$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/360a5317-aa1e-354c-a006-0213019ba30a.roa File: 360a5317-aa1e-354c-a006-0213019ba30a.roa (raw, json) Hash identifier: aoYh6QEMyg9I7+FZIB9ncx1ekHQipsq9CVAFYzCPjAM= Subject key identifier: AB:03:3F:3B:EE:DD:37:E5:71:79:2F:0E:97:A5:D6:5D:F2:D8:1B:45 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858490B4C27C5E839119981263E38 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/360a5317-aa1e-354c-a006-0213019ba30a.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 14589 IP address blocks: 72.29.160.0/19 maxlen: 24 74.82.128.0/20 maxlen: 24 2001:48c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:27:c5:e8:39:11:99:81:26:3e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=29f54e7e-facc-4ca3-be98-f23eac46ca0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1b:ef:88:e6:43:17:24:c5:f2:8e:4d:8a:5e: cb:2f:e2:53:52:7e:c3:e3:42:ae:42:27:df:21:85: 54:df:dd:ea:5a:f6:2b:46:8c:28:c9:f5:fc:88:92: d0:8a:d8:3f:99:c9:74:ab:53:c4:c0:29:eb:f0:aa: 22:da:59:49:29:0e:ec:0e:2b:8d:d1:15:bb:f9:7d: ca:02:28:ba:2a:a6:e8:dc:93:ed:91:cc:97:c3:6c: 53:70:ce:7a:ea:6f:99:4b:3c:30:64:50:06:47:4f: fb:b2:39:55:87:7c:82:80:6f:12:3d:c0:1e:31:04: e2:31:d2:4e:0e:fd:e1:42:e6:97:0b:b2:80:8c:11: bf:50:64:45:25:10:ae:a3:35:5f:28:f8:57:b4:08: 03:93:a1:6c:8b:b1:b0:9d:bd:f8:98:86:d7:8f:25: 2b:41:64:c5:b0:bd:e8:63:1c:0c:32:4c:8a:45:e8: 3a:ce:dc:3b:f9:44:c3:21:14:45:da:a0:08:49:46: 29:77:7e:f0:d2:e2:a5:46:50:2b:0d:c2:9c:25:21: bf:7f:49:b4:40:45:51:f5:8a:b9:b6:d0:07:d7:d0: 15:ec:25:f8:1e:fb:e5:2b:db:28:e6:8f:8e:05:47: 03:bd:76:05:35:20:7f:4b:09:3b:f7:be:f8:58:3a: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:03:3F:3B:EE:DD:37:E5:71:79:2F:0E:97:A5:D6:5D:F2:D8:1B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/360a5317-aa1e-354c-a006-0213019ba30a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 72.29.160.0/19 74.82.128.0/20 IPv6: 2001:48c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d1:f1:b1:08:86:e2:a0:02:ed:dd:1d:69:34:7c:05:56:fa: 46:23:44:75:9c:6c:a0:43:01:b7:b8:df:e4:08:20:15:c2:28: dd:2f:f1:c3:47:7e:06:39:4c:4d:51:12:85:8f:b7:8f:79:a1: c8:b1:e6:d2:ee:cc:0f:98:3d:de:fa:c5:5e:19:bd:6d:7a:42: 72:5f:89:2e:98:6f:5b:3a:c8:e4:36:de:a9:48:ef:65:37:46: e6:27:de:7a:a4:0c:a2:c3:bd:86:bb:ac:f4:b7:9b:d2:b3:38: 86:1f:a3:76:88:aa:dc:d1:3d:70:fb:f4:b4:d7:f7:32:c9:f1: 01:4f:da:85:82:a8:40:cd:32:1d:e6:0d:aa:89:8f:38:23:bf: 54:30:a5:83:08:a9:3c:ab:94:fd:b1:b0:5c:31:04:e4:6d:a5: e1:18:e9:a3:d9:a2:bd:8f:d9:4e:2b:d9:f1:36:6c:a4:d8:a1: 07:29:48:d1:c5:4a:e2:38:f9:44:a4:f3:9a:a0:2b:ab:e3:b7: 9d:9b:94:5b:7a:fb:8e:97:2d:2e:95:00:41:a3:d8:fc:99:5d: 68:3e:03:a6:08:66:73:8f:d8:7c:4b:30:4f:03:18:54:0c:02: e7:e1:a0:f0:ee:a5:b3:54:82:b0:4d:7a:f8:ff:b9:4c:e7:63: cf:69:77:99 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEkLTCfF6DkRmYEmPjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MjlmNTRlN2UtZmFjYy00Y2EzLWJlOTgtZjIzZWFjNDZjYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxvviOZDFyTF8o5Nil7LL+JTUn7D40KuQiff IYVU393qWvYrRowoyfX8iJLQitg/mcl0q1PEwCnr8Koi2llJKQ7sDiuN0RW7+X3K Aii6Kqbo3JPtkcyXw2xTcM566m+ZSzwwZFAGR0/7sjlVh3yCgG8SPcAeMQTiMdJO Dv3hQuaXC7KAjBG/UGRFJRCuozVfKPhXtAgDk6Fsi7Gwnb34mIbXjyUrQWTFsL3o YxwMMkyKReg6ztw7+UTDIRRF2qAISUYpd37w0uKlRlArDcKcJSG/f0m0QEVR9Yq5 ttAH19AV7CX4HvvlK9so5o+OBUcDvXYFNSB/Swk79774WDpLlwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFKsDPzvu3TflcXkvDpel1l3y2BtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMzYwYTUzMTctYWExZS0z NTRjLWEwMDYtMDIxMzAxOWJhMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFSB2gAwQE SlKAMA0EAgACMAcDBQAgAUjAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGjR8bEIhuKgAu3dHWk0fAVW+kYj RHWcbKBDAbe43+QIIBXCKN0v8cNHfgY5TE1REoWPt495ocix5tLuzA+YPd76xV4Z vW16QnJfiS6Yb1s6yOQ23qlI72U3RuYn3nqkDKLDvYa7rPS3m9KzOIYfo3aIqtzR PXD79LTX9zLJ8QFP2oWCqEDNMh3mDaqJjzgjv1QwpYMIqTyrlP2xsFwxBORtpeEY 6aPZor2P2U4r2fE2bKTYoQcpSNHFSuI4+USk85qgK6vjt52blFt6+46XLS6VAEGj 2PyZXWg+A6YIZnOP2HxLME8DGFQMAufhoPDupbNUgrBNevj/uUznY89pd5k= -----END CERTIFICATE-----Generated at Sat Apr 12 14:48:21 2025 by rpki-client