$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be18fb4f-bcc1-32ba-9e99-08e7a295f124.roa File: be18fb4f-bcc1-32ba-9e99-08e7a295f124.roa (raw, json) Hash identifier: /zKyp/jnaPwgxJDPNIs7d5A3k017/xjU7ov7zguDVR8= Subject key identifier: 03:53:FF:91:33:E5:B2:9C:46:F1:78:7B:3F:03:F3:E8:35:55:4A:F7 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A8FB271FBD698E7396040 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be18fb4f-bcc1-32ba-9e99-08e7a295f124.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 68.118.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:8f:b2:71:fb:d6:98:e7:39:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=dab12db4-0d54-4c32-884e-4d818fc6288d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:25:06:c6:21:fc:99:88:81:72:64:2f:c9: d1:f0:b1:b6:2d:c8:54:05:f9:52:80:5f:fd:7c:cf: 26:db:ce:25:ae:59:89:ac:fb:05:eb:52:51:98:c2: 3f:60:6b:43:2b:80:cd:36:80:8d:55:d0:b4:ec:82: 3f:c9:b2:0d:82:72:70:57:c9:4e:15:e2:27:77:ee: bd:7a:d5:20:89:f5:ea:7c:b5:8d:0e:0a:e2:39:25: 42:48:eb:44:ea:40:24:dd:a7:f8:84:f1:dc:93:12: eb:c4:f0:2d:9c:94:0f:1a:e4:3e:d3:7d:ca:2a:52: ba:7d:e1:31:79:9b:00:93:c0:fc:28:70:7a:66:76: c5:3d:18:34:02:f6:ee:5c:85:ce:1f:6d:6d:d1:2f: 32:49:0f:52:5e:84:fd:47:10:7f:ae:72:df:8b:1c: 4d:02:ea:78:86:e3:9a:e1:13:93:f2:f9:77:ab:e6: cd:8e:86:18:59:e2:81:72:03:39:0a:bc:ed:19:cb: 0b:3e:d7:be:3d:ee:db:82:dd:b3:08:86:a1:5e:d6: f1:bc:60:7e:bd:2b:40:f0:70:e6:63:bc:cb:c6:1d: 5e:3c:eb:e6:30:b5:fc:ca:27:d7:87:8a:22:58:16: 41:c8:b0:6d:fe:59:64:5c:a3:b9:d6:45:67:66:54: 57:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:53:FF:91:33:E5:B2:9C:46:F1:78:7B:3F:03:F3:E8:35:55:4A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/be18fb4f-bcc1-32ba-9e99-08e7a295f124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.118.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d0:5e:ff:32:22:14:f4:11:b9:d8:24:6d:7f:27:24:22:56: 41:d6:7e:b4:a6:d5:00:fe:33:43:fa:f7:23:14:2c:7f:1b:be: 6a:7f:b1:29:d2:10:2f:8e:c3:c6:b3:30:76:d5:10:f4:11:43: ac:c7:04:ea:f5:7f:ad:a7:c2:dd:db:cf:65:a9:81:ba:3c:3e: fb:13:72:17:20:66:ab:19:bd:e8:0b:8c:57:b5:2b:3c:a8:4b: dc:9d:84:bd:d7:37:ae:0b:e3:a7:fb:4e:51:a7:55:64:ef:f7: 03:09:63:07:d1:58:06:69:19:a7:21:ca:69:e0:f0:d0:e2:41: 82:5e:62:ec:38:41:7a:49:52:8d:2f:16:f0:a8:fd:52:14:6a: 2b:02:91:d6:5f:93:89:d1:28:eb:e8:84:c6:58:c0:10:6e:c5: d9:ae:0f:08:35:c9:8f:73:78:c6:ea:76:94:e1:55:1b:80:a7: ea:c9:74:f1:8e:33:99:41:77:de:5a:77:4e:9a:f8:60:44:97: 87:6c:e5:67:72:5d:ef:9c:81:d0:a2:ea:f6:3c:3b:61:42:bc: 38:69:30:ac:3c:7d:c1:5e:9f:b0:7d:9e:2b:89:93:e4:c4:d5: ad:fd:ac:97:67:b4:08:6f:a1:a7:06:5c:b8:d3:a9:24:a1:06: ae:8a:48:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCo+ycfvWmOc5YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZGFiMTJkYjQtMGQ1NC00YzMyLTg4NGUtNGQ4MThmYzYyODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AElBsYh/JmIgXJkL8nR8LG2LchUBflSgF/9 fM8m284lrlmJrPsF61JRmMI/YGtDK4DNNoCNVdC07II/ybINgnJwV8lOFeInd+69 etUgifXqfLWNDgriOSVCSOtE6kAk3af4hPHckxLrxPAtnJQPGuQ+033KKlK6feEx eZsAk8D8KHB6ZnbFPRg0AvbuXIXOH21t0S8ySQ9SXoT9RxB/rnLfixxNAup4huOa 4ROT8vl3q+bNjoYYWeKBcgM5CrztGcsLPte+Pe7bgt2zCIahXtbxvGB+vStA8HDm Y7zLxh1ePOvmMLX8yifXh4oiWBZByLBt/llkXKO51kVnZlRXqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANT/5Ez5bKcRvF4ez8D8+g1VUr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmUxOGZiNGYtYmNjMS0z MmJhLTllOTktMDhlN2EyOTVmMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRHaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfQXv8yIhT0EbnYJG1/JyQiVkHWfrSm1QD+M0P69yMULH8bvmp/sSnS EC+Ow8azMHbVEPQRQ6zHBOr1f62nwt3bz2Wpgbo8PvsTchcgZqsZvegLjFe1Kzyo S9ydhL3XN64L46f7TlGnVWTv9wMJYwfRWAZpGachymng8NDiQYJeYuw4QXpJUo0v FvCo/VIUaisCkdZfk4nRKOvohMZYwBBuxdmuDwg1yY9zeMbqdpThVRuAp+rJdPGO M5lBd95ad06a+GBEl4ds5WdyXe+cgdCi6vY8O2FCvDhpMKw8fcFen7B9niuJk+TE 1a39rJdntAhvoacGXLjTqSShBq6KSKM= -----END CERTIFICATE-----Generated at Sat May 10 11:35:29 2025 by rpki-client