$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/836e2e44-9960-31be-b75f-5c6285cc0d06.roa File: 836e2e44-9960-31be-b75f-5c6285cc0d06.roa (raw, json) Hash identifier: ORlQpuq5KiaKU7IPj5KcrQcPIoU3/ax5YZYA8caRns4= Subject key identifier: 30:63:1A:07:E9:D9:C4:CD:16:09:DF:22:69:C3:5C:59:E4:5C:DF:8B Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1E4FCC2AB10DD8C905200 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/836e2e44-9960-31be-b75f-5c6285cc0d06.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 47.224.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:e4:fc:c2:ab:10:dd:8c:90:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=e68e4e58-d4b2-4ca5-a741-24e3c21ffa0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3f:51:5e:7d:61:2f:05:06:14:20:79:96:7a: 03:fc:6e:8b:79:11:e0:4f:97:da:cf:b4:21:28:8e: 10:69:73:8b:7f:e5:a0:e6:47:e6:df:ac:9c:36:32: 50:58:e8:0f:1e:3f:5f:a3:ff:c6:bd:12:aa:9f:4e: 15:50:c7:30:e2:60:a6:98:c8:87:08:c2:2d:01:e1: 39:c3:e6:17:b0:f6:e4:fa:05:17:39:78:9c:85:aa: fd:d7:a6:c2:3d:a6:4e:93:1c:f3:98:46:d0:8c:60: 76:f5:81:33:37:5b:86:fb:c9:53:7a:bc:4c:6a:e5: 7f:67:57:b8:23:32:88:15:77:fd:c2:c9:26:03:69: a2:2d:eb:c5:11:09:af:3c:3f:c5:bb:eb:52:1b:b2: d4:d2:93:24:40:b6:b6:75:89:de:fb:48:ca:1c:e1: a4:e2:04:1d:89:ea:ff:09:f5:59:03:0b:e2:c2:e9: f6:34:9f:76:5f:d3:a9:2a:4e:e1:9b:d6:7e:84:d2: 56:2b:46:92:9a:d5:81:fe:b4:b6:e6:c2:ed:0f:ff: 4a:61:d4:04:e9:a3:7b:09:fd:8e:f7:21:47:f1:e7: 73:53:a9:be:39:79:0f:42:21:29:cc:b0:c3:86:b0: 81:9c:28:b8:35:35:14:b0:35:4a:9b:fa:f6:46:11: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:63:1A:07:E9:D9:C4:CD:16:09:DF:22:69:C3:5C:59:E4:5C:DF:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/836e2e44-9960-31be-b75f-5c6285cc0d06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.224.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:fd:14:be:10:35:5d:8f:8f:84:bb:73:fe:6c:99:98:f6:00: 34:ba:cd:cd:b2:5e:73:35:5b:a8:5f:c5:2d:78:36:6b:6f:c3: 83:f9:9a:ea:ec:30:6f:0e:cc:db:05:5a:c1:47:7c:73:16:46: 11:79:f0:e9:ba:87:3f:1f:8a:55:00:89:e7:6f:57:d0:69:10: 4c:0a:6f:98:a1:1e:57:f1:eb:be:c1:09:50:51:b0:42:a1:c3: 80:c8:2d:9c:a5:9d:5a:f3:aa:ff:7b:3e:7f:a4:4b:9e:fb:17: b7:9c:43:c3:63:f9:89:55:90:9f:49:69:65:99:89:08:60:c4: 69:64:53:c8:9b:1e:5e:05:e1:55:a9:b2:0e:35:d2:4b:7b:8a: d4:70:d2:aa:05:f2:40:53:d6:46:44:d8:c6:c3:8a:27:29:8b: 2e:56:7f:fd:08:7b:31:aa:83:65:5c:af:30:f6:08:5b:be:d4: fe:07:8d:4a:89:ed:f2:ab:1c:b8:fa:12:55:d0:19:89:97:24: 96:00:ee:39:0a:30:86:e7:02:a2:e4:4b:5c:d1:d1:d7:46:ef: 26:47:31:c6:e6:52:ca:a3:48:c1:7c:ca:a9:e1:78:7a:7d:f7: 6a:73:3c:cd:18:14:69:08:ef:c9:d3:b7:a6:6c:bf:09:7a:4d: 9f:6a:a7:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0eT8wqsQ3YyQUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZTY4ZTRlNTgtZDRiMi00Y2E1LWE3NDEtMjRlM2MyMWZmYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD9RXn1hLwUGFCB5lnoD/G6LeRHgT5faz7Qh KI4QaXOLf+Wg5kfm36ycNjJQWOgPHj9fo//GvRKqn04VUMcw4mCmmMiHCMItAeE5 w+YXsPbk+gUXOXichar916bCPaZOkxzzmEbQjGB29YEzN1uG+8lTerxMauV/Z1e4 IzKIFXf9wskmA2miLevFEQmvPD/Fu+tSG7LU0pMkQLa2dYne+0jKHOGk4gQdier/ CfVZAwviwun2NJ92X9OpKk7hm9Z+hNJWK0aSmtWB/rS25sLtD/9KYdQE6aN7Cf2O 9yFH8edzU6m+OXkPQiEpzLDDhrCBnCi4NTUUsDVKm/r2RhHAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBjGgfp2cTNFgnfImnDXFnkXN+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvODM2ZTJlNDQtOTk2MC0z MWJlLWI3NWYtNWM2Mjg1Y2MwZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGL+DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK79FL4QNV2Pj4S7c/5smZj2ADS6zc2yXnM1W6hfxS14Nmtvw4P5murs MG8OzNsFWsFHfHMWRhF58Om6hz8filUAiedvV9BpEEwKb5ihHlfx677BCVBRsEKh w4DILZylnVrzqv97Pn+kS577F7ecQ8Nj+YlVkJ9JaWWZiQhgxGlkU8ibHl4F4VWp sg410kt7itRw0qoF8kBT1kZE2MbDiicpiy5Wf/0IezGqg2VcrzD2CFu+1P4HjUqJ 7fKrHLj6ElXQGYmXJJYA7jkKMIbnAqLkS1zR0ddG7yZHMcbmUsqjSMF8yqnheHp9 92pzPM0YFGkI78nTt6Zsvwl6TZ9qp6w= -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:11 2025 by rpki-client