$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecb360ba-095f-37ab-a90d-337c5aab8f32.roa File: ecb360ba-095f-37ab-a90d-337c5aab8f32.roa (raw, json) Hash identifier: /W5lRadqv3T7u8T5U7VmUivpCK9a89RvtbSt9eRNjEo= Subject key identifier: 91:2E:B7:69:BD:4F:C1:FA:29:FA:94:1E:1D:08:D5:5A:A8:86:A9:44 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642039FCDB924C7F47AC00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecb360ba-095f-37ab-a90d-337c5aab8f32.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 69.36.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:20:39:fc:db:92:4c:7f:47:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=801a7e82-7b22-4748-9b49-853720154197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:3c:fa:28:b5:28:7f:e2:2f:35:73:29:30: 1e:6d:95:b0:e5:19:ba:81:2e:92:3a:9f:1c:63:41: 0c:14:95:41:14:06:e3:f4:4c:20:b4:3c:0d:a0:8d: f4:92:8e:7a:9a:c7:79:73:ce:47:f8:1e:85:9a:5a: 68:b0:d1:96:86:fe:91:c4:bf:cf:78:8a:4f:c1:e1: 1d:89:88:d6:40:df:c6:bc:b3:11:00:8b:bf:fb:6b: e2:d8:fb:89:79:5d:3f:d1:e3:38:cc:44:77:e7:a4: 89:5e:8b:f8:da:09:08:c4:b0:1e:a4:c4:e3:74:d4: 5f:9b:66:11:95:67:4d:fc:ba:9c:ce:f1:c6:e6:eb: 18:64:46:cc:ac:5d:43:10:a4:2f:9f:0c:21:72:63: 59:f7:a4:6c:d6:bb:93:0a:e8:54:e8:4c:8b:b7:ce: 0d:97:24:07:61:16:62:27:d0:1d:af:6e:a7:03:44: 5a:e3:09:ae:42:31:55:99:15:bf:d3:f7:00:c0:96: e5:5d:d3:a6:16:d2:2d:d8:c0:b8:b3:d5:e3:71:2d: 78:ac:dd:f9:c7:5c:96:9e:6e:c0:aa:9b:29:7c:da: 1f:5e:6b:5a:5c:15:0a:f7:4b:63:de:ba:5a:bd:44: 8a:ab:d5:82:bf:c2:6c:c5:ad:b5:88:0f:30:8b:18: 71:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2E:B7:69:BD:4F:C1:FA:29:FA:94:1E:1D:08:D5:5A:A8:86:A9:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ecb360ba-095f-37ab-a90d-337c5aab8f32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 69.36.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a4:72:04:bf:f7:ef:42:66:ca:38:f9:ef:17:b6:41:b2:9a: 9e:3f:93:45:e1:49:56:75:92:a2:a8:ae:e3:6c:dc:1f:e2:04: a2:d6:f0:fc:a9:85:63:b5:0a:00:d3:ae:c3:6a:1b:6c:2a:99: c8:92:6c:b2:0f:94:48:77:d0:c2:dd:34:dd:a3:57:2c:b3:53: db:cf:4b:c9:05:e3:a0:b9:90:1a:24:4a:ce:48:ea:19:4c:de: be:87:26:ce:76:5f:ec:e6:e5:69:0c:30:00:61:6c:8e:4e:fc: cf:68:e8:11:6b:0d:86:35:7c:f0:1c:0a:f8:84:d9:ef:bc:94: 8a:5d:78:f6:e2:65:71:42:64:89:c4:a4:99:be:3c:8f:c3:27: 69:3a:2a:7c:49:41:5b:11:cf:25:b7:92:c6:03:ae:f7:76:6c: 6a:63:35:05:f2:c6:2a:0f:40:60:1a:95:31:93:cb:dc:3d:b3: 02:aa:19:76:14:ab:be:9e:23:15:5a:a5:25:7e:75:a0:4a:65: 24:cb:ab:7e:02:ac:2a:dd:9f:55:27:9f:20:55:b8:ba:4f:0d: 57:e6:61:2f:3a:67:71:d1:bb:83:d7:21:68:a4:1f:94:eb:a6: db:73:13:92:16:fc:18:21:ca:16:5f:54:f1:9e:99:00:2d:d8: f9:8f:f4:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCA5/NuSTH9HrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODAxYTdlODItN2IyMi00NzQ4LTliNDktODUzNzIwMTU0MTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SQ8+ii1KH/iLzVzKTAebZWw5Rm6gS6SOp8c Y0EMFJVBFAbj9EwgtDwNoI30ko56msd5c85H+B6FmlposNGWhv6RxL/PeIpPweEd iYjWQN/GvLMRAIu/+2vi2PuJeV0/0eM4zER356SJXov42gkIxLAepMTjdNRfm2YR lWdN/LqczvHG5usYZEbMrF1DEKQvnwwhcmNZ96Rs1ruTCuhU6EyLt84NlyQHYRZi J9Adr26nA0Ra4wmuQjFVmRW/0/cAwJblXdOmFtIt2MC4s9XjcS14rN35x1yWnm7A qpspfNofXmtaXBUK90tj3rpavUSKq9WCv8Jsxa21iA8wixhxHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEut2m9T8H6KfqUHh0I1VqohqlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWNiMzYwYmEtMDk1Zi0z N2FiLWE5MGQtMzM3YzVhYWI4ZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRSTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCkcgS/9+9CZso4+e8XtkGymp4/k0XhSVZ1kqKoruNs3B/iBKLW8Pyp hWO1CgDTrsNqG2wqmciSbLIPlEh30MLdNN2jVyyzU9vPS8kF46C5kBokSs5I6hlM 3r6HJs52X+zm5WkMMABhbI5O/M9o6BFrDYY1fPAcCviE2e+8lIpdePbiZXFCZInE pJm+PI/DJ2k6KnxJQVsRzyW3ksYDrvd2bGpjNQXyxioPQGAalTGTy9w9swKqGXYU q76eIxVapSV+daBKZSTLq34CrCrdn1UnnyBVuLpPDVfmYS86Z3HRu4PXIWikH5Tr pttzE5IW/BghyhZfVPGemQAt2PmP9Kw= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:51 2025 by rpki-client