$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa File: 666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa (raw, json) Hash identifier: 7F9IBT01yoiXiaXDLpNmBHhOf2AjN6508htxrfU0QOQ= Subject key identifier: 86:E9:0A:D5:DA:06:8D:D9:21:29:3D:9C:BC:6A:A4:98:D7:82:74:6E Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499AF48A88598F0070D5155080 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 72.35.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8a:88:59:8f:00:70:d5:15:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=bf35f96e-f2e6-4123-a191-c2e9ff73bb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:02:90:4d:d4:ea:b3:33:8b:9c:92:54:d6: ad:e4:a4:80:22:46:a1:d2:f7:18:16:94:fd:32:42: c5:be:9b:72:13:76:f7:a5:25:8d:16:df:c8:38:90: cf:36:b6:6b:b1:cf:ea:45:ae:91:09:2e:8f:e4:25: 02:42:39:ed:5f:04:d0:41:b2:9e:0c:3f:28:d4:a9: 6f:cb:3b:d4:d4:60:4d:45:cf:b6:63:91:23:79:3a: 7d:bd:36:f9:52:21:ab:92:2f:77:d7:bd:c8:bc:c2: 80:ae:8a:01:05:6c:d7:1d:d8:2e:29:04:4b:b6:ee: 4b:d4:07:7c:dd:89:68:9d:ab:a0:7f:3c:cd:88:f7: 5d:a0:c9:63:ca:01:97:ca:15:c9:50:65:24:bb:92: fc:37:39:0b:14:56:23:d4:03:68:1c:40:fa:af:1c: 9e:7d:89:a4:d4:1e:98:a2:fd:ce:fe:32:04:8c:a4: fc:da:fc:c6:61:45:9f:a7:73:f7:a8:3c:4f:61:c4: a5:37:fc:0a:c6:c0:d4:42:81:0a:25:ce:8a:a1:cf: 19:6f:be:51:20:c5:25:18:d2:bd:31:71:41:f1:bb: 6d:15:e8:79:86:aa:c9:d1:71:9e:1d:65:f9:52:ef: 15:e4:bc:3d:e2:2e:64:c2:85:4b:a3:da:4c:8e:c8: 14:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E9:0A:D5:DA:06:8D:D9:21:29:3D:9C:BC:6A:A4:98:D7:82:74:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9a:ce:7a:4d:7b:8e:9a:bf:0a:09:c1:fc:24:cc:b4:da:c3: 12:75:a3:64:da:66:ef:07:12:a6:3f:4b:6e:a6:b1:77:5d:ba: a6:87:1b:e2:33:a9:92:9f:e2:a0:3e:36:02:df:ba:71:93:18: 0b:4a:6e:11:e9:2f:19:e6:1a:b9:4e:52:64:6b:6f:94:2e:b3: f1:96:2c:0a:2f:10:39:1d:27:6f:a0:cf:c8:6d:02:07:49:bb: eb:f1:2e:8f:02:57:79:d0:b3:c1:2e:5a:d3:fb:04:2e:6d:fe: 98:a3:6e:31:38:1e:d4:f7:53:75:90:25:64:d6:0b:84:ed:77: 56:0f:f9:f4:f7:e9:c4:f4:7f:6f:aa:89:d0:be:bd:e0:b5:7f: 75:7c:6c:e2:8d:cb:de:b9:00:60:e4:87:36:66:af:32:db:7d: ec:85:e2:b6:0a:3b:bf:b3:9b:83:ab:93:a6:99:b8:2c:86:00: ba:d0:96:13:02:43:c0:7f:76:8f:85:c3:13:17:4c:1c:ec:eb: d1:99:c2:08:a0:9e:76:19:63:6f:62:52:4f:a4:32:8d:7f:4a: 38:9a:8a:2c:f5:8e:e4:61:48:06:e4:69:a7:e0:a8:ce:83:22: 7d:90:71:d1:65:12:f4:1b:0b:eb:6c:e0:53:f6:f9:06:0c:9c: ca:0c:0e:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IqIWY8AcNUVUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YmYzNWY5NmUtZjJlNi00MTIzLWExOTEtYzJlOWZmNzNiYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlcCkE3U6rMzi5ySVNat5KSAIkah0vcYFpT9 MkLFvptyE3b3pSWNFt/IOJDPNrZrsc/qRa6RCS6P5CUCQjntXwTQQbKeDD8o1Klv yzvU1GBNRc+2Y5EjeTp9vTb5UiGrki93173IvMKArooBBWzXHdguKQRLtu5L1Ad8 3YlonaugfzzNiPddoMljygGXyhXJUGUku5L8NzkLFFYj1ANoHED6rxyefYmk1B6Y ov3O/jIEjKT82vzGYUWfp3P3qDxPYcSlN/wKxsDUQoEKJc6Koc8Zb75RIMUlGNK9 MXFB8bttFeh5hqrJ0XGeHWX5Uu8V5Lw94i5kwoVLo9pMjsgUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbpCtXaBo3ZISk9nLxqpJjXgnRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNjY2ZjVkZDctNWE2ZC0z YWM0LTk1NzEtYjdlMDZiYzlkMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECaznpNe46avwoJwfwkzLTawxJ1o2TaZu8HEqY/S26msXdduqaHG+Iz qZKf4qA+NgLfunGTGAtKbhHpLxnmGrlOUmRrb5Qus/GWLAovEDkdJ2+gz8htAgdJ u+vxLo8CV3nQs8EuWtP7BC5t/pijbjE4HtT3U3WQJWTWC4Ttd1YP+fT36cT0f2+q idC+veC1f3V8bOKNy965AGDkhzZmrzLbfeyF4rYKO7+zm4Ork6aZuCyGALrQlhMC Q8B/do+FwxMXTBzs69GZwgignnYZY29iUk+kMo1/Sjiaiiz1juRhSAbkaafgqM6D In2QcdFlEvQbC+ts4FP2+QYMnMoMDno= -----END CERTIFICATE-----Generated at Tue May 6 06:12:36 2025 by rpki-client