$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b70c664a-f6eb-314e-8740-66a7dabcbed3.roa File: b70c664a-f6eb-314e-8740-66a7dabcbed3.roa (raw, json) Hash identifier: 2Ynuq9pkVc4u3w29l87+C7PnFN0t7jocn1J76exbnHM= Subject key identifier: 57:46:53:E5:1D:CE:55:A3:D0:EA:4F:87:CB:F0:AC:BC:3D:7B:7F:5C Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584894A5E51994611B87D0E149E7 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b70c664a-f6eb-314e-8740-66a7dabcbed3.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 23465 IP address blocks: 70.97.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e5:19:94:61:1b:87:d0:e1:49:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=2aead015-4fb2-4b7d-b3d8-c8cec229169f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b8:47:91:48:d7:45:52:20:77:19:76:87:3b: 01:5c:77:b2:97:32:53:e8:11:81:6b:88:d8:4f:f4: 23:7b:52:84:fa:de:1a:13:b8:18:e1:51:9b:2b:d0: 0e:ba:8b:8e:da:a7:83:79:5f:79:1f:5a:65:6e:f8: 37:b8:eb:d8:e7:bf:00:00:b2:8e:db:23:d2:81:1b: 99:88:16:e7:40:c6:51:eb:35:72:4a:a3:4d:b0:91: 4c:57:3f:f1:bd:ca:10:f7:cc:f8:c5:f3:57:50:e2: 67:df:f2:0d:72:da:f0:b5:7d:0b:4b:b9:56:8d:5c: 00:48:54:ee:25:4c:a0:8d:68:e9:7d:58:00:6f:ec: d5:d3:43:40:15:d9:3f:cc:1f:64:c9:30:18:87:b2: b0:e3:46:2e:b9:cd:19:02:bd:bf:58:6e:46:d6:d5: 11:e8:10:94:83:ae:f6:d6:fc:f7:3e:84:27:38:3b: 05:3d:ac:d2:8e:9c:a4:36:1d:ce:fb:3f:5e:3e:18: 09:0b:97:42:f5:7b:fd:18:19:76:4b:c4:35:cd:53: a3:c5:ba:db:88:8e:ea:cc:19:a7:90:aa:9e:0f:c5: c0:37:b6:07:6d:5c:e4:f0:9b:74:d6:4f:36:9c:7b: 67:fd:ad:14:d5:da:5a:e6:9f:cc:6f:d3:e2:61:95: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:46:53:E5:1D:CE:55:A3:D0:EA:4F:87:CB:F0:AC:BC:3D:7B:7F:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b70c664a-f6eb-314e-8740-66a7dabcbed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.97.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:31:82:59:e8:46:2e:f3:8d:ed:e5:3a:9a:5a:68:b5:49:e6: 26:a4:f7:6b:d7:13:b8:08:3b:b1:29:90:13:af:35:6b:b1:5e: 20:43:93:c0:11:6f:46:51:9a:da:c4:88:5b:fc:fa:c9:de:ae: cd:42:23:64:88:56:70:d5:25:fc:d4:d6:68:7d:b0:ea:8c:56: ed:76:8a:d6:a8:a6:3b:4f:b9:61:9c:5a:2c:aa:d9:1c:50:85: 42:57:78:84:cf:28:f8:a8:c5:d1:f8:20:cf:a0:d3:76:da:fa: b8:aa:c1:d1:17:d2:0b:86:51:c5:4f:12:66:9f:d6:72:92:d0: c0:46:f0:e7:2a:d0:91:03:86:bd:29:a6:8c:f6:2c:df:51:af: 5c:52:d9:79:6c:a2:f4:5c:de:d1:5d:c0:97:89:c7:d2:ea:b3: fe:00:be:d2:6b:1c:ba:4b:e8:cf:e3:52:78:57:45:d2:4a:2b: f9:99:d0:96:ad:9b:31:a0:3c:c0:e5:0c:9e:a9:cf:a6:1a:5a: 2f:c3:26:ef:ae:89:46:ea:48:76:97:2f:0d:49:77:f1:fa:64: 5b:7a:11:55:06:fd:21:96:4a:d1:d1:6f:df:64:dc:f4:1b:6e: a3:65:ec:51:cf:0c:35:1d:06:f3:74:48:b7:dd:b0:f0:bb:a4: e2:9d:e4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpeUZlGEbh9DhSecwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk MmFlYWQwMTUtNGZiMi00YjdkLWIzZDgtYzhjZWMyMjkxNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrhHkUjXRVIgdxl2hzsBXHeylzJT6BGBa4jY T/Qje1KE+t4aE7gY4VGbK9AOuouO2qeDeV95H1plbvg3uOvY578AALKO2yPSgRuZ iBbnQMZR6zVySqNNsJFMVz/xvcoQ98z4xfNXUOJn3/INctrwtX0LS7lWjVwASFTu JUygjWjpfVgAb+zV00NAFdk/zB9kyTAYh7Kw40Yuuc0ZAr2/WG5G1tUR6BCUg672 1vz3PoQnODsFPazSjpykNh3O+z9ePhgJC5dC9Xv9GBl2S8Q1zVOjxbrbiI7qzBmn kKqeD8XAN7YHbVzk8Jt01k82nHtn/a0U1dpa5p/Mb9PiYZVDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdGU+UdzlWj0OpPh8vwrLw9e39cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYjcwYzY2NGEtZjZlYi0z MTRlLTg3NDAtNjZhN2RhYmNiZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRmHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgxglnoRi7zje3lOppaaLVJ5iak92vXE7gIO7EpkBOvNWuxXiBDk8AR b0ZRmtrEiFv8+sners1CI2SIVnDVJfzU1mh9sOqMVu12itaopjtPuWGcWiyq2RxQ hUJXeITPKPioxdH4IM+g03ba+riqwdEX0guGUcVPEmaf1nKS0MBG8Ocq0JEDhr0p poz2LN9Rr1xS2XlsovRc3tFdwJeJx9Lqs/4AvtJrHLpL6M/jUnhXRdJKK/mZ0Jat mzGgPMDlDJ6pz6YaWi/DJu+uiUbqSHaXLw1Jd/H6ZFt6EVUG/SGWStHRb99k3PQb bqNl7FHPDDUdBvN0SLfdsPC7pOKd5CA= -----END CERTIFICATE-----Generated at Mon Apr 7 16:58:48 2025 by rpki-client