$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/c918711b-7341-3714-b9f1-a993bd3d5a62.roa File: c918711b-7341-3714-b9f1-a993bd3d5a62.roa (raw, json) Hash identifier: s2DxVnP1NOqCT/q4WSAHJskXVXzg9KiC7TKR9upXbxw= Subject key identifier: C4:31:EF:22:09:57:1C:ED:03:7F:71:6D:43:61:12:95:98:55:B4:5F Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F432858494CC9459F9B99B52B24104DC0 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/c918711b-7341-3714-b9f1-a993bd3d5a62.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 19905 IP address blocks: 70.35.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Mar 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:45:9f:9b:99:b5:2b:24:10:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=dbcaab68-5fdc-434e-b82f-2c92470bd6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:1e:09:c0:e2:6e:0a:55:5d:29:b8:b1:10: d8:26:e1:52:6a:ba:9f:cf:30:d2:14:7e:8c:c8:f1: 5f:a8:29:72:0c:77:19:2d:20:b4:9e:df:b3:5a:a2: 78:2f:b9:6d:92:cc:2d:0c:03:f8:f9:88:f6:c9:30: 28:21:7b:5e:04:bf:eb:c8:80:b4:6a:ce:eb:bc:1e: 61:f8:e8:8f:e3:b4:49:c9:47:54:f1:14:e1:e4:4d: ee:2a:6a:02:91:79:59:83:60:ad:e6:64:c0:22:8d: dc:b8:40:d4:e5:57:78:6c:80:6f:89:e6:78:83:66: 28:6e:0e:03:ad:00:05:7c:cb:ca:e4:33:ae:46:e2: fb:bb:76:41:55:ec:9a:9e:ed:3c:bb:37:d5:a1:1d: 8f:3c:63:c7:84:42:6c:45:87:da:a0:15:e5:db:d4: 0b:73:10:1a:4f:10:0c:34:8c:90:cb:39:34:6a:18: e7:61:15:7d:a4:7d:90:fe:68:a5:36:e0:d8:9a:ee: 46:8b:85:84:70:c3:a2:bc:59:c8:84:92:1f:04:d5: 8c:38:83:d8:73:9a:ba:63:21:87:af:c2:f9:3c:92: 88:b1:fd:d5:1b:49:4a:a2:0e:19:53:74:3b:20:40: 92:56:d3:36:d9:2e:e4:1b:d5:78:de:01:ff:de:b3: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:31:EF:22:09:57:1C:ED:03:7F:71:6D:43:61:12:95:98:55:B4:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/c918711b-7341-3714-b9f1-a993bd3d5a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 70.35.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:37:75:5c:95:00:4e:35:2a:01:6b:38:8f:57:69:a0:00:48: e7:8e:5f:0c:44:fd:bc:d3:f0:cf:64:77:71:97:37:fe:fe:fd: 55:90:26:c2:31:bd:66:59:a5:ff:a9:ce:af:c9:95:a4:a5:9f: a6:56:a1:4a:d2:25:d0:db:10:bc:1a:db:19:9f:8e:ce:87:bf: 2c:2a:9c:62:1f:4b:74:08:2f:46:0a:0d:8b:b4:45:f5:3a:50: 24:1b:ba:81:79:04:27:7f:c5:76:e7:18:4d:b7:65:19:ad:5a: 2a:bb:ff:48:fb:a0:74:17:37:8f:b2:42:61:93:7e:e7:ad:2a: 0b:58:78:17:75:fa:13:9e:e7:61:e5:dc:e1:20:9a:9f:65:69: 75:f5:38:80:76:eb:17:a7:5a:8a:1f:d4:0a:95:d7:3c:13:38: 26:57:a5:e0:da:80:db:f8:21:40:fd:14:10:ea:bc:0b:20:5e: a9:c4:d5:9e:ea:6a:34:5c:b5:79:7d:25:f7:6f:06:77:e6:05: 89:86:f8:48:1d:e3:0d:20:b1:70:3c:5b:ce:5d:e0:cf:68:99: 4d:fb:a4:3b:e2:ac:9d:d7:67:25:dd:9a:07:88:e5:ad:3b:a9: 49:d8:6b:45:7f:da:b8:48:1b:d9:32:78:a0:f9:6d:c5:f3:a0: 6e:78:06:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUWfm5m1KyQQTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZGJjYWFiNjgtNWZkYy00MzRlLWI4MmYtMmM5MjQ3MGJkNmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDIeCcDibgpVXSm4sRDYJuFSarqfzzDSFH6M yPFfqClyDHcZLSC0nt+zWqJ4L7ltkswtDAP4+Yj2yTAoIXteBL/ryIC0as7rvB5h +OiP47RJyUdU8RTh5E3uKmoCkXlZg2Ct5mTAIo3cuEDU5Vd4bIBvieZ4g2Yobg4D rQAFfMvK5DOuRuL7u3ZBVeyanu08uzfVoR2PPGPHhEJsRYfaoBXl29QLcxAaTxAM NIyQyzk0ahjnYRV9pH2Q/milNuDYmu5Gi4WEcMOivFnIhJIfBNWMOIPYc5q6YyGH r8L5PJKIsf3VG0lKog4ZU3Q7IECSVtM22S7kG9V43gH/3rNmbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQx7yIJVxztA39xbUNhEpWYVbRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvYzkxODcxMWItNzM0MS0z NzE0LWI5ZjEtYTk5M2JkM2Q1YTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs3dVyVAE41KgFrOI9XaaAASOeOXwxE/bzT8M9kd3GXN/7+/VWQJsIx vWZZpf+pzq/JlaSln6ZWoUrSJdDbELwa2xmfjs6HvywqnGIfS3QIL0YKDYu0RfU6 UCQbuoF5BCd/xXbnGE23ZRmtWiq7/0j7oHQXN4+yQmGTfuetKgtYeBd1+hOe52Hl 3OEgmp9laXX1OIB26xenWoof1AqV1zwTOCZXpeDagNv4IUD9FBDqvAsgXqnE1Z7q ajRctXl9JfdvBnfmBYmG+Egd4w0gsXA8W85d4M9omU37pDvirJ3XZyXdmgeI5a07 qUnYa0V/2rhIG9kyeKD5bcXzoG54Bos= -----END CERTIFICATE-----Generated at Tue Mar 25 21:15:38 2025 by rpki-client