$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a33fbf21-f50e-3e09-8ce9-64c806432986.roa File: a33fbf21-f50e-3e09-8ce9-64c806432986.roa (raw, json) Hash identifier: JVXOHOPgAlZFg4eCsLKJB+usizp44RDUH+IVE8r7fMo= Subject key identifier: DB:FD:A0:E2:8F:4D:3A:5A:CC:58:60:C7:A6:DD:54:43:90:8D:64:1D Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D19CB1681D26F1BEA89970 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a33fbf21-f50e-3e09-8ce9-64c806432986.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 159.111.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:9c:b1:68:1d:26:f1:be:a8:99:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=1d49fb00-e3c0-43db-92ee-0101945f733c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:ce:2a:0e:b5:a4:9b:a6:2d:80:58:e9:a0: c8:10:ee:6c:f5:7b:82:3e:f6:55:56:36:c3:d1:a7: 52:b3:d9:9f:9f:06:9e:87:2b:8a:94:ab:5b:f6:e6: 7c:52:e2:f9:92:78:f4:92:bc:e0:e1:1c:b6:e3:8c: 8e:67:6f:40:a1:f2:e5:92:4b:ee:e0:6d:95:24:69: 59:3b:af:34:02:bf:71:66:91:04:7c:4f:fc:b9:10: d7:3c:81:5e:5c:a8:02:c1:56:76:c5:a6:bb:f5:26: 0e:43:b3:68:f1:8f:52:69:d9:be:55:94:51:a3:f7: 21:08:c4:34:fb:42:71:5e:46:8f:f7:91:f1:94:2b: 13:eb:9b:18:9f:3f:16:92:7d:8b:41:fd:db:06:88: 97:13:46:f5:f7:84:d3:18:97:9e:aa:6c:1f:a4:7d: 8a:a6:18:60:b0:74:c3:78:13:af:a7:81:b2:bb:ab: 85:e7:95:1e:dd:b4:64:23:04:ad:6a:d6:8f:62:95: 0b:00:00:4c:24:0e:35:3f:ba:a0:fb:6c:f0:5d:9c: b1:2e:61:13:05:ba:70:e1:dd:7b:63:a6:8e:31:25: 12:9b:c8:97:e1:fe:34:af:b1:a8:c5:e0:8f:66:11: 31:c7:03:00:a5:87:82:15:9d:4e:04:ae:3a:1a:08: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FD:A0:E2:8F:4D:3A:5A:CC:58:60:C7:A6:DD:54:43:90:8D:64:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a33fbf21-f50e-3e09-8ce9-64c806432986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 159.111.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:d0:e9:70:f7:43:a1:6c:47:1b:09:0d:0b:76:14:bd:4e:ab: 5b:aa:17:3b:80:4e:53:08:33:ca:ff:6c:15:d8:5f:f0:c1:01: c7:49:9d:5e:56:39:2c:ed:df:e4:01:d8:03:cf:b1:b0:0b:6d: 0e:ef:1d:d9:1b:d9:a2:d6:f7:0b:65:24:3c:7f:a6:6a:fd:6e: 50:1a:56:bb:ef:c1:7d:4a:42:d5:0b:51:71:7b:51:60:f4:39: f1:31:a3:a3:db:4b:95:07:ed:4b:c5:91:d7:d7:94:b7:9d:8a: d1:d1:e3:d7:3e:63:c8:e2:df:93:ac:32:cf:da:ad:38:64:ba: ac:9e:9d:0a:51:a6:a1:31:ee:a2:fd:c1:ff:a4:9e:e5:84:49: c2:9d:9f:88:49:fa:40:06:95:18:d0:8a:a3:65:fb:cc:4e:90: 9f:44:af:af:ad:ed:22:41:7e:04:ff:84:da:7e:6d:a2:a8:f8: eb:f0:5b:0a:dd:a9:db:37:d8:6f:15:cc:23:4b:b6:68:79:ce: 05:a8:43:de:b6:10:e2:6e:2d:a1:55:af:c0:ba:82:b4:90:42: 70:8e:be:91:fa:3c:2c:88:81:d5:5e:ee:12:d4:b7:ef:3d:14: 54:ee:b4:5e:4b:a6:b7:4d:35:cf:43:18:68:b1:58:57:82:e9: 42:6d:e6:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0ZyxaB0m8b6omXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MWQ0OWZiMDAtZTNjMC00M2RiLTkyZWUtMDEwMTk0NWY3MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1zOKg61pJumLYBY6aDIEO5s9XuCPvZVVjbD 0adSs9mfnwaehyuKlKtb9uZ8UuL5knj0krzg4Ry244yOZ29AofLlkkvu4G2VJGlZ O680Ar9xZpEEfE/8uRDXPIFeXKgCwVZ2xaa79SYOQ7No8Y9Sadm+VZRRo/chCMQ0 +0JxXkaP95HxlCsT65sYnz8Wkn2LQf3bBoiXE0b194TTGJeeqmwfpH2KphhgsHTD eBOvp4Gyu6uF55Ue3bRkIwStataPYpULAABMJA41P7qg+2zwXZyxLmETBbpw4d17 Y6aOMSUSm8iX4f40r7GoxeCPZhExxwMApYeCFZ1OBK46GgjTzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNv9oOKPTTpazFhgx6bdVEOQjWQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTMzZmJmMjEtZjUwZS0z ZTA5LThjZTktNjRjODA2NDMyOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn2/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMjQ6XD3Q6FsRxsJDQt2FL1Oq1uqFzuATlMIM8r/bBXYX/DBAcdJnV5W OSzt3+QB2APPsbALbQ7vHdkb2aLW9wtlJDx/pmr9blAaVrvvwX1KQtULUXF7UWD0 OfExo6PbS5UH7UvFkdfXlLeditHR49c+Y8ji35OsMs/arThkuqyenQpRpqEx7qL9 wf+knuWEScKdn4hJ+kAGlRjQiqNl+8xOkJ9Er6+t7SJBfgT/hNp+baKo+OvwWwrd qds32G8VzCNLtmh5zgWoQ962EOJuLaFVr8C6grSQQnCOvpH6PCyIgdVe7hLUt+89 FFTutF5LprdNNc9DGGixWFeC6UJt5iU= -----END CERTIFICATE-----Generated at Sun Apr 27 00:55:08 2025 by rpki-client