$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa File: 067b0439-4cea-3e63-ae85-baf79b93fd58.roa (raw, json) Hash identifier: Sfun72PpI71n+VYKK0b5+7WC23q1HBQgCMT6bVj3J7w= Subject key identifier: D5:D1:70:25:C1:AF:39:73:4D:81:D9:49:43:C7:79:79:FB:69:0C:D7 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F43285848960B54F7DC3947FE6C6AAF80 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa Signing time: Sat 18 Jan 2025 14:00:52 +0000 ROA not before: Sat 18 Jan 2025 14:00:52 +0000 ROA not after: Fri 18 Apr 2025 13:00:52 +0000 asID: 23465 IP address blocks: 70.99.72.0/21 maxlen: 21 70.99.104.0/21 maxlen: 21 70.99.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:96:0b:54:f7:dc:39:47:fe:6c:6a:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Jan 18 14:00:52 2025 GMT Not After : Apr 18 13:00:52 2025 GMT Subject: CN=8569678d-4070-4423-82ae-7969aeed2cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:04:48:3d:44:92:16:bb:1c:fb:61:33:b2: e2:4e:ff:65:d8:5c:30:68:06:95:be:3a:28:68:f7: 6b:a8:c7:90:aa:e1:9a:2a:64:12:24:cf:bc:df:f1: 73:78:76:8a:73:18:71:3c:58:9e:c0:ec:9a:8a:87: 13:83:aa:55:ed:cc:b0:d3:28:0a:91:24:28:16:87: 46:34:ce:af:81:2a:85:4a:af:d0:94:00:bc:b2:b1: ff:51:08:f3:07:a3:c4:1b:dc:4a:9d:53:60:95:1d: 4f:e3:fe:69:ce:b7:e5:c8:52:3c:bc:c1:a9:4b:52: b8:6f:24:d4:c7:cb:4a:79:85:f2:89:25:56:38:31: ac:84:66:6a:26:66:0f:2f:6c:8d:8e:15:5d:34:08: d0:40:d1:fc:6c:1e:c5:1a:e1:f4:39:f9:46:68:fd: 7b:ce:1d:72:eb:ad:4a:f5:4e:d8:e3:a9:53:9c:d4: 1e:86:5c:a4:02:0c:c0:0a:34:f6:2e:94:60:2d:3b: 01:d0:db:9b:d6:33:3d:cb:03:df:13:d0:02:5f:8c: 43:4c:4c:9f:85:fb:ae:cf:bc:ef:9a:86:3c:6f:5f: 9a:b2:6b:ba:72:4c:96:de:87:e8:9a:6c:e2:a0:2f: eb:24:ff:66:13:2f:66:30:9e:11:f3:28:b9:f7:92: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D1:70:25:C1:AF:39:73:4D:81:D9:49:43:C7:79:79:FB:69:0C:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/067b0439-4cea-3e63-ae85-baf79b93fd58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.99.72.0/21 70.99.104.0/21 70.99.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:92:87:54:f3:95:2d:5f:60:6f:ee:ad:22:97:ce:b7:37:9f: bd:0b:f5:01:9f:bb:0e:7c:30:60:7e:11:c0:3c:d3:f6:0d:c7: 0b:23:f1:0c:14:8f:e1:f3:7d:1e:22:7e:01:fc:ff:ce:89:54: ab:c6:4f:78:9d:80:31:ed:08:85:99:91:4f:1d:23:94:51:5c: 81:cc:b5:89:38:bc:09:26:08:b1:64:d7:b3:65:55:75:f2:d3: bb:29:a0:5e:a9:fd:cc:00:3d:51:67:18:e8:59:98:a5:d1:af: d9:65:29:94:e6:ae:25:b7:55:64:82:51:25:a4:bb:0d:61:a9: 8c:f2:dc:46:0d:77:61:ea:3b:fa:e7:7a:75:b0:f1:56:93:4a: 95:83:96:54:d1:16:92:ac:f9:ed:2f:85:04:4d:1b:af:b0:c4: ac:68:e7:33:50:63:4c:0a:57:18:fc:7b:66:30:e1:aa:48:7a: ea:04:4b:cf:1b:66:c5:ab:ed:a6:6f:e9:11:71:59:30:f5:4b: a9:27:37:04:da:90:7e:4b:56:fa:48:16:88:30:b7:60:59:dd: ef:b2:40:d4:26:7c:68:37:a0:1c:fc:3e:fd:25:ad:23:5d:4c: 0d:01:35:41:1e:c1:fb:b0:6c:c8:95:6d:57:4c:11:15:ce:37: 27:5a:75:73 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEiWC1T33DlH/mxqr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk ODU2OTY3OGQtNDA3MC00NDIzLTgyYWUtNzk2OWFlZWQyY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRcESD1Ekha7HPthM7LiTv9l2FwwaAaVvjoo aPdrqMeQquGaKmQSJM+83/FzeHaKcxhxPFiewOyaiocTg6pV7cyw0ygKkSQoFodG NM6vgSqFSq/QlAC8srH/UQjzB6PEG9xKnVNglR1P4/5pzrflyFI8vMGpS1K4byTU x8tKeYXyiSVWODGshGZqJmYPL2yNjhVdNAjQQNH8bB7FGuH0OflGaP17zh1y661K 9U7Y46lTnNQehlykAgzACjT2LpRgLTsB0Nub1jM9ywPfE9ACX4xDTEyfhfuuz7zv moY8b1+asmu6ckyW3ofommzioC/rJP9mEy9mMJ4R8yi595JeEQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNXRcCXBrzlzTYHZSUPHeXn7aQzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMDY3YjA0MzktNGNlYS0z ZTYzLWFlODUtYmFmNzliOTNmZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDRmNIAwQD RmNoAwQARmP7MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMWSh1TzlS1fYG/urSKXzrc3n70L9QGfuw58MGB+ EcA80/YNxwsj8QwUj+HzfR4ifgH8/86JVKvGT3idgDHtCIWZkU8dI5RRXIHMtYk4 vAkmCLFk17NlVXXy07spoF6p/cwAPVFnGOhZmKXRr9llKZTmriW3VWSCUSWkuw1h qYzy3EYNd2HqO/rnenWw8VaTSpWDllTRFpKs+e0vhQRNG6+wxKxo5zNQY0wKVxj8 e2Yw4apIeuoES88bZsWr7aZv6RFxWTD1S6knNwTakH5LVvpIFogwt2BZ3e+yQNQm fGg3oBz8Pv0lrSNdTA0BNUEewfuwbMiVbVdMERXONydadXM= -----END CERTIFICATE-----Generated at Mon Apr 7 17:01:06 2025 by rpki-client