$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af4bfef8-6deb-3886-8691-651db9ea8269.roa File: af4bfef8-6deb-3886-8691-651db9ea8269.roa (raw, json) Hash identifier: /kTDqpEC7Gx7hHe06k+HVDKh3dg4OymqUVEQOx76gho= Subject key identifier: E5:BA:CE:A2:52:7F:CF:60:38:CA:95:0D:F5:C8:63:2A:09:6F:2E:05 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20AF150C9428B77AAA5AA80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af4bfef8-6deb-3886-8691-651db9ea8269.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 11955 IP address blocks: 150.221.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:f1:50:c9:42:8b:77:aa:a5:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=43b92b0f-33d0-4169-9981-27bbccec31c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:40:4b:4b:27:ab:7b:af:24:93:96:e5:b5: e4:43:1b:ca:2b:ec:96:4e:e2:96:f3:ec:6c:84:2d: 5e:90:0b:88:95:99:3e:1a:3c:d6:71:38:31:0d:17: 4a:b6:27:36:b0:41:5b:ec:16:a3:0c:87:c8:64:f6: 90:cf:d8:a0:5e:35:b3:02:50:30:a5:33:29:6e:c3: 0e:e9:d3:50:3b:c3:b9:bc:e9:21:ae:d6:9d:ac:45: 1c:87:a7:88:a1:b7:5a:b0:81:2e:b3:a9:40:f5:88: f5:e3:f6:83:fc:c5:0a:ed:6b:a1:d4:f5:9a:83:de: 37:85:1a:ef:95:7a:7e:a9:95:d6:6e:6f:c4:a7:9e: 30:53:61:09:5c:59:ae:a4:5f:e1:52:82:cf:5d:8c: 55:53:01:b3:85:65:e9:a0:34:e7:11:58:b2:57:97: 3c:24:4e:5d:30:06:c9:87:01:42:19:e1:0a:1d:17: cc:e0:ea:0e:9d:bf:fb:ec:23:42:85:44:88:46:63: cb:a9:8d:12:d9:d7:07:a0:e9:de:6b:56:5b:8f:2d: ef:62:3d:89:bf:96:58:eb:11:9d:9d:f6:df:eb:c3: 68:b7:2b:91:6a:9b:f4:60:1b:72:c3:cb:00:c1:40: f1:5d:45:7c:a3:48:9b:40:b0:18:87:25:65:82:b1: b7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BA:CE:A2:52:7F:CF:60:38:CA:95:0D:F5:C8:63:2A:09:6F:2E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/af4bfef8-6deb-3886-8691-651db9ea8269.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 150.221.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c0:c6:f6:a4:62:d8:35:8c:05:15:d5:e7:a4:57:50:16:7a: 0c:56:f8:4b:1a:53:32:c1:8b:e3:26:45:70:5b:e3:0f:02:65: 50:db:dc:ef:fc:48:0c:87:0c:4a:24:2b:ec:8e:40:44:4c:66: e4:e4:67:c2:03:3a:4d:36:18:39:f9:3e:07:33:b8:e5:5f:bb: bb:54:02:c1:ea:f4:c9:bb:9f:92:30:25:6a:ab:47:9f:01:ee: 4c:fd:e0:24:e1:9b:fe:f9:06:8f:8b:a0:40:ca:97:1a:c1:1b: 45:0e:13:98:68:71:98:17:d0:ff:77:d5:f9:2f:27:41:18:51: 8b:b4:23:f1:33:dd:4c:fc:a5:d3:48:6f:62:5e:fc:75:96:30: d4:dd:55:04:0c:18:7f:7d:21:6d:15:d2:b9:c6:69:19:d8:da: fb:c1:0a:a0:d4:18:a8:db:fe:74:5d:29:2a:5c:2a:a2:d8:36: 1a:58:57:15:b0:77:45:72:f0:a2:ab:0c:37:58:35:36:69:7c: 8f:98:1b:4d:de:b5:15:a6:c6:8d:40:2d:6b:84:34:e7:ae:c2: 85:3d:b3:52:24:c7:69:e5:59:9c:20:10:6e:7a:2a:6e:15:e3: e7:6c:75:82:a2:26:39:b6:91:09:07:d1:4d:30:a9:6e:06:53: 8a:8f:b0:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCvFQyUKLd6qlqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NDNiOTJiMGYtMzNkMC00MTY5LTk5ODEtMjdiYmNjZWMzMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw9AS0snq3uvJJOW5bXkQxvKK+yWTuKW8+xs hC1ekAuIlZk+GjzWcTgxDRdKtic2sEFb7BajDIfIZPaQz9igXjWzAlAwpTMpbsMO 6dNQO8O5vOkhrtadrEUch6eIobdasIEus6lA9Yj14/aD/MUK7Wuh1PWag943hRrv lXp+qZXWbm/Ep54wU2EJXFmupF/hUoLPXYxVUwGzhWXpoDTnEViyV5c8JE5dMAbJ hwFCGeEKHRfM4OoOnb/77CNChUSIRmPLqY0S2dcHoOnea1Zbjy3vYj2Jv5ZY6xGd nfbf68NotyuRapv0YBtyw8sAwUDxXUV8o0ibQLAYhyVlgrG35wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW6zqJSf89gOMqVDfXIYyoJby4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWY0YmZlZjgtNmRlYi0z ODg2LTg2OTEtNjUxZGI5ZWE4MjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElt1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3AxvakYtg1jAUV1eekV1AWegxW+EsaUzLBi+MmRXBb4w8CZVDb3O/8 SAyHDEokK+yOQERMZuTkZ8IDOk02GDn5PgczuOVfu7tUAsHq9Mm7n5IwJWqrR58B 7kz94CThm/75Bo+LoEDKlxrBG0UOE5hocZgX0P931fkvJ0EYUYu0I/Ez3Uz8pdNI b2Je/HWWMNTdVQQMGH99IW0V0rnGaRnY2vvBCqDUGKjb/nRdKSpcKqLYNhpYVxWw d0Vy8KKrDDdYNTZpfI+YG03etRWmxo1ALWuENOeuwoU9s1Ikx2nlWZwgEG56Km4V 4+dsdYKiJjm2kQkH0U0wqW4GU4qPsFM= -----END CERTIFICATE-----Generated at Sat May 10 13:56:08 2025 by rpki-client