$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa File: 8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa (raw, json) Hash identifier: VQLIx/OfSadZM+dUk0WR+xSFpqTubNMOKvke/L0hgPQ= Subject key identifier: 95:2B:79:C2:AB:37:DA:F7:6D:FF:AA:07:D7:56:49:33:0B:0C:FA:CF Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Certificate serial: 010D0C9F432858494733EBAD1F3EE747B0131900 Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 3695 IP address blocks: 70.36.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:eb:ad:1f:3e:e7:47:b0:13:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=e4f38dca-91d4-4a42-85ef-47f8efc1ca8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:29:9b:df:e7:68:76:35:e5:72:31:9d:f2: 7f:93:f8:aa:62:2b:95:8c:68:27:70:55:b8:ce:69: 9e:88:84:36:f0:6a:c9:52:ff:7d:b5:69:d5:42:a7: 11:59:9d:1a:25:39:c3:72:59:40:90:8d:f6:bb:86: 70:68:8c:9e:b5:de:d9:3f:aa:c9:a3:34:0c:cc:e8: e4:d5:79:23:fa:e6:38:8c:f9:ed:25:11:d4:f9:eb: 63:f0:f7:ad:2c:d7:52:d5:9f:15:11:77:f1:2f:45: 7f:6a:19:a4:ba:29:c4:50:e7:06:2c:03:77:ba:07: f4:31:65:32:06:c6:21:4e:61:5f:94:6e:c1:ce:a6: 48:67:7a:9b:c7:23:e9:c6:01:42:46:86:b5:7e:2f: d6:ed:60:c0:f8:3a:4c:05:b1:85:ec:96:2c:3d:0f: d9:7e:64:64:1f:1f:49:e1:d6:31:7d:f6:d8:d7:ec: 3a:c2:bc:18:13:34:3a:bd:9e:31:ca:2b:60:02:a6: 67:49:65:88:d6:b2:bf:39:25:bb:07:dc:43:64:e0: 17:69:f8:62:96:c0:0a:a8:23:a5:e0:5a:10:75:4b: 41:ef:68:24:56:04:8a:f9:80:7b:3b:3b:64:3c:eb: 0c:8b:c6:cd:ef:e9:ac:77:7b:89:28:4e:9d:ad:d9: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2B:79:C2:AB:37:DA:F7:6D:FF:AA:07:D7:56:49:33:0B:0C:FA:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8794a2cf-47e8-3a20-8410-4acbb50ac4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl X509v3 Authority Key Identifier: keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer sbgp-ipAddrBlock: critical IPv4: 70.36.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bd:bd:4c:c4:1f:e0:8b:6c:9c:46:43:14:61:3f:c2:33:18: 0a:bb:54:e4:af:58:10:ee:e5:51:7f:d1:e1:84:4c:6b:53:eb: 46:8a:46:3d:9a:36:22:a1:67:72:d8:99:96:c5:9e:63:8a:24: fd:07:5a:e4:8e:cd:a0:49:f4:be:dd:6a:15:f0:0b:48:f0:91: 02:f4:5f:c1:de:a2:0f:e4:ef:f5:5b:18:9a:80:7d:2a:1d:b4: 61:e1:e4:0f:37:3e:4e:f5:ee:87:b7:fe:29:27:14:d5:39:73: 58:5e:aa:a7:f4:7d:86:e8:13:8e:20:ad:71:ee:a8:a4:c7:5c: 2a:ad:19:07:c6:9c:ac:8b:c9:2d:4b:d0:13:a9:0b:e2:51:61: f8:7d:79:79:08:b2:2d:f2:ae:44:7e:ae:1c:3f:ff:f7:fe:b1: a1:e8:a1:14:75:6a:9a:e3:59:26:3b:7f:ee:33:88:49:76:85: 7c:2b:d2:d8:98:0e:21:dd:74:3a:71:08:af:5b:11:dd:6b:2d: e1:ca:72:af:a0:e1:91:d8:57:36:86:83:1e:ce:d4:44:89:68: f1:08:ab:53:43:05:74:73:a3:79:1f:98:1f:9a:0f:c1:ed:49: 06:07:6e:d9:95:3f:e1:82:9f:9a:8c:62:b1:8b:59:27:70:ba: 46:24:0d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+utHz7nR7ATGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi NTIwMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTRmMzhkY2EtOTFkNC00YTQyLTg1ZWYtNDdmOGVmYzFjYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Apm9/naHY15XIxnfJ/k/iqYiuVjGgncFW4 zmmeiIQ28GrJUv99tWnVQqcRWZ0aJTnDcllAkI32u4ZwaIyetd7ZP6rJozQMzOjk 1Xkj+uY4jPntJRHU+etj8PetLNdS1Z8VEXfxL0V/ahmkuinEUOcGLAN3ugf0MWUy BsYhTmFflG7BzqZIZ3qbxyPpxgFCRoa1fi/W7WDA+DpMBbGF7JYsPQ/ZfmRkHx9J 4dYxffbY1+w6wrwYEzQ6vZ4xyitgAqZnSWWI1rK/OSW7B9xDZOAXafhilsAKqCOl 4FoQdUtB72gkVgSK+YB7OztkPOsMi8bN7+msd3uJKE6drdl4sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUrecKrN9r3bf+qB9dWSTMLDPrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvODc5NGEyY2YtNDdlOC0z YTIwLTg0MTAtNGFjYmI1MGFjNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0 MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu9vUzEH+CLbJxGQxRhP8IzGAq7VOSvWBDu5VF/0eGETGtT60aKRj2a NiKhZ3LYmZbFnmOKJP0HWuSOzaBJ9L7dahXwC0jwkQL0X8Heog/k7/VbGJqAfSod tGHh5A83Pk717oe3/iknFNU5c1heqqf0fYboE44grXHuqKTHXCqtGQfGnKyLyS1L 0BOpC+JRYfh9eXkIsi3yrkR+rhw///f+saHooRR1aprjWSY7f+4ziEl2hXwr0tiY DiHddDpxCK9bEd1rLeHKcq+g4ZHYVzaGgx7O1ESJaPEIq1NDBXRzo3kfmB+aD8Ht SQYHbtmVP+GCn5qMYrGLWSdwukYkDVw= -----END CERTIFICATE-----Generated at Sat Apr 5 22:30:03 2025 by rpki-client