2b:f5:77:3c:e8:4d:f3:3f:b2:b3:af:c1:89:2e: 0a:0b:5c:c9:25:1e:e2:31:17:98:b6:5c:90:47:c7:12:5b:09: a5:71:df:31:6e:59:67:7d:e8:6e:0b:ae:d9:49:b5:d4:6e:df: f7:fd:35:ea:ff:87:e2:c0:73:99:0d:80:e5:57:0b:f4:6f:1b: 03:c4:eb:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCpFesZitFPhaZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MTEyMjBkOTctOGFmZC00YWQ4LTk2MzgtZGJkMWU3MDgxNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TXWHTOvzI/M3Hl+WhbOjPS+IIgtjYxlFYeI xeosf7871TBVmksuqIU6RJQNuuFr8BiThmdzi9bjO3W9idE7HA69Wkv2q5n5fQqN TBeX6g/jSbXWzDafZGr1ny/Gme4JZvfGbFqM+N4hmmgY95z5M2SKDHwQaInCvBBl wlg9rDXrr9cI/hIBoWgJzEM2zwTjvBmg+FZfnXazFSQ+8HcLgDLrzXh/Y81fZua1 KH3KXxo4Hl+cXQAItwDGYrwaelh7QGQ2YcrZ42NNfjKqrOOPASGYuVqcG3vRqHMF HiHMxa8h+qLcBNlvFk6Txmz0vDG4tlXfyaOd7pjRqp4TPallKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC4fT4kHH/CplBBMud7Ir+g9eGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWQ4N2Q5NTQtYjNjOS0z YzVmLThmYTEtMzFlYTg1ZmRlZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRL9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsUmZobjPNnmFEJdpkhI8HI/KM9tNMyUHYk0rtzRZ4fLBTrQCJCbjW5 twogAV/t0g2Wd8q5VBK0kaCaurdtaozTDdSzav+/lYqVlQYNOigikS6IJ4PxusCL NkbvVL6pIlqXEW5pg62KBph7RY/DNOZYkJERL8dIACZsS7mHZcyEFZn4716mg1YF ek8ORt8/UZmSb+oEOfv4XLjICWyjtNiuDfjOzdPBapnIN3S3jbYYf9JZ/9UMwjgr 9Xc86E3zP7Kzr8GJLgoLXMklHuIxF5i2XJBHxxJbCaVx3zFuWWd96G4LrtlJtdRu 3/f9Ner/h+LAc5kNgOVXC/RvGwPE61o= -----END CERTIFICATE-----Generated at Fri May 9 18:10:30 2025 by rpki-client