$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf83ac35-1070-38ab-afd6-d31739db315d.roa File: bf83ac35-1070-38ab-afd6-d31739db315d.roa (raw, json) Hash identifier: JfqLX2s0yryzzCsAybRNTp1pdA7uGJF1jYzlZdE5j9o= Subject key identifier: 36:C6:61:F4:2E:42:6D:D4:C1:3D:78:46:D0:D5:D2:B1:28:EE:9B:B9 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20B0EBA8817F39C50A825D0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf83ac35-1070-38ab-afd6-d31739db315d.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 68.112.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0b:0e:ba:88:17:f3:9c:50:a8:25:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=c9ab2623-7288-4818-aa1a-b609baa7e0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:20:a6:12:ba:74:ed:60:51:b7:02:74:53: 95:20:1e:ca:93:8a:cb:da:5c:4f:b5:bb:d7:a2:a8: da:0a:6d:7a:ed:29:9c:a5:5d:ac:49:74:5c:95:6a: 95:06:59:c8:b0:4d:b2:f2:01:bb:ab:0e:f6:f9:9a: 50:57:b8:ea:7e:36:d1:d7:95:15:b3:75:c4:fd:c7: f7:91:0e:38:8e:82:4d:97:6c:e9:a8:11:48:89:8f: e6:b3:c1:26:1e:54:8b:82:1c:5c:08:5e:76:25:e9: 1b:56:64:08:6f:c8:99:63:3f:e0:f7:b6:cd:65:fa: e9:2b:54:58:fe:1d:0f:47:4a:5b:41:02:54:7a:fc: e1:bf:73:95:8e:03:c1:2f:aa:7a:da:6a:20:f3:c9: 23:f2:fa:b0:aa:54:05:5c:0f:83:ea:c2:ec:da:a5: 85:c3:1a:6a:c7:55:81:27:1d:35:cd:63:be:89:83: e5:5e:a7:15:c1:32:4b:56:8d:40:2e:2e:9c:6a:41: 65:02:90:0d:25:fa:02:cc:c0:2f:b2:19:63:51:ab: a4:53:05:f2:a2:32:46:dd:0a:d6:2f:26:2c:d3:73: 69:84:4f:01:14:fa:8b:f2:94:a0:4d:21:50:81:71: 25:f3:85:6b:53:92:da:b8:3c:8e:7c:be:d5:6a:77: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C6:61:F4:2E:42:6D:D4:C1:3D:78:46:D0:D5:D2:B1:28:EE:9B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf83ac35-1070-38ab-afd6-d31739db315d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.112.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a5:56:98:a2:58:fa:6d:5c:f2:23:3a:d3:96:a3:f1:62:cc: 18:5f:5c:69:67:33:b4:18:06:ac:5d:fd:ba:6e:6b:14:df:11: 4c:a9:d0:06:af:7b:8e:b0:dc:76:23:5c:06:27:cf:cb:2b:9d: b5:b9:67:c9:27:03:3b:e4:a1:01:90:7b:55:12:90:8a:29:38: d1:80:68:d5:9d:f8:96:68:ec:9e:0b:e5:18:85:3a:46:04:05: 21:4a:b8:36:b6:a9:c9:76:ff:2e:29:18:b1:a9:7c:fc:25:20: b8:a3:2e:c4:63:a6:5a:ae:0b:50:1a:22:13:f6:fb:1d:95:f5: bf:58:01:3c:dd:f2:a6:ba:c4:a7:ec:2f:2c:7a:0d:c2:4b:21: 62:dd:78:41:47:1f:91:d1:31:55:68:cf:42:86:bf:9b:31:96: 9b:c0:a4:26:66:81:44:fb:c7:a8:6a:37:a0:7b:5b:a8:2e:0f: d7:24:dd:c3:a4:67:e5:da:6f:5e:63:7e:44:ac:6b:60:45:6f: 02:9a:7f:b8:74:6c:57:44:08:b2:06:ad:bc:06:ae:10:de:a7: d2:6f:8d:5c:6a:7f:2d:0c:3b:0d:b0:16:c5:2a:50:d6:ef:40: e8:42:18:8f:49:89:51:af:a7:81:f0:49:38:03:2a:d6:bd:a8: 3e:5a:37:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCw66iBfznFCoJdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YzlhYjI2MjMtNzI4OC00ODE4LWFhMWEtYjYwOWJhYTdlMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxsgphK6dO1gUbcCdFOVIB7Kk4rL2lxPtbvX oqjaCm167SmcpV2sSXRclWqVBlnIsE2y8gG7qw72+ZpQV7jqfjbR15UVs3XE/cf3 kQ44joJNl2zpqBFIiY/ms8EmHlSLghxcCF52JekbVmQIb8iZYz/g97bNZfrpK1RY /h0PR0pbQQJUevzhv3OVjgPBL6p62mog88kj8vqwqlQFXA+D6sLs2qWFwxpqx1WB Jx01zWO+iYPlXqcVwTJLVo1ALi6cakFlApANJfoCzMAvshljUaukUwXyojJG3QrW LyYs03NphE8BFPqL8pSgTSFQgXEl84VrU5LauDyOfL7VanfCZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbGYfQuQm3UwT14RtDV0rEo7pu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmY4M2FjMzUtMTA3MC0z OGFiLWFmZDYtZDMxNzM5ZGIzMTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADClVpiiWPptXPIjOtOWo/FizBhfXGlnM7QYBqxd/bpuaxTfEUyp0Aav e46w3HYjXAYnz8srnbW5Z8knAzvkoQGQe1USkIopONGAaNWd+JZo7J4L5RiFOkYE BSFKuDa2qcl2/y4pGLGpfPwlILijLsRjplquC1AaIhP2+x2V9b9YATzd8qa6xKfs Lyx6DcJLIWLdeEFHH5HRMVVoz0KGv5sxlpvApCZmgUT7x6hqN6B7W6guD9ck3cOk Z+Xab15jfkSsa2BFbwKaf7h0bFdECLIGrbwGrhDep9JvjVxqfy0MOw2wFsUqUNbv QOhCGI9JiVGvp4HwSTgDKta9qD5aNyA= -----END CERTIFICATE-----Generated at Sun May 11 15:11:03 2025 by rpki-client