$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa File: 9f593d47-3a3d-306a-9551-03bd70997c05.roa (raw, json) Hash identifier: VnMy0xWlrRKFmMa8g6jT7gQTgRoUzmWwjLTGZyzi9AE= Subject key identifier: E4:52:60:BB:1B:7C:2E:12:A5:B8:70:02:C8:BA:33:17:01:1B:D9:00 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584894A5E7A52F985425B8EB2D1C Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 23465 IP address blocks: 70.97.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e7:a5:2f:98:54:25:b8:eb:2d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=c442be53-4e7f-4c33-a218-4add71f7ac6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ff:69:42:53:ce:f7:47:0f:57:82:53:99:d5: 39:c1:f7:99:ac:d8:c6:b2:35:a0:de:8f:95:6e:d5: 82:7c:4d:59:d1:0c:67:fa:65:9a:7d:12:2a:bb:36: 76:b4:0e:ef:50:27:ad:2b:dd:5e:e8:48:93:41:a5: b5:a8:de:aa:92:77:05:a3:fc:66:ff:a0:74:70:2d: 3e:b9:f5:ba:4f:0d:d1:e5:69:9b:de:e9:f3:ff:9f: 86:32:cc:43:86:94:98:d4:fa:11:2a:b3:8d:c7:2c: ad:cd:50:3a:11:15:61:fa:1b:fe:e8:5a:30:06:10: 9d:cc:5e:6e:6d:9a:3b:92:00:97:5e:7c:b6:df:b4: 53:68:14:1e:34:91:da:63:21:4f:c8:bd:1f:08:53: 72:30:4d:2c:29:6f:23:15:b3:17:5d:91:48:02:0c: 49:9c:7f:5e:64:ac:43:a3:cb:d2:63:1b:ac:2e:42: 2c:cd:0d:b4:1d:98:ac:dc:48:4d:19:5f:f5:7c:21: fa:1b:49:d3:99:97:4f:ac:5d:0f:84:c6:da:23:c5: c3:3f:da:c9:e6:3c:d6:bf:87:05:de:76:98:d3:f7: 01:4b:16:fd:08:f3:6d:e7:7a:23:4c:94:49:5a:bf: 50:2c:a5:d4:e5:97:e4:ae:c0:1e:66:dd:2a:64:53: 44:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:52:60:BB:1B:7C:2E:12:A5:B8:70:02:C8:BA:33:17:01:1B:D9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.97.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ac:e4:28:7a:ed:52:01:3b:c8:95:02:93:3a:96:57:a2:47: 64:46:3b:94:de:90:12:b1:12:0b:13:ce:fe:2b:38:78:f2:1a: 17:71:ec:4b:67:f5:37:eb:20:ea:80:8a:88:7c:03:2c:36:4a: 31:d9:20:16:3f:e7:c8:aa:77:85:08:92:8a:33:7b:84:27:ba: 57:b4:9a:c4:74:92:ca:60:72:b4:22:8e:be:f5:03:0a:98:f5: 05:23:bf:3c:52:b8:dc:d7:38:f5:86:8d:62:3e:e7:3d:a1:87: 12:49:03:48:4e:ff:c5:cf:7e:ac:26:b8:7f:a1:e4:e3:a0:6a: f3:c2:1f:77:76:bc:4b:57:ca:40:1a:51:8a:7e:e2:68:82:51: 91:55:11:4a:ae:b8:5c:62:4a:df:10:2f:7d:81:ae:4f:74:fc: 3f:29:03:7b:72:78:9b:da:fc:7c:b2:37:c4:61:db:cf:0d:d3: dc:ee:ec:59:2d:3e:c2:43:e4:30:e9:15:97:7b:c8:1d:be:f2: 91:7b:0e:c9:8a:b7:09:7b:62:07:18:a1:10:5e:74:f0:38:9f: fa:4f:60:5f:8d:95:af:65:4b:c2:4a:8b:55:f7:f2:ac:64:0e: 84:88:f6:a5:02:40:6c:d9:24:fa:9a:7b:df:bb:bd:bd:ab:d1: d7:4d:e1:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpeelL5hUJbjrLRwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk YzQ0MmJlNTMtNGU3Zi00YzMzLWEyMTgtNGFkZDcxZjdhYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v9pQlPO90cPV4JTmdU5wfeZrNjGsjWg3o+V btWCfE1Z0Qxn+mWafRIquzZ2tA7vUCetK91e6EiTQaW1qN6qkncFo/xm/6B0cC0+ ufW6Tw3R5Wmb3unz/5+GMsxDhpSY1PoRKrONxyytzVA6ERVh+hv+6FowBhCdzF5u bZo7kgCXXny237RTaBQeNJHaYyFPyL0fCFNyME0sKW8jFbMXXZFIAgxJnH9eZKxD o8vSYxusLkIszQ20HZis3EhNGV/1fCH6G0nTmZdPrF0PhMbaI8XDP9rJ5jzWv4cF 3naY0/cBSxb9CPNt53ojTJRJWr9QLKXU5ZfkrsAeZt0qZFNEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORSYLsbfC4SpbhwAsi6MxcBG9kAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvOWY1OTNkNDctM2EzZC0z MDZhLTk1NTEtMDNiZDcwOTk3YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERmGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFas5Ch67VIBO8iVApM6lleiR2RGO5TekBKxEgsTzv4rOHjyGhdx7Etn 9TfrIOqAioh8Ayw2SjHZIBY/58iqd4UIkooze4Qnule0msR0kspgcrQijr71AwqY 9QUjvzxSuNzXOPWGjWI+5z2hhxJJA0hO/8XPfqwmuH+h5OOgavPCH3d2vEtXykAa UYp+4miCUZFVEUquuFxiSt8QL32Brk90/D8pA3tyeJva/HyyN8Rh288N09zu7Fkt PsJD5DDpFZd7yB2+8pF7DsmKtwl7YgcYoRBedPA4n/pPYF+Nla9lS8JKi1X38qxk DoSI9qUCQGzZJPqae9+7vb2r0ddN4Tc= -----END CERTIFICATE-----Generated at Mon Apr 7 20:15:10 2025 by rpki-client