$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a64771b4-ca25-3c67-a8b4-80d12af02078.roa File: a64771b4-ca25-3c67-a8b4-80d12af02078.roa (raw, json) Hash identifier: W+eJ0P0IcSsN8Q1lnqASV5UFgWno3dpQYKAvw4qzHRo= Subject key identifier: A3:18:48:EF:5A:44:65:6A:A7:78:85:03:A8:DE:1B:CE:0C:90:5B:AC Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285849A61F46A058FF4338DE743A80 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a64771b4-ca25-3c67-a8b4-80d12af02078.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 19115 IP address blocks: 24.216.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:46:a0:58:ff:43:38:de:74:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=1bbc8790-5f4c-4a70-b54b-f8350502865b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:94:ec:8b:95:a0:aa:f4:2f:cf:35:d9:4e:a7: 7f:f8:27:60:72:9b:ea:f5:d3:e5:00:55:1e:03:ad: 77:1e:f2:32:03:b3:e3:1b:24:5a:c4:10:c1:1d:af: 11:fb:91:17:72:6a:9a:a5:77:e7:0d:17:5a:16:51: 33:5c:8c:9f:ff:e0:a5:b9:75:03:a3:c6:f9:f7:b5: 4c:af:a6:bc:b7:d0:da:a5:cd:b6:7d:6e:c3:e4:01: c6:3b:92:1b:e5:db:de:e0:d8:b1:1e:46:8b:65:ce: d5:0a:90:52:8e:d0:65:8f:31:6d:27:ce:ca:b9:09: 41:57:87:7e:46:53:50:99:18:fc:bb:a8:68:75:4d: 2b:41:a0:e8:86:26:f8:ef:4f:b7:a7:d3:9f:dd:ad: 5e:f7:0e:67:0e:c1:3e:3d:a6:e4:d7:ed:5b:c0:c2: 62:f7:75:17:f6:4a:72:c6:ee:ab:41:ac:1a:46:ce: fd:fe:9c:8b:62:e9:25:7c:84:36:7e:59:5c:72:80: 0b:20:17:98:a4:32:1c:22:a8:a1:b3:4d:45:73:28: b5:fa:21:3b:86:e8:ac:95:4f:84:36:67:56:85:73: 0e:39:e3:51:08:e4:62:f0:58:14:7d:39:ed:da:12: 94:3e:fe:e9:0a:b5:95:72:d2:ec:2d:df:fb:76:e5: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:18:48:EF:5A:44:65:6A:A7:78:85:03:A8:DE:1B:CE:0C:90:5B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a64771b4-ca25-3c67-a8b4-80d12af02078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 24.216.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:00:40:68:d5:cd:8e:d9:9d:38:37:31:31:63:95:53:be:fd: a7:c3:08:33:b6:2a:3c:93:a0:c9:a3:b4:a8:20:bf:87:a2:53: 6d:03:e4:80:73:a0:3f:e9:e2:38:9e:01:6f:5a:b4:77:c6:92: 1b:05:71:61:03:36:4d:34:53:c3:db:f3:98:b7:ad:3d:89:35: 41:83:0b:08:2c:69:b4:0f:30:69:8e:07:bb:00:cb:c7:f0:ae: af:88:a3:c4:26:e8:a0:6b:43:82:29:c4:34:dc:cf:f0:56:75: 32:ae:3c:89:10:24:d2:1b:77:40:e7:cc:d0:94:5d:84:68:55: 8f:6e:b7:ff:03:0b:97:7b:6c:7d:a4:71:c6:4b:fb:d7:4d:e8: a4:d7:4c:c4:72:f6:cb:83:5c:b0:e5:59:2b:a8:43:b4:fd:34: 94:ec:db:32:0e:42:34:4d:2a:b2:3a:43:6d:e4:3a:a3:e0:a0: ce:86:fd:a8:e6:26:b3:d7:b2:ec:fd:44:0b:37:f0:75:8b:51: 7c:9a:93:a5:3c:01:f0:6a:fb:1f:ce:f7:42:2e:f8:22:bc:6c: db:4a:e5:77:04:d5:31:0b:26:e9:8e:55:47:fd:0d:76:30:36: db:cb:3f:48:7d:42:6c:02:b2:84:de:c4:e7:93:2c:da:e3:74: 75:9e:f0:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0agWP9DON50OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MWJiYzg3OTAtNWY0Yy00YTcwLWI1NGItZjgzNTA1MDI4NjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZTsi5WgqvQvzzXZTqd/+Cdgcpvq9dPlAFUe A613HvIyA7PjGyRaxBDBHa8R+5EXcmqapXfnDRdaFlEzXIyf/+CluXUDo8b597VM r6a8t9Dapc22fW7D5AHGO5Ib5dve4NixHkaLZc7VCpBSjtBljzFtJ87KuQlBV4d+ RlNQmRj8u6hodU0rQaDohib470+3p9Of3a1e9w5nDsE+Pabk1+1bwMJi93UX9kpy xu6rQawaRs79/pyLYuklfIQ2fllccoALIBeYpDIcIqihs01Fcyi1+iE7huislU+E NmdWhXMOOeNRCORi8FgUfTnt2hKUPv7pCrWVctLsLd/7duWtrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMYSO9aRGVqp3iFA6jeG84MkFusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYTY0NzcxYjQtY2EyNS0z YzY3LWE4YjQtODBkMTJhZjAyMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGNiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4AQGjVzY7ZnTg3MTFjlVO+/afDCDO2KjyToMmjtKggv4eiU20D5IBz oD/p4jieAW9atHfGkhsFcWEDNk00U8Pb85i3rT2JNUGDCwgsabQPMGmOB7sAy8fw rq+Io8Qm6KBrQ4IpxDTcz/BWdTKuPIkQJNIbd0DnzNCUXYRoVY9ut/8DC5d7bH2k ccZL+9dN6KTXTMRy9suDXLDlWSuoQ7T9NJTs2zIOQjRNKrI6Q23kOqPgoM6G/ajm JrPXsuz9RAs38HWLUXyak6U8AfBq+x/O90Iu+CK8bNtK5XcE1TELJumOVUf9DXYw NtvLP0h9QmwCsoTexOeTLNrjdHWe8NI= -----END CERTIFICATE-----Generated at Sun Apr 27 01:02:54 2025 by rpki-client