$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e8221d4b-353c-3fe4-aeb0-f585c34c2331.roa File: e8221d4b-353c-3fe4-aeb0-f585c34c2331.roa (raw, json) Hash identifier: RA6OA9djeSwPMJczVS4VFGty6bEW0uDpPn1VJVleghc= Subject key identifier: 64:61:CA:23:04:D6:17:29:49:42:13:4A:32:55:DF:04:37:C6:AE:0C Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1793343C7691A45F5F7C0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e8221d4b-353c-3fe4-aeb0-f585c34c2331.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 66.191.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:79:33:43:c7:69:1a:45:f5:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=c04f45a4-3764-40ff-8b6e-9184ce8f544f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:01:0a:94:60:1c:ac:c1:ba:6c:bb:ad:dd: 62:e2:2d:c1:ed:c3:ae:fe:8b:1b:8a:64:60:db:78: 35:9e:be:7a:07:17:5b:37:bf:e8:83:0a:00:d4:f9: 6f:13:f7:8c:a4:e6:ff:5b:85:65:1a:34:51:f9:a0: 74:f8:3e:a9:93:e3:a2:ff:f9:5f:5c:0f:5b:4d:65: 2e:9d:98:dc:c7:b6:b9:e3:55:9c:72:71:9b:4d:43: 34:2e:3b:37:89:f6:2d:10:2a:c2:6c:a3:d5:c1:27: 06:b1:ba:31:35:4f:a7:37:ca:8d:0f:47:57:e5:4d: 72:fc:1a:11:27:07:f7:bb:00:6a:2f:9b:c0:1f:c8: 9e:9f:7d:19:95:df:47:04:9b:43:47:78:6e:ab:2f: 46:54:3f:96:d4:9c:e8:43:6a:50:5c:50:a3:d5:ba: 4c:0a:19:8c:2b:2e:2c:d2:c7:9d:2c:ce:da:fc:60: 47:3b:22:70:dc:33:42:a2:72:dd:d9:a5:5e:a0:25: f0:77:24:2e:ce:b7:ed:ba:9c:14:25:6c:6a:ee:93: 21:6c:af:73:fc:44:0b:57:6d:d2:f5:49:22:13:38: a9:5e:cd:f7:16:c9:10:e9:bb:e6:f0:18:e0:02:45: 57:98:f5:a5:57:31:98:da:22:3e:94:6a:83:86:db: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:61:CA:23:04:D6:17:29:49:42:13:4A:32:55:DF:04:37:C6:AE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/e8221d4b-353c-3fe4-aeb0-f585c34c2331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 66.191.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ff:6f:11:6e:19:f9:70:bb:07:09:9d:51:df:e7:10:31:40: a7:af:d7:d6:af:85:fb:42:86:cd:34:3e:3f:32:71:13:fa:09: 25:db:95:8f:90:82:1d:e4:8f:60:7d:36:8f:d9:c9:0f:35:be: 03:e4:10:35:57:c3:10:03:95:94:67:c1:21:5e:5b:79:55:3b: 01:f6:00:fc:be:8c:0e:b8:56:0f:1f:71:9f:30:39:98:9a:58: 28:48:ab:82:e0:be:05:4c:b7:b9:e3:60:1d:ba:0b:1b:27:e4: 91:3c:1d:32:1f:d2:5b:85:f3:e2:b2:b9:08:7e:f1:ea:6d:ad: 12:43:c7:3b:de:07:a1:89:e2:de:9c:63:fb:90:b6:42:7f:f9: 5e:b5:79:b5:20:35:3f:24:41:3f:24:b4:d1:70:e1:14:11:ea: 0d:97:86:0a:c0:16:16:1f:ef:c0:c0:09:5c:18:79:8f:55:ed: a5:89:0c:c3:25:37:87:fc:07:7a:22:76:48:77:94:86:68:2b: 0b:12:a5:31:c7:f1:3a:b2:91:7b:78:d1:55:8e:6f:07:b7:fa: a8:57:ea:c9:5b:12:f9:f9:6a:32:9f:32:1d:61:cb:e3:e8:a1: 2c:b6:94:e0:04:c2:9b:3a:58:d6:52:2e:65:2a:c4:b4:c4:02: 4b:74:28:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0XkzQ8dpGkX198AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YzA0ZjQ1YTQtMzc2NC00MGZmLThiNmUtOTE4NGNlOGY1NDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB8BCpRgHKzBumy7rd1i4i3B7cOu/osbimRg 23g1nr56BxdbN7/ogwoA1PlvE/eMpOb/W4VlGjRR+aB0+D6pk+Oi//lfXA9bTWUu nZjcx7a541WccnGbTUM0Ljs3ifYtECrCbKPVwScGsboxNU+nN8qND0dX5U1y/BoR Jwf3uwBqL5vAH8ien30Zld9HBJtDR3huqy9GVD+W1JzoQ2pQXFCj1bpMChmMKy4s 0sedLM7a/GBHOyJw3DNConLd2aVeoCXwdyQuzrftupwUJWxq7pMhbK9z/EQLV23S 9UkiEzipXs33FskQ6bvm8BjgAkVXmPWlVzGY2iI+lGqDhtsM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRhyiME1hcpSUITSjJV3wQ3xq4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZTgyMjFkNGItMzUzYy0z ZmU0LWFlYjAtZjU4NWMzNGMyMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQr/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7/bxFuGflwuwcJnVHf5xAxQKev19avhftChs00Pj8ycRP6CSXblY+Q gh3kj2B9No/ZyQ81vgPkEDVXwxADlZRnwSFeW3lVOwH2APy+jA64Vg8fcZ8wOZia WChIq4LgvgVMt7njYB26Cxsn5JE8HTIf0luF8+KyuQh+8eptrRJDxzveB6GJ4t6c Y/uQtkJ/+V61ebUgNT8kQT8ktNFw4RQR6g2XhgrAFhYf78DACVwYeY9V7aWJDMMl N4f8B3oidkh3lIZoKwsSpTHH8TqykXt40VWObwe3+qhX6slbEvn5ajKfMh1hy+Po oSy2lOAEwps6WNZSLmUqxLTEAkt0KDQ= -----END CERTIFICATE-----Generated at Sun Apr 27 11:21:26 2025 by rpki-client