$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b70c664a-f6eb-314e-8740-66a7dabcbed3.roa File: b70c664a-f6eb-314e-8740-66a7dabcbed3.roa (raw, json) Hash identifier: bPsVJSVes0lPHj91oPVSBNkhx1+bH0teccjn0nnmaHM= Subject key identifier: EE:45:AA:05:55:26:D7:65:30:0E:8E:63:72:DE:93:E3:7F:F5:7F:49 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584973DEE303871F028B4A7D2680 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b70c664a-f6eb-314e-8740-66a7dabcbed3.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 23465 IP address blocks: 70.97.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e3:03:87:1f:02:8b:4a:7d:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=59c3a6e1-0f5c-4b3b-bed2-01dcb6eef89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:be:08:38:80:40:0f:bf:95:27:bd:77:0e:89: 88:e7:ce:10:8b:71:3d:50:a0:c0:ce:e6:64:77:be: ab:e5:1a:3a:35:0e:91:98:6e:13:dc:1d:88:f4:4b: d3:b7:57:5c:0e:97:e1:28:6d:bb:f3:8b:3b:47:ec: 67:de:b1:cc:31:16:6a:bc:8a:6d:67:82:b5:78:f1: c2:28:d8:4f:85:a9:a7:c3:2c:75:1a:6b:ae:c1:19: 5e:66:a9:60:04:5b:2f:26:19:7a:01:b1:bc:ca:bb: 2f:32:f6:9b:e3:93:63:39:12:c1:c7:1f:b8:17:0e: 1d:66:3a:c9:41:54:6b:4b:8c:e3:aa:1d:14:0c:47: f3:29:ed:f1:c8:f9:a7:e4:a4:08:ae:50:f6:b8:2b: 9d:e4:a6:b9:d4:14:78:90:a8:c7:7f:84:fa:75:7e: 43:94:a0:8c:59:38:83:41:4b:e3:df:8f:77:4f:78: 99:84:36:32:d4:09:a6:0e:62:b4:9f:23:e5:b4:85: 9a:67:78:4e:b3:84:a5:67:be:aa:11:9d:af:06:4a: 3f:7a:7c:4c:6e:f4:17:a1:b0:d3:4c:c0:69:6e:98: 2c:4f:5e:10:a5:ad:ea:27:3b:fd:d8:1e:45:b0:c0: a0:7c:35:7a:99:1b:e1:85:c2:0a:00:33:41:96:2e: b3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:45:AA:05:55:26:D7:65:30:0E:8E:63:72:DE:93:E3:7F:F5:7F:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/b70c664a-f6eb-314e-8740-66a7dabcbed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.97.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:40:b3:5b:b5:66:27:0c:42:d1:8c:ca:90:e8:c8:0b:c5:5c: fe:46:ad:f9:01:14:e1:2f:b8:ec:51:82:d4:8f:9e:55:ca:c4: aa:c7:c6:27:fa:33:b9:2e:af:f1:8d:73:6d:bb:58:49:17:61: 6b:96:50:20:2f:f3:37:28:7b:1c:59:20:e3:fe:64:a0:cf:34: b3:e5:a4:ce:a3:24:34:8c:ed:13:53:ae:84:d5:dc:d2:92:ff: 84:61:2d:d2:6a:5c:21:63:a2:f6:b4:95:71:94:6a:dc:c4:79: af:c2:26:6b:0f:a3:5c:33:3b:d5:90:29:88:1d:01:06:87:c8: 6b:8b:cf:ae:38:b2:68:6f:40:2c:c2:f3:71:4b:3f:cc:f7:7a: c5:f0:24:53:9d:ca:16:80:ad:46:27:7a:10:14:d5:a9:52:49: 0a:da:3c:d2:ee:e0:c0:5d:7c:dc:f8:f2:5f:49:84:1d:46:c3: dc:24:f5:7b:84:79:b2:ed:bb:32:00:3b:0c:88:b6:71:c1:c3: 5f:06:09:6a:94:4e:87:3d:b9:35:1e:11:16:33:7c:6e:96:9a: c9:ec:f5:8b:a4:94:63:cb:8a:de:63:eb:d2:30:20:c8:8d:83: bd:48:0a:b0:bf:26:d3:39:40:0a:de:97:74:89:b8:58:43:12: 9e:36:f3:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uMDhx8Ci0p9JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NTljM2E2ZTEtMGY1Yy00YjNiLWJlZDItMDFkY2I2ZWVmODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr4IOIBAD7+VJ713DomI584Qi3E9UKDAzuZk d76r5Ro6NQ6RmG4T3B2I9EvTt1dcDpfhKG2784s7R+xn3rHMMRZqvIptZ4K1ePHC KNhPhamnwyx1GmuuwRleZqlgBFsvJhl6AbG8yrsvMvab45NjORLBxx+4Fw4dZjrJ QVRrS4zjqh0UDEfzKe3xyPmn5KQIrlD2uCud5Ka51BR4kKjHf4T6dX5DlKCMWTiD QUvj3493T3iZhDYy1AmmDmK0nyPltIWaZ3hOs4SlZ76qEZ2vBko/enxMbvQXobDT TMBpbpgsT14Qpa3qJzv92B5FsMCgfDV6mRvhhcIKADNBli6zYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5FqgVVJtdlMA6OY3Lek+N/9X9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvYjcwYzY2NGEtZjZlYi0z MTRlLTg3NDAtNjZhN2RhYmNiZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRmHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxAs1u1ZicMQtGMypDoyAvFXP5GrfkBFOEvuOxRgtSPnlXKxKrHxif6 M7kur/GNc227WEkXYWuWUCAv8zcoexxZIOP+ZKDPNLPlpM6jJDSM7RNTroTV3NKS /4RhLdJqXCFjova0lXGUatzEea/CJmsPo1wzO9WQKYgdAQaHyGuLz644smhvQCzC 83FLP8z3esXwJFOdyhaArUYnehAU1alSSQraPNLu4MBdfNz48l9JhB1Gw9wk9XuE ebLtuzIAOwyItnHBw18GCWqUToc9uTUeERYzfG6Wmsns9YuklGPLit5j69IwIMiN g71ICrC/JtM5QArel3SJuFhDEp4288g= -----END CERTIFICATE-----Generated at Sun May 11 04:04:08 2025 by rpki-client