$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa File: 8e5ed9de-8260-3f23-8a5f-845c119039ad.roa (raw, json) Hash identifier: OBIsfMtOy6aM0/El9BbGUt/OCdcuFCsxMvMxbq2UAoo= Subject key identifier: 76:4F:51:D1:7F:C2:D3:F9:0F:86:B4:2F:E6:C8:18:65:42:07:15:BD Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Certificate serial: 010D0C9F432858494733EAFF1FF787147E675D00 Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 3695 IP address blocks: 70.36.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ea:ff:1f:f7:87:14:7e:67:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=e17d5dce-2339-4e92-a01e-5cf4ec0c80fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:ac:be:9e:14:1f:eb:f4:e3:71:90:fa:9d: 3b:72:12:5d:8e:33:a6:af:92:6c:28:dd:99:01:cb: c2:7f:f1:8a:26:62:cf:b0:83:1c:3f:55:1e:1c:ad: 8f:44:76:c5:49:50:79:ee:b1:9e:1b:a4:5c:c9:b7: bc:16:37:28:3b:9a:97:c6:eb:e4:b8:5f:10:f9:1c: 28:11:3d:5c:13:fc:46:be:ac:f1:2f:1c:b0:11:c1: 62:96:8b:c2:11:c4:1a:d3:ba:25:a4:e4:a7:5c:cd: 0a:35:98:36:86:0b:7a:e6:96:78:23:ba:4e:3a:b1: f6:60:ff:ef:48:4b:62:fb:0d:58:c5:3e:f9:76:5c: b8:c2:f0:0d:f9:7d:72:5e:3f:91:af:c7:6a:ce:6e: 56:21:86:23:e9:15:4e:2b:28:b1:6f:cf:0c:56:58: a4:88:b6:c8:21:53:e9:0c:10:37:f6:71:19:7e:58: 34:a0:a1:59:da:1e:98:93:3a:85:ea:46:0d:e6:c4: 25:c8:59:87:1a:92:fd:fb:09:35:db:93:71:8e:de: 82:fc:bc:27:34:8f:81:1d:7e:64:f3:a3:8f:38:d2: da:10:d0:ce:f2:dd:9d:50:4e:65:77:2c:77:aa:28: ab:dc:78:98:78:93:3c:e0:02:cf:21:a0:ce:b7:2f: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4F:51:D1:7F:C2:D3:F9:0F:86:B4:2F:E6:C8:18:65:42:07:15:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/8e5ed9de-8260-3f23-8a5f-845c119039ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl X509v3 Authority Key Identifier: keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer sbgp-ipAddrBlock: critical IPv4: 70.36.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:93:8c:94:fa:a1:8a:32:f5:41:15:84:0d:cc:61:c5:9f:28: ba:9e:27:c5:f0:14:4e:d9:bb:c5:38:5b:0d:d8:61:a7:40:93: 3f:84:55:fa:c9:26:cb:28:bd:29:76:d5:db:d4:5e:41:4e:4f: 06:f0:0a:9d:e1:5d:37:3b:73:77:27:6c:ab:cb:ae:66:25:63: 73:37:06:82:33:b4:e8:51:28:2d:27:42:a8:10:a8:71:85:91: a9:59:70:d8:ee:31:7e:fd:75:c5:df:21:6f:49:14:31:67:98: ff:ef:86:40:61:3f:07:03:81:17:45:92:e9:b1:bb:04:fa:7a: ba:d1:ed:bb:6e:05:31:93:eb:71:d6:c4:35:67:94:06:ad:c4: 0a:92:96:99:ac:25:46:cb:9c:f3:ce:c5:4e:7e:5c:fd:96:1c: a6:68:06:08:09:34:8a:7b:c8:8e:b8:16:66:5a:67:e8:b9:3a: dd:c7:d3:a3:e9:5c:42:3c:3f:51:4b:f4:1a:25:41:6b:3d:d8: fd:e4:9f:db:eb:24:bd:e0:7c:bf:ae:af:5c:a0:9d:45:cf:80: 4d:48:41:fc:35:2e:30:d2:af:a1:a3:8f:20:a7:81:4d:0f:d4: a8:17:19:ab:bc:01:70:cf:94:df:c3:6d:b7:3e:39:09:da:f7: 3f:b4:21:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+r/H/eHFH5nXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi NTIwMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTE3ZDVkY2UtMjMzOS00ZTkyLWEwMWUtNWNmNGVjMGM4MGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssusvp4UH+v043GQ+p07chJdjjOmr5JsKN2Z AcvCf/GKJmLPsIMcP1UeHK2PRHbFSVB57rGeG6Rcybe8FjcoO5qXxuvkuF8Q+Rwo ET1cE/xGvqzxLxywEcFilovCEcQa07olpOSnXM0KNZg2hgt65pZ4I7pOOrH2YP/v SEti+w1YxT75dly4wvAN+X1yXj+Rr8dqzm5WIYYj6RVOKyixb88MVlikiLbIIVPp DBA39nEZflg0oKFZ2h6YkzqF6kYN5sQlyFmHGpL9+wk125Nxjt6C/LwnNI+BHX5k 86OPONLaENDO8t2dUE5ldyx3qiir3HiYeJM84ALPIaDOty9i4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZPUdF/wtP5D4a0L+bIGGVCBxW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvOGU1ZWQ5ZGUtODI2MC0z ZjIzLThhNWYtODQ1YzExOTAzOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0 MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGTjJT6oYoy9UEVhA3MYcWfKLqeJ8XwFE7Zu8U4Ww3YYadAkz+EVfrJ JssovSl21dvUXkFOTwbwCp3hXTc7c3cnbKvLrmYlY3M3BoIztOhRKC0nQqgQqHGF kalZcNjuMX79dcXfIW9JFDFnmP/vhkBhPwcDgRdFkumxuwT6errR7btuBTGT63HW xDVnlAatxAqSlpmsJUbLnPPOxU5+XP2WHKZoBggJNIp7yI64FmZaZ+i5Ot3H06Pp XEI8P1FL9BolQWs92P3kn9vrJL3gfL+ur1ygnUXPgE1IQfw1LjDSr6GjjyCngU0P 1KgXGau8AXDPlN/Dbbc+OQna9z+0IWw= -----END CERTIFICATE-----Generated at Sat Apr 5 22:28:25 2025 by rpki-client