$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa File: 17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa (raw, json) Hash identifier: 3GUWS63skUQyUuaKC5AQw8f/U8/mEQCvpqE8+Om3J20= Subject key identifier: CA:45:12:93:5E:2B:A3:01:5B:E9:A2:BB:62:D8:E5:6D:F9:C7:CB:10 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848BBBB857DB42F998591526380 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 72.35.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:85:7d:b4:2f:99:85:91:52:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=ab9ebbc2-16cc-46f8-b3c6-bae31e7c5cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:68:8e:ed:97:74:ae:a2:7d:b0:2c:5f:65:44: ef:1b:49:66:01:4f:91:1a:d5:c9:21:91:c2:9b:b1: 3e:6f:b0:dc:3f:c7:59:67:47:b9:08:e4:bf:16:5e: a2:da:e0:5e:22:40:2b:a9:7d:c8:4f:c4:23:3f:c6: d7:00:d4:1e:2c:96:11:b8:4c:5e:14:52:bf:10:ad: ad:f3:83:d1:31:14:81:e8:92:7c:a9:6e:b7:9a:c2: 5f:b9:0f:4c:7a:66:1a:88:6c:09:18:88:48:ae:d8: e3:24:f3:55:07:09:d3:d3:96:7b:8d:87:68:ca:9c: 87:68:51:c0:4f:d3:81:4d:dc:25:52:55:13:4c:3e: a4:6c:81:84:0b:72:c7:af:e6:5d:84:ca:f6:c5:a9: c4:23:33:1d:56:63:32:9a:42:26:be:f5:c0:17:32: e9:c8:10:d4:d6:25:be:81:95:0e:ce:96:1f:3a:8f: ce:4f:30:ee:02:ce:48:55:9c:d0:17:50:ef:a7:53: 85:34:14:90:d4:68:30:01:e8:33:5d:d7:b4:04:c5: ea:e3:e1:e9:5b:ae:9f:a0:b6:06:d2:65:b3:41:65: b1:48:51:59:50:20:cf:77:81:17:66:b5:d0:b5:09: d3:39:f0:eb:67:ab:68:b1:7e:a4:86:8e:d9:cf:16: 6e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:45:12:93:5E:2B:A3:01:5B:E9:A2:BB:62:D8:E5:6D:F9:C7:CB:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:fa:56:fa:5c:e5:e6:8f:c8:d2:10:dc:da:c8:6c:9c:a3:1b: 45:b4:03:d4:3b:fc:62:d4:30:16:da:3b:eb:da:c1:be:a5:7d: 00:22:5c:28:c1:5f:d5:3c:6f:d1:91:25:15:ea:81:ab:3f:82: 68:0b:56:a2:57:be:d9:e9:26:f7:94:8d:95:60:b8:11:fb:1c: 04:58:bc:b0:72:3d:63:d3:d3:90:a0:8f:71:ec:ea:d8:a0:7c: da:76:91:e2:36:4d:b8:25:81:3e:c4:13:28:af:1b:af:cb:72: f2:50:53:7a:77:38:46:48:38:72:53:d8:c5:4a:ee:0d:36:d1: 6f:19:17:46:72:51:e0:f4:36:8c:d9:8b:04:c9:68:39:af:17: 09:d4:84:10:37:13:02:bc:52:f7:52:c7:2d:3e:fd:96:88:a2: a8:59:bd:00:d5:cb:83:6e:01:2c:b8:c2:a0:3c:ed:7b:bf:99: a4:0b:03:69:c4:f0:3d:26:0b:72:6d:1f:8c:70:7d:e4:44:24: d4:01:10:94:46:d0:ed:6f:60:71:23:ba:28:9b:d0:6e:99:84: 04:d3:48:c2:b8:5f:d8:3b:b9:b8:3c:bf:3e:6f:f5:3e:c6:4f: 50:bc:9c:39:21:22:a8:94:21:be:7b:43:16:35:91:bd:1f:c7: c7:c7:fa:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4V9tC+ZhZFSY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk YWI5ZWJiYzItMTZjYy00NmY4LWIzYzYtYmFlMzFlN2M1Y2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWiO7Zd0rqJ9sCxfZUTvG0lmAU+RGtXJIZHC m7E+b7DcP8dZZ0e5COS/Fl6i2uBeIkArqX3IT8QjP8bXANQeLJYRuExeFFK/EK2t 84PRMRSB6JJ8qW63msJfuQ9MemYaiGwJGIhIrtjjJPNVBwnT05Z7jYdoypyHaFHA T9OBTdwlUlUTTD6kbIGEC3LHr+ZdhMr2xanEIzMdVmMymkImvvXAFzLpyBDU1iW+ gZUOzpYfOo/OTzDuAs5IVZzQF1Dvp1OFNBSQ1GgwAegzXde0BMXq4+HpW66foLYG 0mWzQWWxSFFZUCDPd4EXZrXQtQnTOfDrZ6tosX6kho7ZzxZuIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpFEpNeK6MBW+miu2LY5W35x8sQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMTdjZTcxMDEtMjVlNi0z Yjg2LThjYjctZTc0OGFlOGY5YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALP6Vvpc5eaPyNIQ3NrIbJyjG0W0A9Q7/GLUMBbaO+vawb6lfQAiXCjB X9U8b9GRJRXqgas/gmgLVqJXvtnpJveUjZVguBH7HARYvLByPWPT05Cgj3Hs6tig fNp2keI2TbglgT7EEyivG6/LcvJQU3p3OEZIOHJT2MVK7g020W8ZF0ZyUeD0NozZ iwTJaDmvFwnUhBA3EwK8UvdSxy0+/ZaIoqhZvQDVy4NuASy4wqA87Xu/maQLA2nE 8D0mC3JtH4xwfeREJNQBEJRG0O1vYHEjuiib0G6ZhATTSMK4X9g7ubg8vz5v9T7G T1C8nDkhIqiUIb57QxY1kb0fx8fH+mE= -----END CERTIFICATE-----Generated at Sun Apr 6 04:34:57 2025 by rpki-client