$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa File: d95300ce-edc2-374f-9bbe-f66958b3ae81.roa (raw, json) Hash identifier: R1mYwrUxefWBXun8CcBZDu2IO4slmLdnLAn4LykS2pM= Subject key identifier: E4:CB:24:0A:DC:56:1D:2E:7B:6E:D3:6B:E0:7D:B3:C1:1B:97:20:75 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848BBBB84CF20BEACAF73FA7440 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 72.35.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:84:cf:20:be:ac:af:73:fa:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=fb7a7054-9180-4551-a24b-80d4299b9b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4b:d9:a4:c0:e7:4b:82:09:4d:a9:7a:a3:8f: 62:17:14:af:9f:e9:f2:05:38:4e:e6:83:31:b9:2f: 49:82:7e:58:dd:c6:b1:b8:24:4f:1c:59:fc:9a:24: a2:35:e1:cf:87:4f:a0:10:2a:0e:9a:fd:2b:ae:58: 3f:1c:6f:df:49:e7:1e:15:4b:bb:73:55:e8:48:55: 1e:d3:2e:5f:e2:19:40:40:28:97:c9:53:6b:b6:06: a6:86:9c:f6:69:e1:3c:67:31:fd:91:5f:be:76:0f: bc:e9:58:43:a6:2d:f1:a3:d6:ee:b0:19:e5:f3:32: 2c:57:8f:04:ec:09:ed:5c:9a:a2:83:b6:f1:1a:37: c8:ab:10:9a:fc:0c:8c:e9:24:cd:43:7b:d8:4d:d2: a3:f4:0c:50:e9:25:9a:b5:1a:4f:a9:bc:95:63:c3: 53:e5:96:68:d0:f7:14:04:eb:b9:86:77:64:ed:e4: 3d:bc:bb:56:ea:be:38:2e:d0:a6:b1:49:87:5e:f1: ea:eb:7f:a6:09:1f:1b:44:f0:59:d2:71:a9:1f:37: df:4b:1d:cc:d1:8a:de:1b:41:78:3b:fb:24:a4:c1: 95:33:41:09:0b:3d:17:b2:9e:1b:d2:8f:11:0b:e8: bb:19:ab:26:2d:0e:85:20:42:37:21:aa:c9:f1:42: 81:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CB:24:0A:DC:56:1D:2E:7B:6E:D3:6B:E0:7D:B3:C1:1B:97:20:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8e:10:65:a2:90:38:a0:4c:38:53:b9:61:8b:09:5a:24:3f: b7:95:2e:91:37:2c:4f:cc:b2:49:ff:11:78:9a:b1:d0:a3:71: a9:bb:e8:83:f0:01:89:2e:02:67:b2:6c:db:73:2c:6c:f3:13: 36:0c:39:f4:5e:9a:a0:2e:fb:11:a9:e8:81:fd:02:aa:3b:b0: a4:3b:50:d3:3b:6b:4f:cb:5d:9e:ad:03:cf:f0:84:ee:5c:ef: 7f:ff:bf:56:1f:0b:01:4c:f5:4d:3c:83:00:02:18:3c:ad:d5: 06:cd:4d:6e:f3:8a:33:94:54:67:1b:25:cf:c1:27:d2:43:f8: c9:76:02:7f:96:5a:c4:70:96:97:97:a3:4c:24:6e:3a:8b:05: 82:f5:04:97:42:cb:f4:27:0b:f1:0c:5e:bb:f3:3f:ab:1b:03: 51:17:09:ca:dd:95:b9:f5:1d:09:56:d0:82:fd:45:54:0b:b1: 65:7c:9c:c5:76:6c:e6:30:ab:40:bb:da:77:ff:cf:3c:8b:ed: 1a:a6:04:e1:ef:be:34:84:92:62:d7:df:bb:3d:63:70:bb:52: e6:df:64:e8:3a:78:b7:71:81:bf:8c:94:4b:21:07:e1:cb:6d: ff:c1:20:0e:22:1a:50:b0:3d:cb:74:91:1a:fb:ab:04:6c:74: 4d:cc:38:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4TPIL6sr3P6dEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk ZmI3YTcwNTQtOTE4MC00NTUxLWEyNGItODBkNDI5OWI5YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEvZpMDnS4IJTal6o49iFxSvn+nyBThO5oMx uS9Jgn5Y3caxuCRPHFn8miSiNeHPh0+gECoOmv0rrlg/HG/fSeceFUu7c1XoSFUe 0y5f4hlAQCiXyVNrtgamhpz2aeE8ZzH9kV++dg+86VhDpi3xo9busBnl8zIsV48E 7AntXJqig7bxGjfIqxCa/AyM6STNQ3vYTdKj9AxQ6SWatRpPqbyVY8NT5ZZo0PcU BOu5hndk7eQ9vLtW6r44LtCmsUmHXvHq63+mCR8bRPBZ0nGpHzffSx3M0YreG0F4 O/skpMGVM0EJCz0Xsp4b0o8RC+i7GasmLQ6FIEI3IarJ8UKBewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTLJArcVh0ue27Ta+B9s8EblyB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDk1MzAwY2UtZWRjMi0z NzRmLTliYmUtZjY2OTU4YjNhZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmOEGWikDigTDhTuWGLCVokP7eVLpE3LE/Mskn/EXiasdCjcam76IPw AYkuAmeybNtzLGzzEzYMOfRemqAu+xGp6IH9Aqo7sKQ7UNM7a0/LXZ6tA8/whO5c 73//v1YfCwFM9U08gwACGDyt1QbNTW7zijOUVGcbJc/BJ9JD+Ml2An+WWsRwlpeX o0wkbjqLBYL1BJdCy/QnC/EMXrvzP6sbA1EXCcrdlbn1HQlW0IL9RVQLsWV8nMV2 bOYwq0C72nf/zzyL7RqmBOHvvjSEkmLX37s9Y3C7UubfZOg6eLdxgb+MlEshB+HL bf/BIA4iGlCwPct0kRr7qwRsdE3MOAQ= -----END CERTIFICATE-----Generated at Sun Apr 6 07:11:04 2025 by rpki-client