$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e15d2c7f-8adf-36a3-98a5-b46398c0a37e.roa File: e15d2c7f-8adf-36a3-98a5-b46398c0a37e.roa (raw, json) Hash identifier: FEFyyp3cConZ6OTFyhl29RR8zNfZ8gntUXenT/F+YdI= Subject key identifier: 42:CC:C2:F6:ED:2C:F1:1C:B6:3C:5D:34:8B:C3:2F:34:FF:A7:81:F1 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20A77E7EBE1F8F52468AD70 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e15d2c7f-8adf-36a3-98a5-b46398c0a37e.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 71.86.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:77:e7:eb:e1:f8:f5:24:68:ad:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=74e46f76-df55-4c02-ab3c-940f827f39ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:1e:7f:0c:07:7d:73:ac:a5:d1:78:da:dd: 10:1f:ab:d4:36:cf:1a:be:ba:75:c1:81:8b:7f:b7: ba:dd:60:7f:11:72:bc:02:29:ed:f7:ef:d0:0c:ea: f8:5a:2c:82:79:88:0f:fc:0f:ff:30:19:40:14:35: 27:ca:a5:8c:1b:3a:8a:2e:91:91:69:0c:6c:4e:db: 8a:30:c1:0f:ad:94:93:71:52:e7:95:0b:1c:f5:c1: a7:9c:25:86:53:f4:02:1a:44:f6:e1:cc:f1:fc:bb: f1:24:8d:be:93:ad:44:ae:1c:cd:97:0c:16:b1:19: 01:39:32:51:d6:ee:c5:88:bb:6e:42:a3:85:21:44: 40:84:18:f0:1b:63:91:54:eb:d6:bf:4d:c0:13:9a: 74:94:da:18:ab:3f:fb:2d:7a:e7:18:7e:48:c2:19: 0c:e5:a8:d7:59:8f:98:56:21:8e:8e:84:3f:dc:23: da:28:ba:ee:9c:9b:55:69:08:dc:84:64:62:97:74: eb:e2:e9:67:a1:90:86:ed:25:54:60:66:d7:9d:02: 6e:c9:a8:a2:32:23:59:22:90:30:98:dd:a5:fa:da: 84:ca:50:54:1d:6a:60:5b:5d:ca:d8:47:7d:1a:22: 2c:65:88:b8:1e:53:10:0a:33:e2:22:67:d4:67:0d: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:C2:F6:ED:2C:F1:1C:B6:3C:5D:34:8B:C3:2F:34:FF:A7:81:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e15d2c7f-8adf-36a3-98a5-b46398c0a37e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.86.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:7f:af:e4:19:db:cf:4a:00:a7:48:e8:92:4d:4c:58:7c:f1: 03:54:f8:50:52:fb:c3:1c:a7:ac:64:66:4c:e9:bc:44:1a:84: 69:29:47:8f:9c:13:bb:67:61:2e:9d:4e:51:1d:33:19:02:dd: f8:43:c3:ea:d9:86:15:88:66:bb:ad:86:1f:ee:c6:25:1b:c4: 41:dc:06:36:63:e4:84:ff:bf:ec:14:28:91:67:ee:f4:5b:f8: 3e:ea:b6:5e:be:9e:ff:0d:fb:df:0e:23:9e:b9:eb:2e:eb:4d: 65:9d:7f:9b:31:38:53:fe:25:93:e2:97:82:b7:8f:ac:94:c0: 55:89:06:19:6b:4f:a4:b5:7b:f0:76:e7:02:09:56:76:ed:e6: 07:33:e4:2f:55:bd:7b:41:b3:69:2e:97:e2:84:1f:13:2a:b5: 13:1e:ec:a4:ce:37:47:31:45:d9:27:ee:2c:fa:a1:44:c9:a3: 21:e5:ec:3d:9b:38:65:3f:a6:5b:bd:e3:85:b1:ad:91:9e:a2: 81:db:01:10:64:7d:96:ab:65:1a:44:11:2e:5b:b4:05:8e:c6: 85:d4:c8:ca:70:a0:69:9f:0a:8d:a5:88:7f:f5:64:66:6c:b7: 71:f0:96:bf:65:bf:8c:9b:8a:57:aa:51:72:1f:74:b8:de:c0: 8f:fa:d4:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCnfn6+H49SRorXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NzRlNDZmNzYtZGY1NS00YzAyLWFiM2MtOTQwZjgyN2YzOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOoefwwHfXOspdF42t0QH6vUNs8avrp1wYGL f7e63WB/EXK8Aint9+/QDOr4WiyCeYgP/A//MBlAFDUnyqWMGzqKLpGRaQxsTtuK MMEPrZSTcVLnlQsc9cGnnCWGU/QCGkT24czx/LvxJI2+k61ErhzNlwwWsRkBOTJR 1u7FiLtuQqOFIURAhBjwG2ORVOvWv03AE5p0lNoYqz/7LXrnGH5IwhkM5ajXWY+Y ViGOjoQ/3CPaKLrunJtVaQjchGRil3Tr4ulnoZCG7SVUYGbXnQJuyaiiMiNZIpAw mN2l+tqEylBUHWpgW13K2Ed9GiIsZYi4HlMQCjPiImfUZw0l0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELMwvbtLPEctjxdNIvDLzT/p4HxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTE1ZDJjN2YtOGFkZi0z NmEzLTk4YTUtYjQ2Mzk4YzBhMzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR1ZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV/r+QZ289KAKdI6JJNTFh88QNU+FBS+8Mcp6xkZkzpvEQahGkpR4+c E7tnYS6dTlEdMxkC3fhDw+rZhhWIZruthh/uxiUbxEHcBjZj5IT/v+wUKJFn7vRb +D7qtl6+nv8N+98OI5656y7rTWWdf5sxOFP+JZPil4K3j6yUwFWJBhlrT6S1e/B2 5wIJVnbt5gcz5C9VvXtBs2kul+KEHxMqtRMe7KTON0cxRdkn7iz6oUTJoyHl7D2b OGU/plu944WxrZGeooHbARBkfZarZRpEES5btAWOxoXUyMpwoGmfCo2liH/1ZGZs t3Hwlr9lv4ybileqUXIfdLjewI/61Ic= -----END CERTIFICATE-----Generated at Fri May 9 11:30:21 2025 by rpki-client