$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa File: b901d0b0-12e7-3431-9cd8-0764317e0506.roa (raw, json) Hash identifier: ZWiHqbRDMg5+N9DSEOC7+mITklUlp0LNlylQa3L+ZjY= Subject key identifier: C8:55:B9:5B:9E:7A:A2:A1:A3:22:EA:32:44:19:8F:81:01:84:CA:94 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499AF48AA25915483AE38AE2C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 72.35.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8a:a2:59:15:48:3a:e3:8a:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=bceadb26-907a-40e5-b01b-c9eb9c6b5aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:02:14:da:72:a7:71:03:16:3a:79:63:9f:ce: 8e:8d:4d:c0:f4:43:4d:a3:9b:9e:68:d9:05:72:b5: 2c:2c:ad:f1:d1:f3:d5:3e:11:f4:58:a8:28:27:2f: 54:bd:ab:40:07:18:8c:43:91:5e:a2:97:99:ac:48: e4:ae:61:89:c9:61:b6:b9:3c:96:9e:3a:af:3d:a5: db:06:d8:10:81:ba:8a:7d:4e:30:a7:1d:d3:09:c8: 32:b2:cb:76:41:fd:7b:cd:fe:28:fd:6f:e8:7f:26: b6:33:9b:ea:97:e1:7d:d3:6c:49:da:65:73:3f:e0: 24:f6:e6:19:2c:40:93:47:30:db:ff:54:54:b6:16: f6:85:00:41:c9:9c:b9:dd:53:22:64:7c:b9:0e:f3: 9b:a6:44:6a:6c:7a:14:22:51:21:fe:a6:0e:43:aa: 05:b7:52:f7:b6:ba:6d:5a:83:5d:3c:10:a5:b5:ef: fc:53:fb:8c:66:3a:a6:bd:c1:68:63:4d:e2:de:59: dc:d5:b7:11:33:a1:65:fd:10:ee:d6:7e:8a:c5:18: f3:72:0c:36:9f:44:1e:e6:2d:2c:9e:9e:4b:56:1f: 7a:b3:2d:22:9d:64:2f:d7:26:a8:89:0d:ac:5e:17: 74:e4:f4:d0:bc:4b:7d:e6:49:8d:09:32:41:51:82: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:55:B9:5B:9E:7A:A2:A1:A3:22:EA:32:44:19:8F:81:01:84:CA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f1:4c:8b:19:f1:e7:a3:74:29:ec:ca:30:44:e5:7a:12:a2: 32:41:04:84:bb:8b:7f:0a:54:56:78:42:e2:2b:63:3b:b9:a6: b6:2f:99:63:7e:72:13:b9:97:94:60:c4:af:38:19:67:41:98: 67:11:b9:74:7b:b9:b5:bc:c9:3b:b1:56:84:27:47:cb:b6:c2: b4:06:4b:b9:58:af:d5:67:30:2e:7c:24:fb:c6:e1:f1:c7:96: a7:b4:42:b1:27:9b:44:26:e4:8f:e6:8a:b4:89:11:8b:f0:03: 56:0b:52:5f:ed:52:e6:d1:5b:12:8e:28:2a:6e:5e:af:86:7c: be:82:b9:dc:db:92:c5:f9:35:9b:58:7c:68:38:2f:b7:52:b7: ca:78:d2:1c:08:be:ae:ef:e4:92:63:d5:d2:c2:41:6d:f6:5c: e2:ac:ae:db:7e:bf:f6:9b:38:56:f9:d5:25:c2:3b:18:a8:dd: d4:85:db:aa:1c:e9:82:db:48:cc:7e:b3:a7:14:dd:09:a9:c7: 63:f5:ad:dc:27:54:21:40:90:a5:21:83:80:0f:43:4a:9c:c4: 0e:78:10:dd:d4:89:2e:1d:84:ca:66:08:2e:89:b6:1d:62:28: f2:51:00:5b:f2:65:6a:12:5f:f7:85:a5:74:11:ca:ea:a5:17: 56:83:31:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IqiWRVIOuOK4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YmNlYWRiMjYtOTA3YS00MGU1LWIwMWItYzllYjljNmI1YWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQIU2nKncQMWOnljn86OjU3A9ENNo5ueaNkF crUsLK3x0fPVPhH0WKgoJy9UvatABxiMQ5FeopeZrEjkrmGJyWG2uTyWnjqvPaXb BtgQgbqKfU4wpx3TCcgysst2Qf17zf4o/W/ofya2M5vql+F902xJ2mVzP+Ak9uYZ LECTRzDb/1RUthb2hQBByZy53VMiZHy5DvObpkRqbHoUIlEh/qYOQ6oFt1L3trpt WoNdPBClte/8U/uMZjqmvcFoY03i3lnc1bcRM6Fl/RDu1n6KxRjzcgw2n0Qe5i0s np5LVh96sy0inWQv1yaoiQ2sXhd05PTQvEt95kmNCTJBUYJauQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhVuVueeqKhoyLqMkQZj4EBhMqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjkwMWQwYjAtMTJlNy0z NDMxLTljZDgtMDc2NDMxN2UwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDxTIsZ8eejdCnsyjBE5XoSojJBBIS7i38KVFZ4QuIrYzu5prYvmWN+ chO5l5RgxK84GWdBmGcRuXR7ubW8yTuxVoQnR8u2wrQGS7lYr9VnMC58JPvG4fHH lqe0QrEnm0Qm5I/mirSJEYvwA1YLUl/tUubRWxKOKCpuXq+GfL6CudzbksX5NZtY fGg4L7dSt8p40hwIvq7v5JJj1dLCQW32XOKsrtt+v/abOFb51SXCOxio3dSF26oc 6YLbSMx+s6cU3Qmpx2P1rdwnVCFAkKUhg4APQ0qcxA54EN3UiS4dhMpmCC6Jth1i KPJRAFvyZWoSX/eFpXQRyuqlF1aDMcE= -----END CERTIFICATE-----Generated at Wed May 7 16:00:50 2025 by rpki-client