$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa File: d95300ce-edc2-374f-9bbe-f66958b3ae81.roa (raw, json) Hash identifier: wa0/xfBJCVSSvnjMHJJXVkNrOhj+pPj7LnJwcbxzB5s= Subject key identifier: FB:DF:8C:22:E5:8E:E6:25:5B:46:F5:4B:03:3E:E9:40:04:9E:76:70 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499AF48A6B0E1796C0BDC23300 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 72.35.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8a:6b:0e:17:96:c0:bd:c2:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=58a657d9-b533-4a29-a1a6-7bf7caa2ff96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:17:6d:72:9b:d5:62:d5:2c:ff:9c:64:ca:eb: 09:3e:be:f1:54:07:96:ac:50:40:36:cd:e2:65:d0: 90:05:77:60:dc:a2:0e:a0:55:8c:23:94:ed:94:2d: b9:86:f2:88:58:6d:52:eb:9e:d2:97:c1:0c:f8:51: 88:c7:94:b6:5c:b0:d5:c5:5e:7f:bc:75:c0:40:38: d0:8b:b4:d0:a9:cf:e8:ab:a6:00:f7:e6:6e:74:ee: 21:c1:85:4f:20:a0:7a:ea:53:04:ed:1b:55:55:b5: 4a:5e:7f:db:39:31:44:e2:99:44:6d:cf:de:36:a3: 28:06:1f:5c:51:8d:4e:c7:10:ae:e9:28:15:f7:a5: 68:6f:15:f5:e6:e8:0d:a5:51:ed:23:a5:3d:20:39: 9a:7b:e6:77:0c:1b:ee:9c:a3:04:4d:b7:1a:03:42: 8e:84:a4:25:4a:7a:b6:99:ae:e8:99:ff:1c:c0:31: 89:73:16:4b:38:20:d7:c6:dc:9a:4a:7f:8c:a5:43: 8f:da:0c:63:99:f2:ab:ba:5c:75:81:86:ff:ca:ce: 60:55:68:fd:74:3f:2b:73:bb:d4:b9:25:e7:7c:93: 35:f2:1d:4c:18:8d:35:8c:ad:47:35:ac:bd:bb:50: 68:18:17:91:e3:98:40:23:a1:e0:de:3f:1e:da:d0: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DF:8C:22:E5:8E:E6:25:5B:46:F5:4B:03:3E:E9:40:04:9E:76:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0c:3a:f0:bb:8e:44:ad:f3:45:4b:9f:a2:f5:8e:f3:57:4d: f8:0e:1b:a3:d9:7e:68:57:3d:e2:07:92:88:4d:fd:66:84:0f: 96:3b:12:dd:0f:e3:82:a4:79:b3:76:82:cb:af:7a:8b:59:9c: 93:3c:22:21:11:7b:1c:32:31:ee:09:1d:85:e9:a1:95:3b:14: 9f:15:79:77:a6:db:45:d7:60:81:a4:af:88:dd:6d:20:4b:16: 9f:ff:65:07:62:30:7e:88:c6:f6:78:69:22:6f:27:6c:6b:9c: f0:69:5c:6f:b3:a5:74:ee:52:be:3f:d6:b1:aa:6e:6c:bb:06: 2f:08:b0:b4:77:85:d6:4d:69:db:67:23:e3:75:11:44:28:58: fc:a7:7a:7f:0c:60:de:30:8c:32:3f:03:d7:a7:4e:0c:64:5d: c3:73:ec:a1:dd:a0:9a:9e:ec:66:c2:2a:13:f6:10:da:d0:ff: ef:bc:67:55:df:07:6e:25:97:41:75:c8:1c:75:d7:6a:f8:0b: af:09:94:ae:3f:f5:f7:7e:11:eb:a6:b5:e9:50:78:16:12:46: f2:3a:01:fe:1f:83:0e:f7:1c:18:43:4e:98:ff:9f:48:db:d6: 5c:d9:f7:5a:01:16:38:f5:dc:06:70:df:04:bb:4d:06:b0:a3: 01:79:04:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IprDheWwL3CMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NThhNjU3ZDktYjUzMy00YTI5LWExYTYtN2JmN2NhYTJmZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRdtcpvVYtUs/5xkyusJPr7xVAeWrFBANs3i ZdCQBXdg3KIOoFWMI5TtlC25hvKIWG1S657Sl8EM+FGIx5S2XLDVxV5/vHXAQDjQ i7TQqc/oq6YA9+ZudO4hwYVPIKB66lME7RtVVbVKXn/bOTFE4plEbc/eNqMoBh9c UY1OxxCu6SgV96VobxX15ugNpVHtI6U9IDmae+Z3DBvunKMETbcaA0KOhKQlSnq2 ma7omf8cwDGJcxZLOCDXxtyaSn+MpUOP2gxjmfKrulx1gYb/ys5gVWj9dD8rc7vU uSXnfJM18h1MGI01jK1HNay9u1BoGBeR45hAI6Hg3j8e2tCRZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvfjCLljuYlW0b1SwM+6UAEnnZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDk1MzAwY2UtZWRjMi0z NzRmLTliYmUtZjY2OTU4YjNhZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0MOvC7jkSt80VLn6L1jvNXTfgOG6PZfmhXPeIHkohN/WaED5Y7Et0P 44KkebN2gsuveotZnJM8IiERexwyMe4JHYXpoZU7FJ8VeXem20XXYIGkr4jdbSBL Fp//ZQdiMH6IxvZ4aSJvJ2xrnPBpXG+zpXTuUr4/1rGqbmy7Bi8IsLR3hdZNadtn I+N1EUQoWPynen8MYN4wjDI/A9enTgxkXcNz7KHdoJqe7GbCKhP2ENrQ/++8Z1Xf B24ll0F1yBx112r4C68JlK4/9fd+EeumtelQeBYSRvI6Af4fgw73HBhDTpj/n0jb 1lzZ91oBFjj13AZw3wS7TQawowF5BIU= -----END CERTIFICATE-----Generated at Tue May 6 03:39:21 2025 by rpki-client