$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa File: 1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa (raw, json) Hash identifier: 1YjGETVLKrc1TiYD52gP6xziN9vnEhw72dkIR/cf7tk= Subject key identifier: 9C:F7:32:06:87:75:C5:41:58:CC:CC:3B:35:C3:68:43:43:9C:31:63 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849C20B16BA11BE508D531E2FC0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 20115 IP address blocks: 68.117.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0b:16:ba:11:be:50:8d:53:1e:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=aa1b26f8-68db-411a-8c0e-dee1524ad0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:02:65:81:b7:83:31:4d:e0:40:e3:be:7d:0e: 77:e5:98:fb:f1:49:fc:37:87:01:0c:a8:8e:2f:c2: 63:6f:73:6d:90:6c:f8:30:ca:9f:c8:c6:e8:03:fc: aa:19:4d:fd:1e:62:df:fa:0b:1f:8a:73:21:83:0a: 6f:fa:71:74:ce:a1:78:e5:0a:8a:5e:38:0b:7c:73: f6:1b:d4:03:2b:34:68:09:cc:9e:f4:a6:38:17:49: 68:49:c7:23:bc:ee:81:54:cc:cd:7d:7a:6b:49:24: 66:8a:14:d3:5e:9b:29:fe:97:33:08:08:3b:91:f9: cb:73:47:3c:c4:b9:03:fd:a1:07:1f:78:5a:c2:29: 6a:8a:c7:51:ba:61:51:b4:63:94:df:95:5c:36:d4: 5e:61:9a:82:9f:64:eb:1f:cb:b5:dc:50:ab:aa:74: e4:e0:69:61:9d:ae:9e:b6:69:44:96:ca:f5:20:f4: 60:52:f8:d8:60:50:d7:a2:08:e5:dc:22:84:8d:9c: 2f:39:36:61:fb:33:8e:48:06:78:23:43:94:ac:66: fa:2c:86:ca:7f:86:77:31:29:52:29:e3:0c:55:5b: f9:e7:8d:63:f3:ad:e2:08:a9:ea:c0:6e:fc:10:52: 9a:07:c4:f2:85:e7:bd:ba:f3:6a:1f:87:af:6c:90: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F7:32:06:87:75:C5:41:58:CC:CC:3B:35:C3:68:43:43:9C:31:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1dfd87fe-08cc-36ee-87a1-2a136a7b768f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.117.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:7f:6c:f2:35:7c:3f:c9:29:a2:7e:9c:17:ba:48:17:67:1e: ed:b8:19:02:9e:5f:16:97:9e:46:bb:e8:0a:cb:3e:49:c8:36: b2:27:ea:8f:6e:56:2a:f5:72:d2:db:6c:a2:d8:d5:e8:bb:e2: 4f:3a:04:a4:fb:3b:33:7f:72:1e:a9:bf:bc:d7:6c:c1:fc:bc: 45:eb:5d:d5:59:60:7d:64:a2:62:94:13:34:19:2d:dc:2b:c5: 8b:87:fa:e7:cd:5d:db:d5:87:f4:9a:3a:d9:93:fc:bc:18:53: c0:78:81:d7:37:d3:db:98:47:7f:06:8d:2f:70:f1:30:aa:b0: 7a:0d:ea:73:b4:e1:36:3d:5e:15:45:2b:c4:60:1d:ae:80:d2: 2d:35:83:c0:66:a9:3f:55:51:2d:8d:e6:41:bf:47:7f:75:75: f4:fc:85:c3:b8:13:ad:c9:b7:e2:b2:ec:d6:f2:cb:85:5b:db: ed:fe:dd:33:09:da:77:f3:a8:af:b0:69:55:bc:6b:61:67:64: 03:65:ed:f7:ae:cd:06:02:66:3e:7a:28:32:df:74:71:26:cd: e2:ad:02:cc:ec:6f:ce:cd:80:67:49:2f:95:41:1b:df:a1:b2: 41:70:46:bf:67:79:84:13:c6:dc:5f:a0:8a:48:b6:1f:c3:35: c6:a8:0f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCxa6Eb5QjVMeL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YWExYjI2ZjgtNjhkYi00MTFhLThjMGUtZGVlMTUyNGFkMGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQJlgbeDMU3gQOO+fQ535Zj78Un8N4cBDKiO L8Jjb3NtkGz4MMqfyMboA/yqGU39HmLf+gsfinMhgwpv+nF0zqF45QqKXjgLfHP2 G9QDKzRoCcye9KY4F0loSccjvO6BVMzNfXprSSRmihTTXpsp/pczCAg7kfnLc0c8 xLkD/aEHH3hawilqisdRumFRtGOU35VcNtReYZqCn2TrH8u13FCrqnTk4Glhna6e tmlElsr1IPRgUvjYYFDXogjl3CKEjZwvOTZh+zOOSAZ4I0OUrGb6LIbKf4Z3MSlS KeMMVVv5541j863iCKnqwG78EFKaB8Tyhee9uvNqH4evbJB83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz3MgaHdcVBWMzMOzXDaENDnDFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMWRmZDg3ZmUtMDhjYy0z NmVlLTg3YTEtMmExMzZhN2I3NjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRHV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJ/bPI1fD/JKaJ+nBe6SBdnHu24GQKeXxaXnka76ArLPknINrIn6o9u Vir1ctLbbKLY1ei74k86BKT7OzN/ch6pv7zXbMH8vEXrXdVZYH1komKUEzQZLdwr xYuH+ufNXdvVh/SaOtmT/LwYU8B4gdc309uYR38GjS9w8TCqsHoN6nO04TY9XhVF K8RgHa6A0i01g8BmqT9VUS2N5kG/R391dfT8hcO4E63Jt+Ky7Nbyy4Vb2+3+3TMJ 2nfzqK+waVW8a2FnZANl7feuzQYCZj56KDLfdHEmzeKtAszsb87NgGdJL5VBG9+h skFwRr9neYQTxtxfoIpIth/DNcaoD8o= -----END CERTIFICATE-----Generated at Mon Jun 16 02:07:53 2025 by rpki-client