$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa File: fcbb683d-69c1-3103-ba72-9ebfb8834220.roa (raw, json) Hash identifier: JPzSPsILJ+ZJ4ueFmf5kTATEdo4uy87ATgjsa+ShFEI= Subject key identifier: 90:CD:08:BF:86:85:A5:C4:54:C6:FB:AD:C4:1E:E0:08:56:02:F9:5C Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F43285848E2D106E30BBC9B3DC6713480 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 22418 IP address blocks: 70.34.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:06:e3:0b:bc:9b:3d:c6:71:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=a7bf26b2-32a8-46d5-94e2-f87253d7ce3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:08:0c:6d:3c:5b:a8:c0:63:0f:bd:c7:db: d3:bf:02:e1:6e:aa:77:9c:f3:84:49:84:7c:08:84: bf:f8:7e:14:d6:d2:70:94:c0:86:c5:e7:66:5e:4d: 55:64:1a:9a:9e:8f:18:fb:7b:86:51:a7:b3:17:f1: 17:d3:62:e4:3a:d9:f8:70:9c:06:7b:22:8f:de:1a: 2d:a9:e5:7c:23:e2:51:8a:bc:99:40:9d:8b:e3:1b: 38:dc:4f:99:9e:0e:00:c5:52:df:3c:08:e5:70:66: 76:42:9a:f7:d8:2b:06:94:85:13:c5:77:3c:18:d3: ad:33:35:7b:9b:48:fa:a8:9b:bd:89:c4:b8:46:c5: 23:a8:c8:a4:29:71:68:22:74:c2:84:fd:7b:6f:10: 1f:a7:a5:a5:6c:fb:9f:59:38:07:f2:ff:8e:d0:bf: 33:3f:b8:8e:d2:e9:66:4a:b9:ea:09:58:d8:85:58: aa:a4:32:6d:9e:66:fe:48:1e:b9:1f:dc:41:4c:b0: f4:c3:21:6a:2e:e4:a6:c7:0b:3c:e4:ed:91:7f:fd: 73:81:a3:a7:c6:3c:f5:1e:c0:6d:78:cc:cd:8a:43: 4c:5d:cd:4b:72:1a:f4:93:54:2e:c4:ca:f7:1c:9f: 8a:ed:e2:89:7f:3e:c7:aa:2e:93:80:46:50:1d:2e: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CD:08:BF:86:85:A5:C4:54:C6:FB:AD:C4:1E:E0:08:56:02:F9:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:64:c0:a5:a8:ec:d9:96:82:0b:9c:21:f3:86:1d:66:fd:5d: f8:cf:b6:e6:b2:25:d3:1e:cf:9d:d0:92:a6:23:e8:bb:d1:46: 4e:e6:0a:de:3b:ef:3d:61:e8:90:d2:0b:78:80:eb:79:7c:9c: 70:d0:1a:0e:79:43:98:7c:74:e0:36:90:dc:12:95:3e:05:aa: 38:34:e0:f9:45:1b:2a:7e:a2:21:19:4e:a4:ba:b7:05:fc:6d: ea:06:b8:58:5d:f0:31:b9:44:9f:26:db:2d:8a:2d:3c:77:eb: 77:e5:c2:04:9d:f5:50:34:51:1b:6a:93:00:c1:bb:cf:83:46: 1c:d5:49:5a:f5:32:9a:92:67:d5:7b:40:e3:9f:70:9b:04:3a: 4d:9c:ce:cc:b4:0c:53:94:88:e8:f6:ac:a0:97:2c:28:ce:0e: 85:a9:55:ff:2f:bd:ec:1b:f4:9e:77:9c:e2:90:68:31:de:99: 67:a2:aa:50:6e:4a:fb:4d:14:91:2a:a0:a7:e0:cf:e8:d5:29: fe:d1:5d:7d:34:b3:14:a8:c3:ae:81:13:ae:0f:2d:b3:66:1b: 12:22:a6:d7:e6:b3:6b:85:9e:9d:b8:f4:e4:ad:58:bc:a0:e2: 56:71:a3:a7:d4:2e:f1:0b:ed:db:39:8f:42:aa:34:29:c0:b8: 4f:47:e4:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QbjC7ybPcZxNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YTdiZjI2YjItMzJhOC00NmQ1LTk0ZTItZjg3MjUzZDdjZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dAIDG08W6jAYw+9x9vTvwLhbqp3nPOESYR8 CIS/+H4U1tJwlMCGxedmXk1VZBqano8Y+3uGUaezF/EX02LkOtn4cJwGeyKP3hot qeV8I+JRiryZQJ2L4xs43E+Zng4AxVLfPAjlcGZ2Qpr32CsGlIUTxXc8GNOtMzV7 m0j6qJu9icS4RsUjqMikKXFoInTChP17bxAfp6WlbPufWTgH8v+O0L8zP7iO0ulm SrnqCVjYhViqpDJtnmb+SB65H9xBTLD0wyFqLuSmxws85O2Rf/1zgaOnxjz1HsBt eMzNikNMXc1Lchr0k1QuxMr3HJ+K7eKJfz7Hqi6TgEZQHS4McQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDNCL+GhaXEVMb7rcQe4AhWAvlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvZmNiYjY4M2QtNjljMS0z MTAzLWJhNzItOWViZmI4ODM0MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9kwKWo7NmWggucIfOGHWb9XfjPtuayJdMez53QkqYj6LvRRk7mCt47 7z1h6JDSC3iA63l8nHDQGg55Q5h8dOA2kNwSlT4Fqjg04PlFGyp+oiEZTqS6twX8 beoGuFhd8DG5RJ8m2y2KLTx363flwgSd9VA0URtqkwDBu8+DRhzVSVr1MpqSZ9V7 QOOfcJsEOk2czsy0DFOUiOj2rKCXLCjODoWpVf8vvewb9J53nOKQaDHemWeiqlBu SvtNFJEqoKfgz+jVKf7RXX00sxSow66BE64PLbNmGxIiptfms2uFnp249OStWLyg 4lZxo6fULvEL7ds5j0KqNCnAuE9H5No= -----END CERTIFICATE-----Generated at Mon Apr 7 06:32:11 2025 by rpki-client