$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa File: baf38e6a-d9fe-37b3-823c-aa7f115af507.roa (raw, json) Hash identifier: CjluRe25efzlky8wIH8brPsSaOwZy/yllFqlGB4qoX0= Subject key identifier: 53:1F:CB:E5:83:AE:58:D5:54:A7:04:1B:9A:2A:96:8F:34:CD:71:38 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499AF48AF32316D4C88BCB6B80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 72.35.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8a:f3:23:16:d4:c8:8b:cb:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=6a2048ec-e814-45a5-bd9c-e2441486488e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:f3:00:d4:10:26:00:9a:9b:e3:b4:a7:73: 95:76:38:eb:78:5e:2f:cf:4f:ce:09:9d:3b:6b:83: 9e:e7:ca:8f:ea:b4:e0:d2:be:0b:b4:fa:af:e8:82: 39:0a:b3:76:9f:26:ed:b7:22:91:23:e1:39:79:6a: bd:c6:2b:5f:40:ba:dc:00:46:eb:42:cf:36:49:e3: 25:09:ce:62:4b:10:9c:dc:dc:e5:6a:af:39:1c:12: 3f:40:96:03:5f:74:dc:88:49:9b:9c:bc:08:e9:72: 2b:0a:31:65:18:d0:7e:78:14:13:ec:c4:a1:8b:3b: 55:bc:5a:a2:46:32:7b:53:51:86:6c:f0:9d:63:da: 86:51:c8:cf:9e:c5:e8:a1:45:3f:90:2a:ca:14:8d: df:f6:06:d6:c4:69:38:07:17:e2:18:31:94:29:48: 99:5f:4c:0a:a7:d5:2d:de:4c:ae:c5:56:b6:d2:44: d8:bb:b0:13:07:29:0f:38:dd:f3:e9:2a:f1:58:48: 0f:95:9e:8d:43:f0:16:95:51:a8:79:72:c6:a7:21: 17:fc:05:27:bd:ed:27:bd:79:1f:4c:65:32:75:74: dc:ae:de:cb:b6:f5:ef:bf:2f:3b:ee:a3:2d:0b:25: 18:e5:aa:55:11:e8:62:8c:05:8a:20:5e:cc:bf:04: 91:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1F:CB:E5:83:AE:58:D5:54:A7:04:1B:9A:2A:96:8F:34:CD:71:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:bc:7d:86:f8:1d:3b:52:8c:20:0a:1d:06:94:5b:3d:1b:3d: 12:d7:e9:eb:70:48:48:c7:cc:08:2c:81:2b:01:75:70:be:20: 0c:b9:90:c9:29:d0:55:ff:f8:44:2c:28:cf:85:7a:b2:54:b3: 7d:e4:b9:08:d8:1f:d5:4c:a8:1a:8f:57:d5:17:70:b2:af:2d: be:ae:fd:ac:57:7f:ed:a5:12:24:73:e1:ab:7b:3d:fe:c0:b9: fb:45:31:ec:17:86:a5:db:70:68:42:7b:48:61:a9:cd:7f:59: 27:51:65:c2:b9:d1:48:4a:51:a5:32:76:68:c4:cc:29:68:8a: 64:8d:14:9e:da:5e:fc:90:e8:14:05:03:40:c7:1a:22:58:8f: dd:d5:c4:01:41:95:f0:7d:58:cd:ec:6e:55:2d:41:10:d1:0a: b0:36:ec:8d:6a:fb:d0:af:67:76:07:88:1a:0a:4e:b7:74:ee: 48:8d:56:36:3c:b2:a8:09:46:cd:28:3c:b9:5d:06:a9:bd:55: f0:ab:ce:5e:7a:4e:66:6a:92:39:f9:3c:c0:bc:ac:5f:67:8a: 17:b2:8b:b2:0e:3f:91:b7:bc:38:5d:38:4a:aa:0f:43:93:cf: 9b:d3:f9:57:85:d2:01:2c:f1:55:0e:ce:a5:e9:c7:6d:07:0e: 5e:b6:b0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IrzIxbUyIvLa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NmEyMDQ4ZWMtZTgxNC00NWE1LWJkOWMtZTI0NDE0ODY0ODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoifzANQQJgCam+O0p3OVdjjreF4vz0/OCZ07 a4Oe58qP6rTg0r4LtPqv6II5CrN2nybttyKRI+E5eWq9xitfQLrcAEbrQs82SeMl Cc5iSxCc3Nzlaq85HBI/QJYDX3TciEmbnLwI6XIrCjFlGNB+eBQT7MShiztVvFqi RjJ7U1GGbPCdY9qGUcjPnsXooUU/kCrKFI3f9gbWxGk4BxfiGDGUKUiZX0wKp9Ut 3kyuxVa20kTYu7ATBykPON3z6SrxWEgPlZ6NQ/AWlVGoeXLGpyEX/AUnve0nvXkf TGUydXTcrt7LtvXvvy877qMtCyUY5apVEehijAWKIF7MvwSR6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMfy+WDrljVVKcEG5oqlo80zXE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYmFmMzhlNmEtZDlmZS0z N2IzLTgyM2MtYWE3ZjExNWFmNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu8fYb4HTtSjCAKHQaUWz0bPRLX6etwSEjHzAgsgSsBdXC+IAy5kMkp 0FX/+EQsKM+FerJUs33kuQjYH9VMqBqPV9UXcLKvLb6u/axXf+2lEiRz4at7Pf7A uftFMewXhqXbcGhCe0hhqc1/WSdRZcK50UhKUaUydmjEzCloimSNFJ7aXvyQ6BQF A0DHGiJYj93VxAFBlfB9WM3sblUtQRDRCrA27I1q+9CvZ3YHiBoKTrd07kiNVjY8 sqgJRs0oPLldBqm9VfCrzl56TmZqkjn5PMC8rF9niheyi7IOP5G3vDhdOEqqD0OT z5vT+VeF0gEs8VUOzqXpx20HDl62sKU= -----END CERTIFICATE-----Generated at Mon May 5 14:00:06 2025 by rpki-client