$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa File: d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa (raw, json) Hash identifier: wKhVIbEWBSpJsCSKBsKsCCndly4aODDqapT2TTefA7w= Subject key identifier: 69:2B:95:96:84:5B:25:B6:DD:A4:56:9B:46:B2:E5:53:C4:E1:72:26 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499AF48AD3B45CA1461ED58300 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 72.35.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8a:d3:b4:5c:a1:46:1e:d5:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=5edc77da-9973-4c1d-94d4-3a564ad0e36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:57:a2:b2:81:74:2d:dd:b6:ba:18:cf:3f: cb:23:d1:df:6b:9d:4c:fc:fb:ef:43:25:fa:d5:91: 8a:05:08:92:f9:68:16:7a:07:82:91:3e:54:bb:2c: 4d:fa:80:bf:b6:e6:69:43:ea:01:34:b1:8b:ec:d9: 0b:60:88:0a:f6:e3:da:6f:7e:f8:ab:e3:ff:c9:ae: 3d:57:5a:eb:4f:5b:e2:fe:f7:a1:0c:d0:7a:8e:43: d4:84:95:e6:ab:23:48:4b:1c:bf:1b:41:e7:be:09: a7:d2:b0:54:26:d5:d0:d0:8a:b4:b8:f5:02:bc:ba: fe:26:2a:50:ec:ee:33:8a:35:5c:c4:ed:6b:36:65: e2:ca:b9:07:0f:47:c0:1b:61:1a:af:1d:a5:67:6b: 67:59:bd:da:33:f6:25:5e:ef:31:f9:7f:59:0c:cc: da:31:40:9a:a5:69:3f:aa:c2:4c:88:46:ac:87:23: 3e:ac:48:38:2b:84:65:8f:66:67:f8:fa:93:ba:6a: 66:f9:24:82:40:3f:bd:93:2c:c5:e5:e1:78:5a:29: b6:76:58:75:d5:31:46:22:03:b5:d6:4d:1f:82:4e: 6e:d2:60:44:43:69:dc:19:7d:55:ea:3e:d1:a5:bf: 82:bb:19:a1:0a:48:56:e9:da:2e:1a:79:25:47:a7: bc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2B:95:96:84:5B:25:B6:DD:A4:56:9B:46:B2:E5:53:C4:E1:72:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3a:ad:0f:a3:5f:4e:6d:67:e8:1e:65:5c:d0:58:72:f1:70: fc:9e:77:7e:d0:ec:45:ce:88:00:55:eb:ef:13:d9:5f:31:e0: 05:16:c6:94:c4:2a:d9:4b:6c:a7:c1:66:57:a2:51:11:9a:3e: 9a:6c:30:e2:9e:ec:39:34:94:dd:75:4d:20:43:f4:b3:92:6d: 96:73:e8:87:b7:1b:a4:19:76:99:68:02:56:2e:a4:bc:c9:85: cb:5c:c6:04:b7:b2:ad:60:b8:6e:66:fd:96:33:a1:89:fd:76: 53:1c:56:e5:f0:47:7b:54:6c:62:70:a8:87:7f:10:16:1d:8b: b4:ef:bf:8f:03:9b:60:21:7b:80:5f:b5:f8:01:9a:30:9a:ff: eb:62:19:ab:ed:9b:f7:0e:83:4f:f5:4f:db:61:93:2b:d4:94: 10:7f:d3:37:52:18:cf:59:f7:fc:3b:61:70:ee:c2:30:f4:a1: b5:24:8c:41:51:c4:63:7b:f0:c8:b1:f9:41:5d:41:6b:87:93: 89:4f:63:77:63:84:92:e5:50:8c:f0:5d:c3:2d:10:3e:41:57: ed:d5:95:51:7d:f6:64:4a:aa:64:91:37:e6:dc:1a:f3:88:13: 95:7b:ad:a8:1d:26:61:3c:0c:62:bb:d3:cb:c6:4b:81:b3:81: a5:90:92:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IrTtFyhRh7VgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NWVkYzc3ZGEtOTk3My00YzFkLTk0ZDQtM2E1NjRhZDBlMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSRXorKBdC3dtroYzz/LI9Hfa51M/PvvQyX6 1ZGKBQiS+WgWegeCkT5UuyxN+oC/tuZpQ+oBNLGL7NkLYIgK9uPab374q+P/ya49 V1rrT1vi/vehDNB6jkPUhJXmqyNISxy/G0Hnvgmn0rBUJtXQ0Iq0uPUCvLr+JipQ 7O4zijVcxO1rNmXiyrkHD0fAG2Earx2lZ2tnWb3aM/YlXu8x+X9ZDMzaMUCapWk/ qsJMiEashyM+rEg4K4Rlj2Zn+PqTumpm+SSCQD+9kyzF5eF4Wim2dlh11TFGIgO1 1k0fgk5u0mBEQ2ncGX1V6j7Rpb+CuxmhCkhW6douGnklR6e82wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkrlZaEWyW23aRWm0ay5VPE4XImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDFhMmMxMGQtY2NhMC0z ZmEzLTg3MTItZTY5MjczYjQ2YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI6rQ+jX05tZ+geZVzQWHLxcPyed37Q7EXOiABV6+8T2V8x4AUWxpTE KtlLbKfBZleiURGaPppsMOKe7Dk0lN11TSBD9LOSbZZz6Ie3G6QZdploAlYupLzJ hctcxgS3sq1guG5m/ZYzoYn9dlMcVuXwR3tUbGJwqId/EBYdi7Tvv48Dm2Ahe4Bf tfgBmjCa/+tiGavtm/cOg0/1T9thkyvUlBB/0zdSGM9Z9/w7YXDuwjD0obUkjEFR xGN78Mix+UFdQWuHk4lPY3djhJLlUIzwXcMtED5BV+3VlVF99mRKqmSRN+bcGvOI E5V7ragdJmE8DGK708vGS4GzgaWQkmQ= -----END CERTIFICATE-----Generated at Mon Jun 30 07:30:20 2025 by rpki-client