$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df4735f8-980a-343b-8e6a-d8c2b68baa11.roa File: df4735f8-980a-343b-8e6a-d8c2b68baa11.roa (raw, json) Hash identifier: nrX1k9/XLdFniglhCNMvrUNicCrmP2m2p7JBRzT40KY= Subject key identifier: E5:5F:B7:48:94:1E:B1:40:F3:6C:68:08:FF:C5:87:BE:9E:8F:F9:EA Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A8BAF31512E1FDC336D80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df4735f8-980a-343b-8e6a-d8c2b68baa11.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 24.241.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:8b:af:31:51:2e:1f:dc:33:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=f07b750e-0aa1-4a48-a49b-13d9da87d1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5c:73:9a:71:16:45:a0:59:30:6f:00:ad:d6: d9:0d:36:1a:03:33:16:3a:bb:dc:fb:60:4d:16:57: f7:8b:ac:b1:63:95:1d:2a:9d:8d:8d:d5:a8:8d:28: 30:df:0a:a4:8d:a8:e7:43:cf:69:43:eb:a1:54:40: 72:18:5e:6c:58:64:54:cd:43:1c:68:cc:02:2c:e1: 72:82:a2:d0:7f:ac:bc:4f:6e:c5:be:ae:2d:8a:5c: 25:36:87:e6:11:2d:a6:07:37:11:e2:8e:cb:97:d6: 22:a5:c1:c5:52:b5:80:c5:aa:ac:a2:f6:bb:ba:9a: ac:64:46:f8:bc:12:a1:94:61:df:e0:6e:32:3f:b1: 22:e7:81:96:71:1c:9e:d0:2d:ee:55:66:8f:34:17: 0e:32:dc:94:23:27:b1:ba:0f:0d:f6:00:80:a4:91: dc:99:29:c2:9e:05:c6:96:09:a3:68:88:e7:c8:34: 4e:36:ab:2f:4b:19:e6:08:74:21:f5:e6:e2:5b:84: 5b:67:82:51:e1:5d:d1:27:9f:10:be:bc:88:76:67: 14:f2:33:4a:d2:56:9f:43:d2:f9:88:76:2a:79:51: 10:17:41:e6:67:32:e5:45:25:f1:e0:76:17:91:04: a5:98:1a:00:b3:f3:c3:a1:49:64:86:3b:e7:5a:7b: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5F:B7:48:94:1E:B1:40:F3:6C:68:08:FF:C5:87:BE:9E:8F:F9:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/df4735f8-980a-343b-8e6a-d8c2b68baa11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.241.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:7d:26:00:e8:ca:60:59:b1:e6:e6:b2:e9:10:38:bd:bf:e7: 2b:50:a4:97:cf:b5:42:6d:7c:e6:46:43:f2:36:d8:a3:7b:d3: 97:50:c2:5b:4f:4b:d0:64:39:1f:08:e7:ec:cc:96:1a:9c:60: 05:95:3c:ea:2b:58:29:29:bc:f6:3e:7c:54:cd:e8:73:83:9b: d3:5c:31:31:ec:d7:45:6e:f6:4a:70:83:59:e1:f5:4d:69:29: fd:1d:9b:33:de:48:3a:e4:86:6f:2a:05:ab:0e:aa:c4:ec:80: 37:0f:87:a4:a1:b7:ed:9d:e5:2d:76:c7:ac:fa:4a:cf:fb:40: 95:25:54:1e:98:c3:97:5d:11:c5:52:56:23:e0:18:6d:22:af: a5:44:de:e3:cf:fe:b7:6e:4d:9e:79:18:56:df:c3:b1:af:1a: 5e:a7:04:3b:88:0d:2b:50:94:b1:c6:09:1f:14:c1:ca:c1:c6: 47:1f:7c:bb:65:10:3d:3d:20:77:9e:2b:bb:78:f9:95:f6:38: 66:a9:e1:4a:0b:84:e8:5b:de:0e:fa:34:3f:40:7c:f2:d6:4c: 41:31:6b:98:b1:29:f9:ac:48:1a:59:fc:e3:33:19:2b:46:06: b3:f6:e1:a1:7f:c2:11:4a:c8:fc:fb:f3:e3:62:8c:43:c1:2f: 61:b3:fa:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCouvMVEuH9wzbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZjA3Yjc1MGUtMGFhMS00YTQ4LWE0OWItMTNkOWRhODdkMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1xzmnEWRaBZMG8ArdbZDTYaAzMWOrvc+2BN Flf3i6yxY5UdKp2NjdWojSgw3wqkjajnQ89pQ+uhVEByGF5sWGRUzUMcaMwCLOFy gqLQf6y8T27Fvq4tilwlNofmES2mBzcR4o7Ll9YipcHFUrWAxaqsova7upqsZEb4 vBKhlGHf4G4yP7Ei54GWcRye0C3uVWaPNBcOMtyUIyexug8N9gCApJHcmSnCngXG lgmjaIjnyDRONqsvSxnmCHQh9ebiW4RbZ4JR4V3RJ58QvryIdmcU8jNK0lafQ9L5 iHYqeVEQF0HmZzLlRSXx4HYXkQSlmBoAs/PDoUlkhjvnWnvzbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVft0iUHrFA82xoCP/Fh76ej/nqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZGY0NzM1ZjgtOTgwYS0z NDNiLThlNmEtZDhjMmI2OGJhYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGPGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL59JgDoymBZsebmsukQOL2/5ytQpJfPtUJtfOZGQ/I22KN705dQwltP S9BkOR8I5+zMlhqcYAWVPOorWCkpvPY+fFTN6HODm9NcMTHs10Vu9kpwg1nh9U1p Kf0dmzPeSDrkhm8qBasOqsTsgDcPh6Sht+2d5S12x6z6Ss/7QJUlVB6Yw5ddEcVS ViPgGG0ir6VE3uPP/rduTZ55GFbfw7GvGl6nBDuIDStQlLHGCR8UwcrBxkcffLtl ED09IHeeK7t4+ZX2OGap4UoLhOhb3g76ND9AfPLWTEExa5ixKfmsSBpZ/OMzGStG BrP24aF/whFKyPz78+NijEPBL2Gz+uE= -----END CERTIFICATE-----Generated at Sat May 10 09:52:11 2025 by rpki-client