$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa File: 35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa (raw, json) Hash identifier: kfkX5Bu8jqqSdO9eyMKUfsgV9GN8gMRekJTFF4U30Eg= Subject key identifier: B4:1E:AD:3E:3B:87:0C:80:6A:8D:82:30:81:A1:44:D8:6B:05:84:07 Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F43285848977086BAD65F169D6679C900 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa Signing time: Sun 19 Jan 2025 02:00:39 +0000 ROA not before: Sun 19 Jan 2025 02:00:39 +0000 ROA not after: Sat 19 Apr 2025 01:00:39 +0000 asID: 209242 IP address blocks: 139.64.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:97:70:86:ba:d6:5f:16:9d:66:79:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Jan 19 02:00:39 2025 GMT Not After : Apr 19 01:00:39 2025 GMT Subject: CN=7ee559dc-0b2a-494b-acbe-d9667b3cfe53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:97:32:f5:29:6b:43:6d:be:20:de:ca:68:f9: fc:e3:6b:56:aa:56:44:0c:92:15:4a:b7:65:58:81: 09:fb:43:7a:b5:3e:15:6c:97:9e:6c:c0:51:57:9c: e0:21:cf:2d:4f:d5:23:69:78:84:d1:83:92:94:9e: 36:7d:ae:4e:00:b3:fb:9f:09:0a:c6:48:a6:71:33: 41:63:e0:f6:73:bb:30:b5:22:6d:ee:0c:bd:3f:31: 9e:cc:49:bb:10:86:ac:d2:07:c6:0d:53:c0:7b:7f: 19:d2:40:7f:93:94:25:d7:fe:e1:11:30:2c:8e:55: 5b:52:64:03:02:53:8f:25:93:5d:55:e2:9c:57:e9: df:23:c6:01:a3:5d:d6:45:74:f1:fe:1b:63:47:e4: f9:8d:32:89:5f:de:ea:52:68:67:ca:f4:83:fe:f6: 2e:7d:3a:58:d7:9a:47:a2:c3:66:6d:20:89:bb:c8: 8c:06:58:19:28:bd:15:a9:0a:fd:d2:a3:2d:9d:d3: 28:08:2e:f0:45:38:fa:89:48:76:27:61:fa:4c:12: 4f:e0:a7:3b:b5:fc:45:b2:fc:ae:79:8f:7b:fd:34: 92:df:42:2c:52:f2:09:1c:17:42:4a:f2:cb:dd:32: a1:70:fa:22:08:31:4f:5b:1c:58:00:36:ab:eb:97: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1E:AD:3E:3B:87:0C:80:6A:8D:82:30:81:A1:44:D8:6B:05:84:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:c4:f6:d0:87:29:06:c9:26:0b:41:bb:ff:c1:a9:6a:59:7f: f7:e5:73:7a:5a:08:fa:04:ce:64:74:1e:44:9e:90:e3:b8:26: 1e:43:d3:80:42:b0:54:c1:31:aa:6c:c0:03:42:dc:82:b3:84: 78:eb:79:47:c4:71:6a:70:14:5d:37:1e:a3:fb:ee:36:30:fa: fd:52:58:71:50:a8:3b:d8:5a:75:fc:64:56:02:dc:b7:6a:74: ac:7f:33:0f:30:31:c3:ac:96:4f:73:cc:3c:6b:a2:40:ef:ad: f1:7e:81:3d:c4:84:c7:7b:fa:89:73:48:01:73:27:38:54:7b: 67:4a:a7:fa:9e:41:2a:9e:0d:f4:42:00:31:93:3a:c6:c4:78: ec:5d:f5:c4:87:5d:c0:b2:6e:be:46:d6:9b:3c:3e:4c:b2:42: 54:8d:18:07:3c:11:57:69:23:10:a4:01:fc:03:d1:d1:68:e8: f0:f7:1c:00:74:a8:9b:b8:48:d1:d2:bb:73:11:e9:d9:03:4d: d5:51:83:6c:59:c4:09:be:07:86:7d:94:fa:0d:cf:81:32:05: f2:58:a3:0f:07:3a:05:2c:9c:92:b1:68:12:08:9a:d0:f1:10: b7:a4:88:ff:84:98:1f:0e:21:1c:ff:13:86:b6:15:17:bd:f3: 44:50:45:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiXcIa61l8WnWZ5yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI1MDExOTAyMDAzOVoXDTI1MDQxOTAxMDAzOVowLzEtMCsGA1UEAxMk N2VlNTU5ZGMtMGIyYS00OTRiLWFjYmUtZDk2NjdiM2NmZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5cy9SlrQ22+IN7KaPn842tWqlZEDJIVSrdl WIEJ+0N6tT4VbJeebMBRV5zgIc8tT9UjaXiE0YOSlJ42fa5OALP7nwkKxkimcTNB Y+D2c7swtSJt7gy9PzGezEm7EIas0gfGDVPAe38Z0kB/k5Ql1/7hETAsjlVbUmQD AlOPJZNdVeKcV+nfI8YBo13WRXTx/htjR+T5jTKJX97qUmhnyvSD/vYufTpY15pH osNmbSCJu8iMBlgZKL0VqQr90qMtndMoCC7wRTj6iUh2J2H6TBJP4Kc7tfxFsvyu eY97/TSS30IsUvIJHBdCSvLL3TKhcPoiCDFPWxxYADar65fjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQerT47hwyAao2CMIGhRNhrBYQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMzViNjM4NmYtY2Y2Zi0z ZjM1LWE2YTUtZGJmYjA3YThiZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMnE9tCHKQbJJgtBu//BqWpZf/flc3paCPoEzmR0HkSekOO4Jh5D04BC sFTBMapswANC3IKzhHjreUfEcWpwFF03HqP77jYw+v1SWHFQqDvYWnX8ZFYC3Ldq dKx/Mw8wMcOslk9zzDxrokDvrfF+gT3EhMd7+olzSAFzJzhUe2dKp/qeQSqeDfRC ADGTOsbEeOxd9cSHXcCybr5G1ps8PkyyQlSNGAc8EVdpIxCkAfwD0dFo6PD3HAB0 qJu4SNHSu3MR6dkDTdVRg2xZxAm+B4Z9lPoNz4EyBfJYow8HOgUsnJKxaBIImtDx ELekiP+EmB8OIRz/E4a2FRe980RQRTA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:01 2025 by rpki-client