$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35cd0b65-4359-3b3d-a4f2-971da0a86ee3.roa File: 35cd0b65-4359-3b3d-a4f2-971da0a86ee3.roa (raw, json) Hash identifier: M8ff62eM8Q4LM95/1xur0l+gHM9QFUZaC/BsmJNmACE= Subject key identifier: F1:44:5A:4E:3F:6B:09:69:9E:02:09:BF:32:52:44:B1:39:93:F5:B5 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D1983B3270D6A7A6432AC0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35cd0b65-4359-3b3d-a4f2-971da0a86ee3.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 35.144.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:98:3b:32:70:d6:a7:a6:43:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=6ed48665-3799-495a-9bce-03b09291d05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:2b:22:3d:cd:ea:8a:44:d9:9f:7a:e2:eb: 8b:10:2a:6b:12:8a:99:d6:31:b2:bd:45:03:04:a7: 6e:e4:f9:89:ed:b6:4c:db:28:ef:dc:d8:ab:0e:bd: 4c:03:ff:a4:db:1c:1b:59:ab:ce:25:f3:42:14:af: c9:80:a2:81:94:c9:64:96:5c:4c:13:5b:7a:eb:c6: 0c:da:68:9c:d4:0b:72:95:5f:5d:0d:cb:8d:16:77: 11:9d:b7:ef:66:60:88:ef:c7:f1:90:22:21:7e:ee: e4:57:ad:7d:a7:7d:f7:2e:62:b1:cf:90:50:0c:4d: f5:a0:e3:08:6a:18:e2:00:fa:0f:af:fd:8e:05:ad: ae:8b:a6:c7:18:af:8a:1a:90:56:63:e2:b0:3f:ad: d7:e3:d0:30:d1:3e:6f:0a:73:8b:7e:de:e8:ea:25: 9e:90:c1:46:f9:6b:90:c7:b4:e3:44:ab:f8:78:b8: 81:94:be:69:0e:56:58:b5:73:93:3c:0b:73:b9:af: c7:16:3e:4a:7f:32:bf:50:6d:cb:96:e7:3d:3c:19: b0:9d:f1:91:2c:d9:04:94:0d:8a:1a:bf:a5:c7:cb: a2:f0:2e:25:a2:2a:9a:f9:61:cf:63:56:03:96:15: a2:13:10:59:5c:fd:06:16:3b:89:28:b0:fe:b1:18: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:44:5A:4E:3F:6B:09:69:9E:02:09:BF:32:52:44:B1:39:93:F5:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/35cd0b65-4359-3b3d-a4f2-971da0a86ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 35.144.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:49:fa:9c:ff:fb:4e:bf:d9:8d:dd:ad:32:67:b9:61:7f:3b: ac:c3:fc:24:47:a2:49:42:32:a3:58:55:69:2f:08:14:00:d0: 27:79:86:62:64:f2:d6:aa:b4:18:24:72:cf:d4:4d:5c:b0:4f: 59:c4:08:73:55:77:80:ce:96:28:b3:f8:a0:6c:d5:d9:e5:7a: c5:00:e2:22:ab:bf:2c:ac:66:19:e2:69:ab:53:48:6b:aa:b8: 85:db:dd:48:f3:78:6b:ce:1a:53:ae:0b:52:2c:61:3a:6d:b0: 32:70:d8:e2:62:28:01:1d:3d:bd:23:48:6b:fc:02:9e:af:5c: 7a:b9:c0:3f:11:8e:b9:2c:ac:44:ea:42:6e:8b:3a:d9:8e:a4: f7:63:4e:b9:73:0a:6c:ae:f7:97:10:af:f7:b8:c6:88:71:a7: af:19:1c:ef:de:44:e9:f8:9f:f0:e1:88:1b:66:f5:e9:08:c0: 12:fd:a7:fd:7b:fc:d9:10:d0:71:bd:d3:c3:04:b6:e8:35:8d: 8c:89:de:a5:6a:fa:89:fc:5c:ff:43:6f:cf:54:97:f6:37:ff: 02:a7:ed:4b:11:27:b1:2e:61:ed:0e:c1:cb:fe:c1:d1:95:a8: 47:a4:98:04:1c:b7:8c:d8:83:fd:f8:16:8d:3f:4f:b9:b2:62: f0:f0:c9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Zg7MnDWp6ZDKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NmVkNDg2NjUtMzc5OS00OTVhLTliY2UtMDNiMDkyOTFkMDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnorIj3N6opE2Z964uuLECprEoqZ1jGyvUUD BKdu5PmJ7bZM2yjv3NirDr1MA/+k2xwbWavOJfNCFK/JgKKBlMlkllxME1t668YM 2mic1AtylV9dDcuNFncRnbfvZmCI78fxkCIhfu7kV619p333LmKxz5BQDE31oOMI ahjiAPoPr/2OBa2ui6bHGK+KGpBWY+KwP63X49Aw0T5vCnOLft7o6iWekMFG+WuQ x7TjRKv4eLiBlL5pDlZYtXOTPAtzua/HFj5KfzK/UG3Lluc9PBmwnfGRLNkElA2K Gr+lx8ui8C4loiqa+WHPY1YDlhWiExBZXP0GFjuJKLD+sRjGPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFEWk4/awlpngIJvzJSRLE5k/W1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMzVjZDBiNjUtNDM1OS0z YjNkLWE0ZjItOTcxZGEwYTg2ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDI5CAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxJ+pz/+06/2Y3drTJnuWF/O6zD/CRHoklCMqNYVWkvCBQA0Cd5hmJk 8taqtBgkcs/UTVywT1nECHNVd4DOliiz+KBs1dnlesUA4iKrvyysZhniaatTSGuq uIXb3UjzeGvOGlOuC1IsYTptsDJw2OJiKAEdPb0jSGv8Ap6vXHq5wD8RjrksrETq Qm6LOtmOpPdjTrlzCmyu95cQr/e4xohxp68ZHO/eROn4n/DhiBtm9ekIwBL9p/17 /NkQ0HG908MEtug1jYyJ3qVq+on8XP9Db89Ul/Y3/wKn7UsRJ7EuYe0Owcv+wdGV qEekmAQct4zYg/34Fo0/T7myYvDwyS0= -----END CERTIFICATE-----Generated at Sun Apr 6 23:10:39 2025 by rpki-client