$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa File: f19facf1-4a12-311e-8e58-61e270fe2255.roa (raw, json) Hash identifier: 6CbuhBCMS3/YJJJMQlg0MBRiowEmaq0lYu5JRyHgNuI= Subject key identifier: C0:E0:E5:B5:0B:3D:12:E3:F6:8F:B8:19:20:38:DA:0B:18:91:6A:73 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F43285848BBBB84E18CED9D865B46E700 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 11090 IP address blocks: 72.35.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:84:e1:8c:ed:9d:86:5b:46:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=95ba58a9-55a4-43e6-8b30-6e2efff3689e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:ec:74:cd:02:a0:cf:37:8c:72:59:99:d2: b5:03:4a:f8:a2:3d:0c:cb:a1:56:bf:ea:89:42:d1: 12:27:21:89:e1:30:bd:7b:58:5e:1c:4d:5a:7a:52: 14:71:60:17:66:19:03:64:89:67:3e:79:de:55:0f: a7:13:50:54:82:44:0f:2e:23:30:2a:ea:c6:69:11: c3:00:e5:d3:bf:1e:18:4a:f0:aa:fd:d1:5e:bf:77: fd:20:57:4c:d5:8b:73:e1:ea:eb:7b:e4:cc:83:34: e0:f9:0b:3e:84:12:b4:30:dd:61:26:db:32:ec:08: 46:31:0a:2d:04:cc:f1:79:8f:91:ec:4b:2b:1e:90: ef:4d:f2:58:d1:db:d6:94:6a:6b:76:16:7e:ec:e8: c7:b0:67:6a:1d:56:2e:46:22:a9:dc:ef:1c:ce:b7: 2c:00:c6:60:1c:41:11:e9:34:5e:2d:d0:d0:74:69: 4e:c7:02:d2:26:f4:b3:08:30:ad:70:da:06:57:99: 98:dd:eb:82:bc:0c:b3:6a:83:4a:e1:00:95:bb:67: 68:8d:5e:15:ff:19:4f:c5:f7:0a:d7:c1:f2:e7:4b: a5:00:55:3b:78:02:46:1e:5a:d8:95:08:54:af:25: 2c:3b:a3:32:34:bd:a9:58:cb:f1:12:cb:4d:e0:1a: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E0:E5:B5:0B:3D:12:E3:F6:8F:B8:19:20:38:DA:0B:18:91:6A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:93:f7:4e:f0:8d:0b:88:fa:b5:23:82:19:83:ac:eb:0a:9e: 75:04:20:15:f7:ef:3c:25:cf:65:d2:be:0b:f7:e7:69:30:66: 2c:6a:ac:df:52:3b:02:d5:b4:cd:fd:82:f3:29:d5:21:cc:b8: 11:1b:87:29:32:f6:ba:f8:5b:1a:bb:df:94:7e:db:99:3a:e8: a9:00:9d:dd:f0:08:33:ce:a7:0b:2c:f7:91:c6:3f:0c:97:ea: 2f:cf:fc:e0:85:2c:56:4b:f3:f2:77:fe:d5:53:e2:2c:6d:ca: 6c:49:2f:36:6b:26:bc:03:96:a9:29:12:e2:67:9f:b8:c2:3e: 11:c3:d8:dc:f0:eb:0c:d6:ce:f4:1f:82:ca:79:23:aa:cf:92: 0f:a9:dc:14:3d:19:e7:16:ed:d0:b2:d7:20:1a:f5:d9:6f:7c: 0d:09:d8:9f:fb:0b:21:35:7c:60:f6:fe:0b:e5:ff:6a:13:f9: 94:50:c9:8d:70:b7:b5:c4:c8:5d:44:8f:75:3d:fa:de:3d:94: 3b:37:2f:e8:73:c8:05:7d:21:79:66:64:e8:61:a3:2e:99:5c: f4:e0:20:5c:db:d1:45:b8:48:f0:61:97:4c:9e:08:ff:66:ce: ac:b3:51:4f:54:f2:03:fc:79:39:d4:84:e4:45:28:c7:af:90: a2:57:f2:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u4ThjO2dhltG5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk OTViYTU4YTktNTVhNC00M2U2LThiMzAtNmUyZWZmZjM2ODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvzsdM0CoM83jHJZmdK1A0r4oj0My6FWv+qJ QtESJyGJ4TC9e1heHE1aelIUcWAXZhkDZIlnPnneVQ+nE1BUgkQPLiMwKurGaRHD AOXTvx4YSvCq/dFev3f9IFdM1Ytz4erre+TMgzTg+Qs+hBK0MN1hJtsy7AhGMQot BMzxeY+R7EsrHpDvTfJY0dvWlGprdhZ+7OjHsGdqHVYuRiKp3O8czrcsAMZgHEER 6TReLdDQdGlOxwLSJvSzCDCtcNoGV5mY3euCvAyzaoNK4QCVu2dojV4V/xlPxfcK 18Hy50ulAFU7eAJGHlrYlQhUryUsO6MyNL2pWMvxEstN4Bo3GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDg5bULPRLj9o+4GSA42gsYkWpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZjE5ZmFjZjEtNGExMi0z MTFlLThlNTgtNjFlMjcwZmUyMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWT907wjQuI+rUjghmDrOsKnnUEIBX37zwlz2XSvgv352kwZixqrN9S OwLVtM39gvMp1SHMuBEbhyky9rr4Wxq735R+25k66KkAnd3wCDPOpwss95HGPwyX 6i/P/OCFLFZL8/J3/tVT4ixtymxJLzZrJrwDlqkpEuJnn7jCPhHD2Nzw6wzWzvQf gsp5I6rPkg+p3BQ9GecW7dCy1yAa9dlvfA0J2J/7CyE1fGD2/gvl/2oT+ZRQyY1w t7XEyF1Ej3U9+t49lDs3L+hzyAV9IXlmZOhhoy6ZXPTgIFzb0UW4SPBhl0yeCP9m zqyzUU9U8gP8eTnUhORFKMevkKJX8qI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:15 2025 by rpki-client