$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa File: eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa (raw, json) Hash identifier: IkRzkSNWBNAFt1jwKDc9hvWEArf/xD2qV7chNY3Pu6k= Subject key identifier: 0D:73:FA:72:B6:C9:D4:15:92:5D:45:C1:D1:3D:B7:54:24:7B:EC:5A Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20B18F2B85868AC5E4A85C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 68.189.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0b:18:f2:b8:58:68:ac:5e:4a:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=4a2b4fca-a2b0-4129-bb4a-6bee2ddbae00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:64:31:37:30:6a:d6:e6:0a:99:80:f8:1a:d5: ab:85:95:0e:41:3e:eb:37:df:91:3a:3c:93:cb:29: c4:cc:4b:4c:25:36:0f:94:1b:25:74:ee:fc:1b:4d: c1:84:39:5e:02:b6:45:12:ab:57:de:e9:45:8c:02: 8e:71:69:c0:e0:95:76:fe:9f:b5:0a:27:74:16:2e: 95:db:c3:c3:a1:dd:b6:ee:25:80:22:40:54:b7:6d: 57:76:89:74:f0:ed:f2:7e:53:03:5a:dd:4d:aa:6d: 09:3a:6b:b0:0c:76:70:89:c7:75:3e:cb:fc:f8:45: c3:55:1d:00:62:bd:0d:7c:b2:e8:b6:42:c1:73:7b: 44:de:3a:57:90:99:d9:20:36:9a:a8:d6:e9:d3:f6: b0:6d:41:98:c4:7e:84:3b:9e:13:ae:c1:78:1b:f5: f9:79:9f:93:98:ca:ce:9f:37:93:83:de:f6:02:56: 98:5c:b8:29:1c:cb:43:28:87:07:29:90:e3:27:39: 44:3e:a7:ad:9b:f2:8e:59:9a:a3:c7:e6:a7:ac:a0: 78:34:6c:fe:d4:82:2b:08:25:76:ba:aa:27:02:6c: 33:1b:a0:86:d6:b8:8f:7d:c0:34:8f:07:d5:b6:f6: 81:3e:15:bf:98:6e:5b:d4:6e:fa:02:a7:7a:34:09: 0d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:73:FA:72:B6:C9:D4:15:92:5D:45:C1:D1:3D:B7:54:24:7B:EC:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eceb7066-da49-38ea-93e7-a165b0aa7b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.189.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:eb:b0:1d:e6:44:c6:60:ca:af:d9:5b:81:22:83:85:30:44: d8:03:5b:e2:58:61:4d:80:af:71:f1:6c:70:b9:ba:62:88:ff: ab:d5:ee:2a:04:00:8d:3f:f4:6d:4a:76:e8:75:a5:51:d8:58: 09:fc:c8:2c:a3:70:3b:7d:72:b9:e0:81:b8:7f:e2:29:ed:88: e1:15:cd:0d:69:6f:10:c8:ea:72:9a:c1:32:1d:c6:6b:03:65: 6a:9d:5f:3b:92:24:8f:18:b2:b8:b7:ce:89:a3:47:53:be:06: 7a:e1:2c:41:25:8f:16:72:e8:d5:fc:d9:5f:cf:51:ed:7a:a5: e4:ce:9c:0e:02:0d:3a:ba:62:80:c2:01:0c:25:1c:6a:1a:b3: 5b:bb:dc:0a:8f:8a:3d:fd:96:63:aa:9b:6d:43:7f:70:41:a3: ce:78:7f:8b:9c:3f:66:04:44:b0:20:e8:95:4e:47:e1:33:3f: bc:49:ed:da:f0:3b:d5:fc:25:68:e1:1b:d3:02:98:04:38:8b: 5d:94:3e:56:e4:e7:ba:dd:8c:6f:46:6c:e1:29:71:72:97:67: 28:e3:77:5a:45:73:50:48:e6:8a:96:23:aa:67:f6:2c:f9:88: a1:53:f9:ea:0a:b5:26:d9:48:f5:d4:54:26:c0:0a:42:e9:60: 59:b1:69:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCxjyuFhorF5KhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NGEyYjRmY2EtYTJiMC00MTI5LWJiNGEtNmJlZTJkZGJhZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmQxNzBq1uYKmYD4GtWrhZUOQT7rN9+ROjyT yynEzEtMJTYPlBsldO78G03BhDleArZFEqtX3ulFjAKOcWnA4JV2/p+1Cid0Fi6V 28PDod227iWAIkBUt21Xdol08O3yflMDWt1Nqm0JOmuwDHZwicd1Psv8+EXDVR0A Yr0NfLLotkLBc3tE3jpXkJnZIDaaqNbp0/awbUGYxH6EO54TrsF4G/X5eZ+TmMrO nzeTg972AlaYXLgpHMtDKIcHKZDjJzlEPqetm/KOWZqjx+anrKB4NGz+1IIrCCV2 uqonAmwzG6CG1riPfcA0jwfVtvaBPhW/mG5b1G76Aqd6NAkNJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1z+nK2ydQVkl1FwdE9t1Qke+xaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZWNlYjcwNjYtZGE0OS0z OGVhLTkzZTctYTE2NWIwYWE3YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERL2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbrsB3mRMZgyq/ZW4Eig4UwRNgDW+JYYU2Ar3HxbHC5umKI/6vV7ioE AI0/9G1Kduh1pVHYWAn8yCyjcDt9crnggbh/4intiOEVzQ1pbxDI6nKawTIdxmsD ZWqdXzuSJI8Ysri3zomjR1O+BnrhLEEljxZy6NX82V/PUe16peTOnA4CDTq6YoDC AQwlHGoas1u73AqPij39lmOqm21Df3BBo854f4ucP2YERLAg6JVOR+EzP7xJ7drw O9X8JWjhG9MCmAQ4i12UPlbk57rdjG9GbOEpcXKXZyjjd1pFc1BI5oqWI6pn9iz5 iKFT+eoKtSbZSPXUVCbACkLpYFmxaSQ= -----END CERTIFICATE-----Generated at Fri May 9 22:18:20 2025 by rpki-client