$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf67d240-7a12-3a29-ba9e-09c98c14b6c2.roa File: cf67d240-7a12-3a29-ba9e-09c98c14b6c2.roa (raw, json) Hash identifier: VWjMF9kYy/KkGABoRVrXHXYfyapJMuLXFCKxnJVHTHw= Subject key identifier: 41:37:30:12:5B:98:C4:41:79:2B:C6:76:39:9D:0D:8C:66:B9:88:FF Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A87175BF8BA05C3118780 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf67d240-7a12-3a29-ba9e-09c98c14b6c2.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 24.205.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:87:17:5b:f8:ba:05:c3:11:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=2d93492b-0986-48ed-9469-484f2cd565ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:c5:d8:a4:00:76:4b:c3:0e:cb:22:d3:19: e5:54:5e:4f:bf:1d:0c:54:72:a3:c5:33:da:34:80: ce:51:e3:0d:9d:6b:a0:66:7b:2e:4c:76:c7:3e:97: a6:c5:cb:20:67:ce:a2:dc:32:14:2b:66:f6:ec:ee: 12:f3:c1:61:4d:25:22:d4:43:30:23:ee:ab:4e:46: 65:ac:da:70:a7:da:4a:5f:38:79:94:f6:2f:dd:45: 01:21:a8:a8:1e:ad:6e:d2:ad:80:88:72:bd:70:cf: 39:54:43:8e:26:3d:5a:70:35:45:1a:63:06:d8:e6: bc:95:a0:0f:22:4b:42:a2:39:3a:52:96:84:cf:6a: 7b:3b:53:d3:5b:74:4c:14:4b:ea:ad:cd:fd:78:46: 50:30:03:df:8d:c7:fc:02:47:2d:59:e4:c0:3b:d1: 4d:ed:e3:b6:54:f3:14:4d:8b:ae:f6:3d:91:e9:ee: d5:17:f1:f2:ca:cc:9f:51:95:d8:43:7b:cd:ac:a7: 01:4c:b1:61:30:5b:3f:ec:1d:1f:9c:04:0b:10:de: 38:52:85:3e:e8:e7:7c:7b:a2:b0:ef:3b:ac:6b:12: d9:a5:9f:1d:59:3a:f5:f8:00:73:dc:04:8e:44:74: 1e:2e:fe:db:d8:d2:f1:ea:0d:77:a4:1a:ad:ec:7d: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:37:30:12:5B:98:C4:41:79:2B:C6:76:39:9D:0D:8C:66:B9:88:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cf67d240-7a12-3a29-ba9e-09c98c14b6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.205.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:29:9c:87:34:51:9e:e2:80:af:3d:62:b5:c9:9c:10:6d:c5: 34:5c:9d:4c:95:25:c7:10:eb:6a:d4:5f:c5:67:9c:9d:ac:c0: 88:0d:b6:7f:1c:85:d2:8a:a6:cd:77:67:0d:c9:83:0c:99:6b: 68:3b:e7:e6:b2:1f:75:a4:09:07:dd:22:46:93:8b:11:08:c7: fe:d8:56:d4:c0:50:d4:62:71:7f:5f:30:65:1a:cd:b1:31:db: 69:0d:22:3f:a2:d2:e3:d3:77:4d:b6:f5:69:16:e1:e7:e0:a4: e3:1d:99:56:47:a6:00:f9:02:c9:6f:5f:b0:d4:67:5e:27:73: 76:b7:6b:e4:d5:7f:a1:fe:92:c9:ef:42:0f:53:cc:26:52:52: 88:06:17:dd:09:c2:bc:6b:9c:2c:12:bb:76:64:38:32:8b:16: c8:5c:59:38:36:74:a4:cb:62:73:4a:81:64:04:8f:61:de:bc: bd:ef:70:9e:45:b0:d4:17:31:25:a8:b9:4f:b4:40:f3:3a:e6: e7:63:a5:92:e9:8c:21:1e:37:42:c0:95:1f:a5:4a:b6:68:79: 35:36:17:fe:3b:3b:b1:79:27:83:5b:83:95:57:d8:9e:d2:7f: a7:90:33:c4:b4:10:4e:57:34:b5:e6:35:b9:47:d2:21:20:e3: 2f:21:5d:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCocXW/i6BcMRh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MmQ5MzQ5MmItMDk4Ni00OGVkLTk0NjktNDg0ZjJjZDU2NWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RHF2KQAdkvDDssi0xnlVF5Pvx0MVHKjxTPa NIDOUeMNnWugZnsuTHbHPpemxcsgZ86i3DIUK2b27O4S88FhTSUi1EMwI+6rTkZl rNpwp9pKXzh5lPYv3UUBIaioHq1u0q2AiHK9cM85VEOOJj1acDVFGmMG2Oa8laAP IktCojk6UpaEz2p7O1PTW3RMFEvqrc39eEZQMAPfjcf8AkctWeTAO9FN7eO2VPMU TYuu9j2R6e7VF/HyysyfUZXYQ3vNrKcBTLFhMFs/7B0fnAQLEN44UoU+6Od8e6Kw 7zusaxLZpZ8dWTr1+ABz3ASORHQeLv7b2NLx6g13pBqt7H0cewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE3MBJbmMRBeSvGdjmdDYxmuYj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvY2Y2N2QyNDAtN2ExMi0z YTI5LWJhOWUtMDljOThjMTRiNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGM3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJopnIc0UZ7igK89YrXJnBBtxTRcnUyVJccQ62rUX8VnnJ2swIgNtn8c hdKKps13Zw3JgwyZa2g75+ayH3WkCQfdIkaTixEIx/7YVtTAUNRicX9fMGUazbEx 22kNIj+i0uPTd0229WkW4efgpOMdmVZHpgD5AslvX7DUZ14nc3a3a+TVf6H+ksnv Qg9TzCZSUogGF90JwrxrnCwSu3ZkODKLFshcWTg2dKTLYnNKgWQEj2HevL3vcJ5F sNQXMSWouU+0QPM65udjpZLpjCEeN0LAlR+lSrZoeTU2F/47O7F5J4Nbg5VX2J7S f6eQM8S0EE5XNLXmNblH0iEg4y8hXZc= -----END CERTIFICATE-----Generated at Sat May 10 09:53:00 2025 by rpki-client