$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9ac1554-3a1d-3f62-a10a-9ba2558d2a18.roa File: a9ac1554-3a1d-3f62-a10a-9ba2558d2a18.roa (raw, json) Hash identifier: CpsJJWVxMFFfGxuaM1uI1lYA3R/hKaD3RE8trVW238Q= Subject key identifier: AD:93:5E:C8:CB:E2:7D:07:83:24:EF:A6:86:FF:65:43:76:B8:47:55 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584921342B4B9F2ECAC270D00AA0 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9ac1554-3a1d-3f62-a10a-9ba2558d2a18.roa Signing time: Sun 09 Mar 2025 10:20:37 +0000 ROA not before: Sun 09 Mar 2025 10:20:37 +0000 ROA not after: Sat 07 Jun 2025 10:20:37 +0000 asID: 36522 IP address blocks: 70.25.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:2b:4b:9f:2e:ca:c2:70:d0:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:37 2025 GMT Not After : Jun 7 10:20:37 2025 GMT Subject: CN=b8fc0bf9-7d03-4e5d-822b-513180f29792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:60:1b:5a:c7:ef:d8:5d:48:cf:24:3e:9f: c1:f3:b6:c3:31:9e:80:7a:20:dc:0b:38:ed:c8:ae: 13:45:70:5c:96:d3:95:5d:cc:32:fb:73:2d:2f:68: 8e:80:6b:e9:74:49:e8:6b:7a:2a:02:c2:f6:80:ad: 0b:f8:5c:b5:18:b0:d4:62:56:24:c4:63:21:7f:1a: 2f:5f:8b:eb:73:ff:df:17:7a:94:48:b4:c0:de:0b: c5:ae:46:46:e1:f1:7f:57:f0:9a:61:82:47:ec:30: c4:fa:cb:4d:b9:84:41:18:0a:3b:42:5b:55:61:8b: c7:04:ae:9f:3b:c7:23:f5:3b:45:98:f9:5a:61:74: 12:fe:03:40:aa:83:30:ed:00:af:76:90:4b:92:b8: e7:3c:49:b9:78:8f:4d:af:a5:9b:2f:d9:ac:3e:47: 3f:cf:53:83:5c:b4:f0:01:03:ae:72:3b:a7:8e:ea: a6:72:ab:5b:a6:e3:73:c0:49:4d:fc:a6:93:56:e6: 6d:ff:a3:ce:7b:b8:b3:31:9f:e9:3f:14:e3:ec:c3: 75:d6:b4:03:81:14:26:b8:e1:9f:7b:bc:d5:43:d1: 70:36:3c:cf:ac:4a:e0:0b:2e:ed:58:e1:bd:a5:bc: 0d:a2:75:e4:a1:a3:90:0c:6f:bc:e6:67:fd:6a:cd: ba:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:93:5E:C8:CB:E2:7D:07:83:24:EF:A6:86:FF:65:43:76:B8:47:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a9ac1554-3a1d-3f62-a10a-9ba2558d2a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 70.25.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4a:18:c9:40:e2:fe:56:ae:26:22:73:11:47:4a:c7:d6:68: c8:1a:c1:90:f9:1d:f0:cc:79:62:bb:62:fe:c4:36:d4:86:a0: 1e:06:29:9b:dd:15:ca:12:35:b1:46:99:cb:c8:c8:9e:15:b3: 35:15:09:2d:6b:59:27:1c:2e:dc:2f:c8:f2:eb:ba:73:9b:45: 34:c2:f2:f8:02:f3:62:06:2b:5a:bb:0e:7b:8f:34:48:cb:36: 99:84:cc:6b:d6:89:0c:e7:0d:08:d9:00:8a:6d:91:25:b1:4e: 8e:8a:2e:0c:e8:8d:84:25:ab:c5:44:e8:9a:49:ab:85:d3:17: 12:db:d5:97:f6:7a:fd:3b:46:79:05:df:ef:00:5d:52:eb:09: a8:d0:c7:8b:0b:93:02:16:ae:e2:e7:44:a6:1f:7d:69:e8:e9: f6:4c:ab:29:9d:26:95:74:19:35:ea:0e:35:7f:e2:0e:ac:f4: 39:3a:b1:f4:1d:ea:9d:b6:52:97:d1:3a:de:cc:7e:13:22:a9: b5:64:5c:25:16:4a:20:9c:f0:0c:bc:64:57:be:24:cc:03:79: dc:c8:14:12:92:43:7e:ce:7a:9f:cd:94:f6:49:91:0d:41:0d: 87:89:d4:28:8c:7b:e2:83:9e:d9:e0:fd:cf:c3:2f:ad:24:48: c4:19:42:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNCtLny7KwnDQCqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjAzN1oXDTI1MDYwNzEwMjAzN1owLzEtMCsGA1UEAxMk YjhmYzBiZjktN2QwMy00ZTVkLTgyMmItNTEzMTgwZjI5NzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqpgG1rH79hdSM8kPp/B87bDMZ6AeiDcCzjt yK4TRXBcltOVXcwy+3MtL2iOgGvpdEnoa3oqAsL2gK0L+Fy1GLDUYlYkxGMhfxov X4vrc//fF3qUSLTA3gvFrkZG4fF/V/CaYYJH7DDE+stNuYRBGAo7QltVYYvHBK6f O8cj9TtFmPlaYXQS/gNAqoMw7QCvdpBLkrjnPEm5eI9Nr6WbL9msPkc/z1ODXLTw AQOucjunjuqmcqtbpuNzwElN/KaTVuZt/6POe7izMZ/pPxTj7MN11rQDgRQmuOGf e7zVQ9FwNjzPrErgCy7tWOG9pbwNonXkoaOQDG+85mf9as26ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2TXsjL4n0HgyTvpob/ZUN2uEdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYTlhYzE1NTQtM2ExZC0z ZjYyLWExMGEtOWJhMjU1OGQyYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRhmIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpKGMlA4v5WriYicxFHSsfWaMgawZD5HfDMeWK7Yv7ENtSGoB4GKZvd FcoSNbFGmcvIyJ4VszUVCS1rWSccLtwvyPLrunObRTTC8vgC82IGK1q7DnuPNEjL NpmEzGvWiQznDQjZAIptkSWxTo6KLgzojYQlq8VE6JpJq4XTFxLb1Zf2ev07RnkF 3+8AXVLrCajQx4sLkwIWruLnRKYffWno6fZMqymdJpV0GTXqDjV/4g6s9Dk6sfQd 6p22UpfROt7MfhMiqbVkXCUWSiCc8Ay8ZFe+JMwDedzIFBKSQ37Oep/NlPZJkQ1B DYeJ1CiMe+KDntng/c/DL60kSMQZQr0= -----END CERTIFICATE-----Generated at Mon Apr 7 16:56:26 2025 by rpki-client