$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df3c5052-13de-3885-b0ef-eb30de8475de.roa File: df3c5052-13de-3885-b0ef-eb30de8475de.roa (raw, json) Hash identifier: M9HrWr+21pfDoDAySI8v16ckqYRuRgl12pe4HAMJWgU= Subject key identifier: 91:D4:9E:F9:CD:86:7C:BD:2D:73:CC:61:52:8F:1A:9B:BE:13:6F:34 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A83F50F6CCD3407B33880 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df3c5052-13de-3885-b0ef-eb30de8475de.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 66.188.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:83:f5:0f:6c:cd:34:07:b3:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=81d56e7b-0e4a-446a-9a51-aed3883b3177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d3:6c:6d:c3:2c:f6:2c:c1:0f:9c:08:26:f6: bc:dc:3c:44:7b:05:97:bc:18:9a:d6:a3:6d:25:e5: dd:f5:d1:cd:27:f6:e4:77:88:0b:ea:3e:76:71:17: 4e:60:2d:62:07:01:ab:28:d7:bd:5d:29:40:96:11: 6c:34:45:1a:e9:7e:9c:3b:fa:2e:11:cf:0d:e7:4f: 3e:2b:46:d8:36:87:41:9e:d3:18:65:47:f8:bf:98: da:94:fd:fe:1f:a9:4e:d7:7c:65:de:73:4a:99:fb: 5e:4a:92:06:27:34:96:de:7f:09:aa:4d:ae:9a:96: 15:1d:87:8f:da:7d:df:7c:6b:78:d9:8d:de:4c:53: 5d:e2:7f:e2:40:a8:b7:0c:84:00:0c:65:06:d1:db: 20:a2:3f:de:20:8e:a0:95:e2:70:c3:ae:e0:24:3d: 7a:df:37:de:98:e5:3c:ba:60:09:88:65:04:6d:17: af:89:ab:eb:b6:61:e0:3d:64:fe:cd:17:5b:58:79: 2f:b9:f4:87:a0:b7:d9:24:1e:89:8c:06:65:11:10: 8e:8d:04:c4:0e:d6:df:60:c3:ca:75:fd:61:30:28: 21:22:f3:97:cc:f6:12:60:27:c3:55:55:50:0b:ba: b7:00:d0:a7:27:44:e0:ea:d5:6c:cf:d8:74:ea:4b: 83:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D4:9E:F9:CD:86:7C:BD:2D:73:CC:61:52:8F:1A:9B:BE:13:6F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df3c5052-13de-3885-b0ef-eb30de8475de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.188.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2e:31:4e:d0:1a:fc:e1:27:36:57:17:38:1e:6e:b1:c0:df: 87:11:77:6d:72:70:5f:26:67:b1:25:32:2d:3b:21:e8:d6:5c: eb:f7:1a:0a:d3:02:c6:f4:83:d9:11:8a:f4:49:b4:0a:1d:bc: 0a:d8:65:8e:8b:38:01:f1:65:cf:df:39:af:63:93:d7:d0:b0: 51:a9:6e:d9:22:a4:9a:b8:43:53:b0:e7:99:be:1a:6d:8d:33: ac:ca:ca:69:41:8d:b2:50:c9:63:73:5c:a2:4f:93:6f:a6:70: b0:e1:9e:f5:c0:a0:c5:ff:a3:a6:bd:0b:12:4e:f7:45:75:51: e1:e1:0e:7d:d7:6f:2e:b6:80:e7:8a:b3:5f:2b:c6:5c:a0:6d: 55:a9:50:b8:ae:03:76:ae:ef:8a:6e:57:1d:f9:36:f6:9a:b3: 76:48:db:a0:87:fb:1d:ff:27:96:2f:81:6e:d6:48:91:19:f3: 46:fc:51:9f:b4:cc:e4:83:c7:af:02:21:9f:cb:b4:04:c6:d6: 08:7d:ce:32:4d:94:b2:20:a7:f4:2b:d4:9f:d3:91:74:70:9c: 13:df:40:83:f6:e5:50:90:7f:ad:75:94:6d:d0:69:5c:87:65: aa:2e:8e:bd:f3:86:3e:78:e6:68:e5:97:30:89:be:ce:08:e8: d5:21:91:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCoP1D2zNNAezOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ODFkNTZlN2ItMGU0YS00NDZhLTlhNTEtYWVkMzg4M2IzMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtNsbcMs9izBD5wIJva83DxEewWXvBia1qNt JeXd9dHNJ/bkd4gL6j52cRdOYC1iBwGrKNe9XSlAlhFsNEUa6X6cO/ouEc8N508+ K0bYNodBntMYZUf4v5jalP3+H6lO13xl3nNKmfteSpIGJzSW3n8Jqk2umpYVHYeP 2n3ffGt42Y3eTFNd4n/iQKi3DIQADGUG0dsgoj/eII6gleJww67gJD163zfemOU8 umAJiGUEbReviavrtmHgPWT+zRdbWHkvufSHoLfZJB6JjAZlERCOjQTEDtbfYMPK df1hMCghIvOXzPYSYCfDVVVQC7q3ANCnJ0Tg6tVsz9h06kuDiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHUnvnNhny9LXPMYVKPGpu+E280MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGYzYzUwNTItMTNkZS0z ODg1LWIwZWYtZWIzMGRlODQ3NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQrzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcuMU7QGvzhJzZXFzgebrHA34cRd21ycF8mZ7ElMi07IejWXOv3GgrT Asb0g9kRivRJtAodvArYZY6LOAHxZc/fOa9jk9fQsFGpbtkipJq4Q1Ow55m+Gm2N M6zKymlBjbJQyWNzXKJPk2+mcLDhnvXAoMX/o6a9CxJO90V1UeHhDn3Xby62gOeK s18rxlygbVWpULiuA3au74puVx35Nvaas3ZI26CH+x3/J5YvgW7WSJEZ80b8UZ+0 zOSDx68CIZ/LtATG1gh9zjJNlLIgp/Qr1J/TkXRwnBPfQIP25VCQf611lG3QaVyH Zaoujr3zhj545mjllzCJvs4I6NUhkSQ= -----END CERTIFICATE-----Generated at Sun May 11 16:38:54 2025 by rpki-client