$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/275a2e45-8dd0-3637-a44b-0098863dded8.roa File: 275a2e45-8dd0-3637-a44b-0098863dded8.roa (raw, json) Hash identifier: oo1X/rwUxyeWTCeMvP1ujY5lGBNzMF4qi8ML78L3CHI= Subject key identifier: 4F:65:C7:CF:33:78:35:D6:8A:A2:C2:5C:75:7D:00:55:78:D7:A7:2D Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F4328584976A98FAEBCBD3D2F5D78E400 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/275a2e45-8dd0-3637-a44b-0098863dded8.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 209242 IP address blocks: 139.64.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:8f:ae:bc:bd:3d:2f:5d:78:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=853f9953-5c42-4876-a805-42a7527ac496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:47:5e:7b:c8:70:bb:82:2f:67:6c:69:07: f4:a3:24:62:72:c8:ea:0a:f4:5a:45:1c:1f:ae:91: 94:dd:a7:13:72:ea:f6:85:46:20:7f:cf:7d:11:5d: e9:52:bb:1a:44:54:22:d7:44:e8:a3:65:9d:71:7f: e8:10:fb:b0:dc:60:91:79:fd:30:2d:ec:7c:de:32: 20:2a:f4:fe:77:24:b4:ee:a7:a1:57:b9:94:e7:47: 74:59:19:f5:2e:07:f7:3e:e0:22:3c:25:7e:5a:4e: 08:c3:2b:83:d8:8c:75:d0:0b:c2:3a:f7:32:8a:1f: 14:f5:27:38:0a:c1:08:75:b7:10:d8:92:92:9e:b1: 7c:cd:ab:85:49:8a:4e:0a:ff:8d:ee:9f:14:28:e3: 52:9f:5e:0d:c5:fa:75:be:8c:07:97:49:4b:63:3f: e4:63:3a:68:eb:4e:23:28:76:6f:56:3b:01:f1:41: 1f:ca:26:ff:cd:d7:80:a1:61:10:42:b3:fb:b3:c5: 3d:63:d9:d6:24:3d:a8:9f:91:bb:73:44:d2:9e:1e: fd:57:4b:b5:2f:a4:17:3c:79:31:f2:b9:63:23:db: c9:39:28:26:7c:b8:c5:47:7e:ed:2c:eb:77:4c:97: 20:30:b2:77:68:44:f5:3d:42:ea:8c:b5:7a:cc:03: b5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:65:C7:CF:33:78:35:D6:8A:A2:C2:5C:75:7D:00:55:78:D7:A7:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/275a2e45-8dd0-3637-a44b-0098863dded8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a6:9e:84:5f:09:89:34:d9:b9:ad:8a:63:4b:e2:31:fd:81: 43:83:9c:ae:fc:47:7e:e5:69:94:54:2e:9e:8f:b9:6e:42:e5: d8:aa:72:49:f7:01:0b:c2:4d:bd:ab:c8:79:59:1e:49:a1:22: d1:c8:5a:62:d0:4c:a0:04:d3:16:5f:b0:5d:b9:a5:17:43:ca: 8e:15:51:55:48:62:3b:92:03:ab:f5:41:9a:94:ac:6a:65:3f: 86:34:f4:10:9b:34:5e:62:f2:85:99:90:6d:aa:07:dc:9b:0d: 10:ff:9a:68:65:ab:38:30:0f:51:70:7e:2f:fa:a7:e3:7c:49: 00:cd:93:81:fe:24:d3:f8:16:44:1f:bb:74:58:00:99:06:58: 34:96:bc:63:35:94:95:23:f8:a9:60:29:ac:81:b1:3a:20:4f: fb:3b:69:fe:b1:67:1f:24:1d:70:8e:66:85:93:d5:d8:43:75: 7a:11:af:cd:e5:07:8e:49:58:42:ac:ea:d5:dd:e8:87:41:97: c1:95:1c:66:8d:d5:6f:44:92:b6:e4:d7:0c:e1:eb:7b:b8:85: d4:1d:eb:b2:01:13:e2:f2:c5:5d:d9:a1:cc:12:cf:f4:70:1a: fa:a0:53:94:eb:aa:24:50:5b:88:d1:f5:85:a1:cd:10:20:72: da:33:38:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qY+uvL09L1145AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk ODUzZjk5NTMtNWM0Mi00ODc2LWE4MDUtNDJhNzUyN2FjNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9VHXnvIcLuCL2dsaQf0oyRicsjqCvRaRRwf rpGU3acTcur2hUYgf899EV3pUrsaRFQi10Too2WdcX/oEPuw3GCRef0wLex83jIg KvT+dyS07qehV7mU50d0WRn1Lgf3PuAiPCV+Wk4IwyuD2Ix10AvCOvcyih8U9Sc4 CsEIdbcQ2JKSnrF8zauFSYpOCv+N7p8UKONSn14Nxfp1vowHl0lLYz/kYzpo604j KHZvVjsB8UEfyib/zdeAoWEQQrP7s8U9Y9nWJD2on5G7c0TSnh79V0u1L6QXPHkx 8rljI9vJOSgmfLjFR37tLOt3TJcgMLJ3aET1PULqjLV6zAO17QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9lx88zeDXWiqLCXHV9AFV416ctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMjc1YTJlNDUtOGRkMC0z NjM3LWE0NGItMDA5ODg2M2RkZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWmnoRfCYk02bmtimNL4jH9gUODnK78R37laZRULp6PuW5C5diqckn3 AQvCTb2ryHlZHkmhItHIWmLQTKAE0xZfsF25pRdDyo4VUVVIYjuSA6v1QZqUrGpl P4Y09BCbNF5i8oWZkG2qB9ybDRD/mmhlqzgwD1Fwfi/6p+N8SQDNk4H+JNP4FkQf u3RYAJkGWDSWvGM1lJUj+KlgKayBsTogT/s7af6xZx8kHXCOZoWT1dhDdXoRr83l B45JWEKs6tXd6IdBl8GVHGaN1W9Ekrbk1wzh63u4hdQd67IBE+LyxV3ZocwSz/Rw GvqgU5TrqiRQW4jR9YWhzRAgctozOCs= -----END CERTIFICATE-----Generated at Fri Apr 11 21:28:01 2025 by rpki-client