$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa File: 17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa (raw, json) Hash identifier: PUpbYMfhwMjawA+AWM8XHAMnJG2EdxfV8AmyWjF6PHI= Subject key identifier: 9A:B9:A5:46:C9:57:DF:68:35:2E:CA:94:6C:DB:E2:84:CF:B7:D3:95 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499AF48B1293CCDAC8F9BE5C80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 72.35.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8b:12:93:cc:da:c8:f9:be:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=58bcce34-7edb-4289-8049-0eb10ff5041b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:af:7e:ff:1b:0d:7c:2c:8b:4d:f0:59:c5: f7:70:42:97:50:d0:c9:b9:ee:8a:6f:b2:ec:07:58: 0a:bd:67:10:c7:d3:8f:a3:e8:ad:b3:3a:67:27:a7: ef:e2:93:a9:26:62:b6:a8:3a:10:11:07:74:3f:f8: 3a:a9:21:43:7b:ca:8d:39:80:3c:f0:02:8a:d5:8b: 59:05:bd:91:bd:84:8e:a2:fa:29:54:1d:38:19:e6: c7:67:b6:8e:e7:30:66:47:5a:79:42:59:e7:5f:28: fd:8c:57:f8:ef:8f:10:72:15:a2:ad:2f:d6:e9:3c: 78:cd:3f:53:2a:68:ce:d6:85:f6:89:32:72:01:a2: bf:3f:34:bf:63:27:9c:68:6c:e2:97:77:47:d0:ea: a4:a9:46:a3:b3:89:30:98:b7:8a:b2:91:94:f2:5f: 8e:93:aa:ac:93:2e:77:ea:03:19:41:4d:4a:cc:1b: c6:9e:72:81:7b:a2:c3:45:0b:01:cb:bb:7e:58:d4: bd:19:3f:ba:5c:3e:66:24:39:06:8b:5d:1c:e8:72: de:85:28:48:3a:79:34:0c:2d:86:9f:87:4e:22:55: 34:6f:8d:b7:f1:e1:23:67:ed:72:9d:2e:17:14:d2: 68:27:43:62:2e:2b:9b:aa:18:9b:f3:03:d1:25:f6: a4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B9:A5:46:C9:57:DF:68:35:2E:CA:94:6C:DB:E2:84:CF:B7:D3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a9:01:f3:15:2a:a0:b6:cc:2a:ba:41:1f:f4:9a:7c:25:00: 8f:ba:23:20:4c:05:b1:3f:68:74:cd:2d:db:49:9e:0d:b3:8f: a4:b9:14:36:08:1c:e4:6e:58:52:e6:0a:a7:26:7d:55:43:a6: 7d:a1:dc:64:69:0f:e5:10:3d:46:38:9e:9c:4a:5e:4f:83:01: c1:f4:50:92:f6:67:39:28:52:00:ff:90:b5:08:5a:47:29:cd: 4a:b7:25:14:85:ab:bb:3a:c5:d8:3b:fc:a0:d7:88:c7:e7:b6: b7:a3:46:cb:77:e7:51:ae:7b:c3:a6:9f:6a:e0:aa:81:c7:0b: 37:77:33:e6:37:da:e3:e9:8a:4b:47:ac:38:24:61:e3:d4:4e: 33:00:6a:a4:e6:83:d8:0f:a0:87:02:14:ae:bc:a5:db:4d:03: 10:79:9a:c9:4d:99:79:dc:d4:1c:1b:cc:63:fb:b5:fd:69:fe: 5b:32:fa:57:8b:8b:8d:f7:6c:e1:0f:4c:18:07:27:78:ae:67: a0:87:8b:ab:8e:97:31:32:8d:39:3f:b1:d9:9c:51:7c:ea:8a: 7e:e3:f6:12:8d:6b:90:fc:ed:5c:0c:fb:59:55:66:4f:eb:b2: da:0e:4e:d5:55:01:93:a3:6e:f9:71:db:60:32:da:89:08:dc: d4:46:1c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IsSk8zayPm+XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NThiY2NlMzQtN2VkYi00Mjg5LTgwNDktMGViMTBmZjUwNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3COvfv8bDXwsi03wWcX3cEKXUNDJue6Kb7Ls B1gKvWcQx9OPo+itszpnJ6fv4pOpJmK2qDoQEQd0P/g6qSFDe8qNOYA88AKK1YtZ Bb2RvYSOovopVB04GebHZ7aO5zBmR1p5QlnnXyj9jFf4748QchWirS/W6Tx4zT9T KmjO1oX2iTJyAaK/PzS/YyecaGzil3dH0OqkqUajs4kwmLeKspGU8l+Ok6qsky53 6gMZQU1KzBvGnnKBe6LDRQsBy7t+WNS9GT+6XD5mJDkGi10c6HLehShIOnk0DC2G n4dOIlU0b4238eEjZ+1ynS4XFNJoJ0NiLiubqhib8wPRJfakcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq5pUbJV99oNS7KlGzb4oTPt9OVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMTdjZTcxMDEtMjVlNi0z Yjg2LThjYjctZTc0OGFlOGY5YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKpAfMVKqC2zCq6QR/0mnwlAI+6IyBMBbE/aHTNLdtJng2zj6S5FDYI HORuWFLmCqcmfVVDpn2h3GRpD+UQPUY4npxKXk+DAcH0UJL2ZzkoUgD/kLUIWkcp zUq3JRSFq7s6xdg7/KDXiMfntrejRst351Gue8Omn2rgqoHHCzd3M+Y32uPpiktH rDgkYePUTjMAaqTmg9gPoIcCFK68pdtNAxB5mslNmXnc1BwbzGP7tf1p/lsy+leL i433bOEPTBgHJ3iuZ6CHi6uOlzEyjTk/sdmcUXzqin7j9hKNa5D87VwM+1lVZk/r stoOTtVVAZOjbvlx22Ay2okI3NRGHJ4= -----END CERTIFICATE-----Generated at Tue May 6 05:54:02 2025 by rpki-client