$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ba7c9da2-ca01-32c8-bfab-e27672cf0949.roa File: ba7c9da2-ca01-32c8-bfab-e27672cf0949.roa (raw, json) Hash identifier: 5s7lRYKZCYfkOirzJdQ8TWRxRtZ9mKBZx+jWTq7E77I= Subject key identifier: 74:88:78:26:BD:F4:AC:74:A5:15:FB:17:88:B7:11:36:EF:CB:23:28 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D16684E11B97C9B3E1B780 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ba7c9da2-ca01-32c8-bfab-e27672cf0949.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 66.169.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:66:84:e1:1b:97:c9:b3:e1:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=97a8aeb5-e01c-4546-8b3e-dd2a80bf89d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d2:2d:fe:1d:41:62:f2:a4:27:56:ed:d2:e9: af:19:cf:11:e7:ba:1d:17:69:5c:5e:99:73:93:a9: 9d:80:9a:e7:4e:b6:b7:28:1d:84:df:38:a7:57:91: 7e:57:e6:1e:98:94:53:1a:fe:3e:5e:02:6a:d8:13: cc:69:0f:8d:ea:05:02:9a:c0:58:9e:9a:64:bc:72: 66:8d:f8:84:b8:e0:04:c2:a1:92:90:7c:06:18:1e: 6c:a1:52:25:bb:b3:5b:16:59:08:0e:88:da:01:a0: 24:ca:06:c5:6b:8e:aa:f2:18:fe:01:ed:eb:0f:9b: 6b:42:12:7f:1d:32:06:0f:b5:35:9d:1f:37:09:83: 3a:d5:92:6b:35:d9:7b:44:a4:79:11:df:a3:93:79: 24:91:9b:65:9e:f3:1c:a4:7f:49:ac:63:77:0a:b2: d2:ce:44:cd:3b:5e:c2:d1:ed:3f:57:60:fd:25:ec: 9c:ab:17:49:37:5c:c8:b5:d9:ea:5a:02:33:f6:b1: 01:a9:a4:be:86:ab:89:11:27:b7:09:74:77:59:89: 22:44:c5:d5:f2:cc:49:5d:61:56:c7:20:bc:64:4d: 9d:d9:2a:f9:d3:c7:de:76:f9:ec:11:f5:e4:56:61: 51:10:4c:02:50:7f:25:e4:79:68:42:21:e6:d8:62: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:88:78:26:BD:F4:AC:74:A5:15:FB:17:88:B7:11:36:EF:CB:23:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ba7c9da2-ca01-32c8-bfab-e27672cf0949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.169.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:17:29:69:cf:80:65:b2:0f:0b:a2:9c:fb:42:36:31:09:97: 20:e1:2f:53:d8:a5:c2:4a:dc:97:38:d2:c0:8a:f0:e9:0b:3a: 06:9a:d1:f4:bf:88:eb:0a:1d:6b:ee:69:03:d9:e6:e9:43:ac: f9:00:f0:7b:d1:d4:f4:00:4c:97:a6:f6:69:25:a7:26:49:97: 78:f0:0e:c6:be:fb:ed:43:30:1c:f5:22:98:b3:10:48:80:61: d2:e6:78:45:63:01:20:3f:0b:ae:10:22:1a:7e:3a:4b:db:d1: fe:2a:f8:00:8c:18:41:69:28:1a:36:54:4c:ba:0a:68:5b:7d: 6d:af:c2:09:5c:de:3e:73:32:dd:30:91:93:40:3d:f1:4c:ec: 37:05:c1:99:4b:d0:d7:0b:69:6f:35:7c:87:43:5e:0c:1f:8c: 87:4d:30:9c:27:f4:9a:87:2f:19:84:8f:03:5c:46:4b:1a:bb: 18:7a:56:fc:98:f0:3c:3c:56:21:a6:82:97:8b:a3:ba:88:aa: 7c:da:b6:7a:c1:b5:92:86:df:48:ce:1d:8c:1d:41:ee:d7:f9: 17:c7:8b:62:64:9e:82:50:1c:a6:c9:66:e8:97:b5:96:df:b5: a8:5b:90:02:66:c8:6c:1c:5e:47:26:0b:cb:55:d1:08:aa:43: b4:65:1b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0WaE4RuXybPht4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OTdhOGFlYjUtZTAxYy00NTQ2LThiM2UtZGQyYTgwYmY4OWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tIt/h1BYvKkJ1bt0umvGc8R57odF2lcXplz k6mdgJrnTra3KB2E3zinV5F+V+YemJRTGv4+XgJq2BPMaQ+N6gUCmsBYnppkvHJm jfiEuOAEwqGSkHwGGB5soVIlu7NbFlkIDojaAaAkygbFa46q8hj+Ae3rD5trQhJ/ HTIGD7U1nR83CYM61ZJrNdl7RKR5Ed+jk3kkkZtlnvMcpH9JrGN3CrLSzkTNO17C 0e0/V2D9JeycqxdJN1zItdnqWgIz9rEBqaS+hquJESe3CXR3WYkiRMXV8sxJXWFW xyC8ZE2d2Sr508fedvnsEfXkVmFREEwCUH8l5HloQiHm2GL4hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSIeCa99Kx0pRX7F4i3ETbvyyMoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmE3YzlkYTItY2EwMS0z MmM4LWJmYWItZTI3NjcyY2YwOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQqlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUXKWnPgGWyDwuinPtCNjEJlyDhL1PYpcJK3Jc40sCK8OkLOgaa0fS/ iOsKHWvuaQPZ5ulDrPkA8HvR1PQATJem9mklpyZJl3jwDsa+++1DMBz1IpizEEiA YdLmeEVjASA/C64QIhp+Okvb0f4q+ACMGEFpKBo2VEy6CmhbfW2vwglc3j5zMt0w kZNAPfFM7DcFwZlL0NcLaW81fIdDXgwfjIdNMJwn9JqHLxmEjwNcRksauxh6VvyY 8Dw8ViGmgpeLo7qIqnzatnrBtZKG30jOHYwdQe7X+RfHi2JknoJQHKbJZuiXtZbf tahbkAJmyGwcXkcmC8tV0QiqQ7RlG1I= -----END CERTIFICATE-----Generated at Sun Apr 27 13:05:47 2025 by rpki-client