$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa File: 9859d862-4d98-35a1-89c4-8fbd5124fac9.roa (raw, json) Hash identifier: d0ys2KDkY4opiSwRJ7F6RN/VF0Qn+icBshu2/V1YTKs= Subject key identifier: 9F:F1:2B:93:BF:A8:CC:00:86:92:D6:04:8A:B7:D5:C4:1A:31:CA:5C Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848BBBB852102AC06035377CE80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 72.35.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:85:21:02:ac:06:03:53:77:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=bfe78437-6f83-4f3c-ad8c-1ed6d474ba14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:77:f8:74:01:b6:94:f6:88:a3:88:4d:b6: 04:e1:f0:a7:f6:19:1f:5f:9e:41:a3:fd:79:35:f4: 3b:54:3c:e4:0c:77:a1:ca:c0:0f:ba:a2:34:27:2e: 3f:8c:0f:38:d8:b0:c0:3f:1b:7e:4a:a8:78:34:3b: ec:e0:22:e5:cd:f3:45:a4:c7:0e:33:a3:17:91:14: 40:6a:2b:a0:6e:78:4d:56:0d:90:bf:3f:45:7a:0f: 1d:70:53:49:fa:cf:0c:9b:cb:61:d8:b6:94:b8:78: 9f:58:18:a7:e2:dc:78:c0:8f:5a:50:fb:20:a1:69: 57:8b:c7:1b:19:da:54:34:76:3a:b6:0f:5c:8d:dc: 65:67:fe:ff:c3:63:2f:2f:0c:81:79:5a:07:fd:22: 1b:e5:fa:5b:5e:36:fc:c0:7a:5e:24:c8:6e:20:e7: 75:1a:6d:be:34:07:3d:e2:57:53:35:ec:e1:28:57: d6:ec:46:76:cb:09:1c:af:ec:19:d7:95:29:bf:6f: ea:bc:2d:9a:a4:55:9d:ca:cf:b3:2e:72:04:65:2d: 67:89:37:a2:d8:4b:ee:d3:c2:88:1e:fb:0f:ea:02: ce:9b:1d:e5:08:3d:db:3a:fc:04:7a:a3:55:94:b1: e4:71:d6:4d:64:f3:df:19:22:78:73:07:dd:05:b3: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F1:2B:93:BF:A8:CC:00:86:92:D6:04:8A:B7:D5:C4:1A:31:CA:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:08:da:6b:3d:96:7d:25:3f:27:8c:2f:7d:e3:51:df:af:32: bd:b6:05:2e:34:c6:98:58:f4:51:d1:2d:3b:c2:07:92:de:8a: 98:52:37:7d:55:4d:59:42:22:ab:24:e7:56:3a:56:6f:ab:21: e4:e0:1e:8e:d3:42:15:7f:26:bc:87:84:04:5c:ce:79:e1:e7: 7e:58:98:30:fb:9a:06:cc:e9:ad:04:a1:f4:13:66:98:8f:bb: 58:cf:cb:7f:72:d0:7e:a6:f8:a0:07:5b:79:ce:94:44:9e:c5: 93:7d:2d:50:a9:73:1d:e8:c5:4f:6f:92:d0:99:7a:48:3a:05: db:91:81:c1:20:38:ac:f3:a0:c3:37:5e:d0:67:c7:b3:72:a4: 09:39:8f:cd:f0:b0:82:8a:0a:fe:da:eb:00:c1:cb:b6:10:7e: 2b:16:cd:68:96:bf:24:5f:15:b4:56:cb:4b:91:8f:e5:50:3e: 44:6a:12:c5:e0:86:63:64:07:dd:4f:d1:2f:fd:d2:e4:23:e7: 2b:84:46:d4:1a:85:b1:92:3e:8e:46:6c:2e:8b:d6:b6:fc:c9: ef:3b:fe:3e:6a:e1:4f:a0:ba:04:a8:d8:fe:f5:8e:b4:74:3e: 45:29:dc:13:07:6b:83:7e:ad:37:25:9e:26:18:53:1e:c7:46: 20:ed:f9:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4UhAqwGA1N3zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk YmZlNzg0MzctNmY4My00ZjNjLWFkOGMtMWVkNmQ0NzRiYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGZ3+HQBtpT2iKOITbYE4fCn9hkfX55Bo/15 NfQ7VDzkDHehysAPuqI0Jy4/jA842LDAPxt+Sqh4NDvs4CLlzfNFpMcOM6MXkRRA aiugbnhNVg2Qvz9Feg8dcFNJ+s8Mm8th2LaUuHifWBin4tx4wI9aUPsgoWlXi8cb GdpUNHY6tg9cjdxlZ/7/w2MvLwyBeVoH/SIb5fpbXjb8wHpeJMhuIOd1Gm2+NAc9 4ldTNezhKFfW7EZ2ywkcr+wZ15Upv2/qvC2apFWdys+zLnIEZS1niTei2Evu08KI HvsP6gLOmx3lCD3bOvwEeqNVlLHkcdZNZPPfGSJ4cwfdBbMQJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/xK5O/qMwAhpLWBIq31cQaMcpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvOTg1OWQ4NjItNGQ5OC0z NWExLTg5YzQtOGZiZDUxMjRmYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0I2ms9ln0lPyeML33jUd+vMr22BS40xphY9FHRLTvCB5LeiphSN31V TVlCIqsk51Y6Vm+rIeTgHo7TQhV/JryHhARcznnh535YmDD7mgbM6a0EofQTZpiP u1jPy39y0H6m+KAHW3nOlESexZN9LVCpcx3oxU9vktCZekg6BduRgcEgOKzzoMM3 XtBnx7NypAk5j83wsIKKCv7a6wDBy7YQfisWzWiWvyRfFbRWy0uRj+VQPkRqEsXg hmNkB91P0S/90uQj5yuERtQahbGSPo5GbC6L1rb8ye87/j5q4U+gugSo2P71jrR0 PkUp3BMHa4N+rTclniYYUx7HRiDt+Wo= -----END CERTIFICATE-----Generated at Fri Mar 14 13:40:57 2025 by rpki-client