$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa File: b901d0b0-12e7-3431-9cd8-0764317e0506.roa (raw, json) Hash identifier: dNxhVpgXP4h8UiQC1UL5KAB5XWKtZXGykyLsOVpu1Ic= Subject key identifier: 1F:E9:62:30:BE:C1:F7:FA:3C:B2:AD:8B:38:15:B9:2F:8F:49:D7:31 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848BBBB851257D35D87DEF920C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 72.35.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:85:12:57:d3:5d:87:de:f9:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=7e5665a4-45ca-4ac0-9f17-419a171a5219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ce:2d:32:49:f2:02:13:f6:71:68:25:f1:19: de:f2:cc:a5:8a:a9:df:e4:3d:d8:aa:44:65:65:d5: b8:fa:68:5f:3d:f0:e4:7e:75:f1:3d:07:e5:fe:88: 50:24:00:e3:35:d5:29:1f:f9:2c:58:41:82:07:b9: d6:90:47:f8:ce:52:6f:c9:ad:ec:59:52:73:b0:92: 77:bb:7a:2c:82:0d:c4:ce:a9:17:c1:85:62:84:5d: 89:e7:3a:9d:8d:ef:1f:17:2e:64:41:b2:e8:d0:d6: 7a:ef:02:b3:85:4c:8a:7f:69:ab:a1:9c:69:93:b6: 53:f2:fb:43:4f:2e:6f:0a:dd:b0:73:a3:d6:bb:83: b7:14:5b:a5:69:bf:11:0b:ec:0e:d6:ea:d6:e5:6c: cb:92:e2:6e:c4:00:3c:34:c0:4b:d0:56:51:9d:83: cf:8e:4f:64:73:08:9e:78:ea:45:65:76:c8:e0:a0: 27:c9:da:a1:0b:78:fc:67:5d:ea:16:ac:1e:d2:1e: 15:7e:aa:71:89:9e:a5:84:cd:6b:4b:06:c3:3d:2b: af:4a:54:83:69:b5:58:e6:e8:5e:c9:e6:b3:13:6e: ba:6f:46:a6:69:a2:98:7d:d0:b3:2c:38:d8:91:91: db:b0:d5:74:53:f0:97:39:ed:38:70:9d:37:7e:53: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E9:62:30:BE:C1:F7:FA:3C:B2:AD:8B:38:15:B9:2F:8F:49:D7:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:76:8c:c1:2e:07:25:f6:32:02:fa:31:0e:ce:76:a2:a9:c6: 07:ce:5f:a2:b8:4b:6a:88:ea:9a:a2:15:38:22:55:18:c8:2f: 4b:77:dc:69:59:62:d4:5a:25:5a:3b:94:50:05:7b:1b:b5:ce: b2:00:a1:ac:ac:62:d6:5f:59:73:6e:26:bc:4c:bf:f7:fe:a4: 4a:70:c2:5c:45:fe:88:54:d3:a9:93:14:ec:b5:f6:61:17:d6: d9:42:73:d8:21:8a:99:88:da:58:67:64:a6:3d:fa:23:55:c6: d5:43:b9:88:4d:7a:fd:e3:7b:7d:e2:9c:ce:56:b9:19:3b:ae: 1b:59:9c:40:b7:88:9d:3c:eb:42:93:bf:4b:12:e0:f0:9d:e1: 8a:87:59:45:f2:ef:32:58:78:33:4d:38:5e:8e:46:82:69:1b: c5:41:a0:0e:d7:d6:18:94:43:75:0d:35:45:97:c0:b2:fb:2c: 1c:82:b8:d5:fa:a5:14:92:6d:2c:fc:8f:cc:d2:b2:f6:6d:74: d7:d4:3e:e6:4d:e5:4c:18:ae:88:a3:56:e3:5f:62:f4:c0:63: 02:bc:11:e2:4d:38:bb:f5:c1:25:ed:b8:bc:2a:2f:27:17:a1: d6:34:22:7f:7b:58:6a:2d:97:e9:f4:e5:41:d0:9f:96:1d:25: 98:37:d1:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4USV9Ndh975IMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk N2U1NjY1YTQtNDVjYS00YWMwLTlmMTctNDE5YTE3MWE1MjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp84tMknyAhP2cWgl8Rne8syliqnf5D3YqkRl ZdW4+mhfPfDkfnXxPQfl/ohQJADjNdUpH/ksWEGCB7nWkEf4zlJvya3sWVJzsJJ3 u3osgg3EzqkXwYVihF2J5zqdje8fFy5kQbLo0NZ67wKzhUyKf2mroZxpk7ZT8vtD Ty5vCt2wc6PWu4O3FFulab8RC+wO1urW5WzLkuJuxAA8NMBL0FZRnYPPjk9kcwie eOpFZXbI4KAnydqhC3j8Z13qFqwe0h4VfqpxiZ6lhM1rSwbDPSuvSlSDabVY5uhe yeazE266b0amaaKYfdCzLDjYkZHbsNV0U/CXOe04cJ03flNEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/pYjC+wff6PLKtizgVuS+PSdcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjkwMWQwYjAtMTJlNy0z NDMxLTljZDgtMDc2NDMxN2UwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKx2jMEuByX2MgL6MQ7OdqKpxgfOX6K4S2qI6pqiFTgiVRjIL0t33GlZ YtRaJVo7lFAFexu1zrIAoaysYtZfWXNuJrxMv/f+pEpwwlxF/ohU06mTFOy19mEX 1tlCc9ghipmI2lhnZKY9+iNVxtVDuYhNev3je33inM5WuRk7rhtZnEC3iJ0860KT v0sS4PCd4YqHWUXy7zJYeDNNOF6ORoJpG8VBoA7X1hiUQ3UNNUWXwLL7LByCuNX6 pRSSbSz8j8zSsvZtdNfUPuZN5UwYroijVuNfYvTAYwK8EeJNOLv1wSXtuLwqLycX odY0In97WGotl+n05UHQn5YdJZg30YM= -----END CERTIFICATE-----Generated at Sun Apr 6 04:37:37 2025 by rpki-client