$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa File: e70d00de-ba3b-3298-a862-b8e63df24836.roa (raw, json) Hash identifier: Yza+giNI4VzBbrdCIPcO6Ui/fd8gCNVLwi/hLp1Tig0= Subject key identifier: 9C:E3:4B:0B:07:C6:8A:B4:8E:6A:51:72:44:47:FD:0F:73:80:C5:46 Certificate issuer: /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84 Certificate serial: 010D0C9F4328584906987522E6A1D3B7FF0BC200 Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa Signing time: Thu 27 Feb 2025 21:35:51 +0000 ROA not before: Thu 27 Feb 2025 21:35:51 +0000 ROA not after: Wed 28 May 2025 20:35:51 +0000 asID: 12009 IP address blocks: 65.38.48.0/20 maxlen: 20 72.35.192.0/20 maxlen: 20 216.228.192.0/20 maxlen: 20 2607:f248::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:98:75:22:e6:a1:d3:b7:ff:0b:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84 Validity Not Before: Feb 27 21:35:51 2025 GMT Not After : May 28 20:35:51 2025 GMT Subject: CN=b03b20fc-a70c-4f6e-8cc2-fa644ca004a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:b5:2c:ac:49:97:bb:00:c6:e0:aa:8f:b2: ee:cd:de:43:67:fc:58:26:01:6d:c3:a2:63:b7:bb: 31:5e:30:57:f8:ba:72:19:f9:50:7a:8e:e9:07:b2: 54:bc:75:8a:49:8c:2b:18:48:09:4c:10:66:51:a0: e5:b0:68:16:4f:9f:dc:29:09:be:8f:1e:51:fa:62: a6:36:20:05:db:3a:c2:31:f2:8c:d6:ca:b6:99:79: f8:f3:97:a7:b8:07:f5:a9:03:f2:49:9e:24:e0:88: 46:73:a1:05:a8:5a:84:62:e7:d9:53:a8:78:f7:67: c7:ca:25:48:7d:fd:8d:11:b8:0f:dd:92:a2:48:3b: 9c:b2:10:00:b1:ef:7c:76:25:01:54:a2:82:e0:5d: 36:8d:e3:2c:f7:b6:64:3a:6c:aa:e0:79:e0:6c:f6: 72:58:62:22:0a:27:68:58:0a:25:8f:48:70:a3:87: e8:a5:43:05:eb:a9:68:60:61:53:bb:d9:b5:50:1a: 86:f2:65:2c:98:db:48:65:22:90:46:27:90:67:ac: f4:30:3f:0e:f2:1c:fa:a3:62:b9:6d:e5:ee:67:cd: d0:34:84:a9:e6:72:2c:9c:9d:c3:49:e6:62:f8:c5: 5d:a1:4d:e1:78:f0:5e:25:24:a2:3d:27:13:5c:57: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E3:4B:0B:07:C6:8A:B4:8E:6A:51:72:44:47:FD:0F:73:80:C5:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e70d00de-ba3b-3298-a862-b8e63df24836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl X509v3 Authority Key Identifier: keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer sbgp-ipAddrBlock: critical IPv4: 65.38.48.0/20 72.35.192.0/20 216.228.192.0/20 IPv6: 2607:f248::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5d:1f:8f:08:a2:af:85:fb:24:60:28:39:d2:0f:fa:93:ce: bc:07:5a:89:15:b6:3e:28:ec:bd:62:13:1e:77:01:d1:91:d6: 2c:d0:9f:7c:8e:e0:24:9d:ab:6f:25:d7:d7:99:a8:fd:8b:ac: 5b:ad:f2:c8:3d:19:83:2f:a0:a2:07:36:e2:07:96:fb:45:b3: 34:94:02:06:88:60:6e:31:2c:78:32:98:a7:99:01:c0:cb:a0: 05:e5:49:7c:c1:77:56:a8:58:8a:b1:5f:6d:5b:3e:c9:18:56: f7:39:fd:e1:1a:2a:b5:b3:d0:44:da:b7:d6:ba:eb:a0:b8:0a: b6:3a:7c:3b:57:77:88:d3:c3:3a:e6:72:9e:67:af:f4:dd:5f: 01:38:75:8c:c8:07:57:2a:a5:c0:49:87:7e:f5:92:8a:b2:d7: 27:12:e7:5b:1b:bc:da:ca:a4:8f:dc:b4:90:66:56:be:77:ae: fa:4e:42:83:4f:3c:5e:b8:53:6c:d5:95:1f:7e:2f:e1:8c:8e: db:df:7e:4f:3d:7a:79:b9:31:1f:dc:04:cd:71:ed:1a:22:7e: 2c:f2:ad:ac:d4:69:1a:e3:87:02:3b:ad:4c:ef:9e:27:2b:63: c6:66:30:ff:46:68:89:6f:2a:d2:04:18:00:a7:f1:41:6c:ad: e2:50:b3:de -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEkGmHUi5qHTt/8LwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm Zjg0MB4XDTI1MDIyNzIxMzU1MVoXDTI1MDUyODIwMzU1MVowLzEtMCsGA1UEAxMk YjAzYjIwZmMtYTcwYy00ZjZlLThjYzItZmE2NDRjYTAwNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXG1LKxJl7sAxuCqj7Luzd5DZ/xYJgFtw6Jj t7sxXjBX+LpyGflQeo7pB7JUvHWKSYwrGEgJTBBmUaDlsGgWT5/cKQm+jx5R+mKm NiAF2zrCMfKM1sq2mXn485enuAf1qQPySZ4k4IhGc6EFqFqEYufZU6h492fHyiVI ff2NEbgP3ZKiSDucshAAse98diUBVKKC4F02jeMs97ZkOmyq4HngbPZyWGIiCido WAolj0hwo4fopUMF66loYGFTu9m1UBqG8mUsmNtIZSKQRieQZ6z0MD8O8hz6o2K5 beXuZ83QNISp5nIsnJ3DSeZi+MVdoU3hePBeJSSiPScTXFePdQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFJzjSwsHxoq0jmpRckRH/Q9zgMVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvZTcwZDAwZGUtYmEzYi0z Mjk4LWE4NjItYjhlNjNkZjI0ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5 MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw MDVmM2ZmODQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQSYwAwQE SCPAAwQE2OTAMA0EAgACMAcDBQAmB/JIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEVdH48Ioq+F+yRgKDnS D/qTzrwHWokVtj4o7L1iEx53AdGR1izQn3yO4CSdq28l19eZqP2LrFut8sg9GYMv oKIHNuIHlvtFszSUAgaIYG4xLHgymKeZAcDLoAXlSXzBd1aoWIqxX21bPskYVvc5 /eEaKrWz0ETat9a666C4CrY6fDtXd4jTwzrmcp5nr/TdXwE4dYzIB1cqpcBJh371 koqy1ycS51sbvNrKpI/ctJBmVr53rvpOQoNPPF64U2zVlR9+L+GMjtvffk89enm5 MR/cBM1x7RoifizyrazUaRrjhwI7rUzvnicrY8ZmMP9GaIlvKtIEGACn8UFsreJQ s94= -----END CERTIFICATE-----Generated at Thu Apr 17 18:50:17 2025 by rpki-client