$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fece1e0e-5ab9-333a-8d26-7bedda6c4384.roa File: fece1e0e-5ab9-333a-8d26-7bedda6c4384.roa (raw, json) Hash identifier: EccbY+TJqN1cWnoq2E0kFzRsDRNcqabfUIrlsNfIkA4= Subject key identifier: 30:0C:C9:83:DF:CD:21:58:EF:E1:58:EF:90:23:04:94:30:B9:3C:C4 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D2030929ABFD6F782EEDC0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fece1e0e-5ab9-333a-8d26-7bedda6c4384.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 68.114.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d2:03:09:29:ab:fd:6f:78:2e:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=2653eb5d-848a-4877-b51a-c6bd2f604b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:d4:fb:f9:ad:61:f7:b1:35:78:c0:ab:1a: f0:5c:7a:1a:9f:43:cf:0e:98:de:b3:fb:45:e5:43: 27:88:cf:0e:a4:31:9b:ff:38:e1:d8:eb:b4:03:77: 8c:65:65:04:42:a6:f3:ae:c8:54:4d:64:db:b2:91: 7a:63:c5:dd:5f:c5:4f:91:41:3d:83:9d:11:32:45: a7:03:ad:f4:3e:37:40:1e:50:4c:21:8a:29:a4:23: 78:43:36:ac:a7:ce:18:0b:9a:6e:34:3d:56:0a:e2: b8:59:1c:8c:18:3a:29:1e:7e:9b:bc:23:f4:50:7a: 78:b9:2e:da:18:fe:49:68:ce:56:a5:be:1e:9c:3f: 6a:3d:65:e1:12:e2:8d:94:c6:24:45:4e:64:5e:99: 60:7d:50:f4:3a:e2:d0:86:ee:4d:7e:c9:b9:fd:e0: 8c:80:8d:0e:0e:2b:64:ee:ea:0b:20:c0:b4:0b:2d: b9:d5:77:b9:a1:1b:2a:2d:55:69:78:34:e3:c1:ae: 0e:d9:62:82:f7:a8:69:e5:a4:cb:27:5f:4c:12:2c: 19:5a:69:58:e9:cd:c3:d8:09:a9:8f:05:fd:dd:be: 61:00:c1:e4:93:e9:67:70:9d:30:3c:b6:9f:c8:45: d3:98:f3:e9:86:98:57:01:b7:32:06:60:99:58:dd: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0C:C9:83:DF:CD:21:58:EF:E1:58:EF:90:23:04:94:30:B9:3C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fece1e0e-5ab9-333a-8d26-7bedda6c4384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 68.114.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6d:de:53:00:ee:3e:85:ee:5f:8a:b1:9e:7b:d0:ef:34:20: 24:03:18:47:3b:47:9b:4d:47:aa:35:a9:da:a4:f9:e1:d4:2e: 26:6d:9d:2b:a2:09:3c:a1:52:02:cd:58:88:4f:d0:32:2f:8e: 6e:8b:9a:4d:c0:19:10:89:c8:76:8c:08:99:3d:b4:83:8d:f3: 05:76:1b:f3:4d:5a:b7:5e:07:b0:aa:d3:a3:52:81:fe:cf:d1: ec:c3:d2:0b:f2:8d:b8:0b:ec:91:d4:60:35:ca:33:36:38:14: 36:ae:49:af:22:d9:33:ec:6c:50:63:fb:46:4d:22:54:1d:78: 74:03:a0:23:6d:57:42:9e:40:cd:4c:42:4e:f0:b5:f9:1f:19: ed:6c:2f:78:68:f9:6a:8e:cc:0e:c0:5d:b5:58:3c:cd:af:85: fe:15:2e:d0:d8:5a:7d:19:43:cb:7d:74:28:bb:88:eb:a8:4a: 43:1d:d3:d2:d2:a1:1a:79:34:b3:9e:af:e2:a6:67:b0:ff:40: 59:65:2a:ca:0b:fb:37:0c:de:5e:2d:dd:a1:be:5e:98:4a:f9: 32:0a:99:12:55:10:b5:97:1b:1b:41:b4:f0:85:24:65:ee:d6: 6d:39:40:38:b3:55:55:ad:b3:52:71:89:e7:bf:81:69:08:b5: e6:4b:67:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0gMJKav9b3gu7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MjY1M2ViNWQtODQ4YS00ODc3LWI1MWEtYzZiZDJmNjA0YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl/U+/mtYfexNXjAqxrwXHoan0PPDpjes/tF 5UMniM8OpDGb/zjh2Ou0A3eMZWUEQqbzrshUTWTbspF6Y8XdX8VPkUE9g50RMkWn A630PjdAHlBMIYoppCN4Qzasp84YC5puND1WCuK4WRyMGDopHn6bvCP0UHp4uS7a GP5JaM5Wpb4enD9qPWXhEuKNlMYkRU5kXplgfVD0OuLQhu5Nfsm5/eCMgI0ODitk 7uoLIMC0Cy251Xe5oRsqLVVpeDTjwa4O2WKC96hp5aTLJ19MEiwZWmlY6c3D2Amp jwX93b5hAMHkk+lncJ0wPLafyEXTmPPphphXAbcyBmCZWN182wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAMyYPfzSFY7+FY75AjBJQwuTzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvZmVjZTFlMGUtNWFiOS0z MzNhLThkMjYtN2JlZGRhNmM0Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERHLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRt3lMA7j6F7l+KsZ570O80ICQDGEc7R5tNR6o1qdqk+eHULiZtnSui CTyhUgLNWIhP0DIvjm6Lmk3AGRCJyHaMCJk9tION8wV2G/NNWrdeB7Cq06NSgf7P 0ezD0gvyjbgL7JHUYDXKMzY4FDauSa8i2TPsbFBj+0ZNIlQdeHQDoCNtV0KeQM1M Qk7wtfkfGe1sL3ho+WqOzA7AXbVYPM2vhf4VLtDYWn0ZQ8t9dCi7iOuoSkMd09LS oRp5NLOer+KmZ7D/QFllKsoL+zcM3l4t3aG+XphK+TIKmRJVELWXGxtBtPCFJGXu 1m05QDizVVWts1Jxiee/gWkIteZLZwU= -----END CERTIFICATE-----Generated at Mon Apr 28 08:32:56 2025 by rpki-client