$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa File: 2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa (raw, json) Hash identifier: c2tKbM6O+JExt7XOqOQ2QthdmjYJL+iPYoPbATvR+G4= Subject key identifier: 7B:32:C0:98:B0:AE:94:AB:5C:0E:7C:7F:33:05:AE:37:4C:04:7D:6A Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Certificate serial: 010D0C9F432858494733EB3B44E01085F39ABCE0 Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 3695 IP address blocks: 70.36.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:eb:3b:44:e0:10:85:f3:9a:bc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=79c13665-3937-4847-9e82-94e04c94274c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a9:4d:c5:4d:46:fd:5e:cb:08:3e:dc:26:c9: e1:d5:17:e2:19:9c:1e:7a:05:47:98:b1:38:59:f4: ad:ae:51:e0:a0:e5:9e:f6:41:98:5d:a1:e3:9b:2c: e0:26:74:4b:4e:e3:02:df:a6:14:3b:2c:63:86:c4: e4:5f:89:c7:8b:9f:19:26:8d:b7:bf:87:e7:62:72: f5:d2:96:19:37:4c:1b:62:99:59:ba:86:6b:c5:18: 8b:e0:41:c2:0e:26:b9:87:7f:11:4b:2e:d0:64:68: 55:55:83:07:98:97:05:fe:d4:9f:ed:56:28:34:5b: db:53:76:50:c6:4d:e7:ff:8c:8d:b5:5b:a4:6e:ba: 35:5d:e0:73:5f:4a:ee:76:e7:d3:ce:5f:fe:43:3c: 6d:4a:83:77:c7:13:12:5a:db:c4:2f:d6:49:ea:da: 86:36:51:59:4d:da:3e:f4:86:53:81:2f:c7:50:d8: 2b:78:28:5c:88:d4:52:c1:f9:36:3d:9d:d4:b9:cf: a7:75:23:f7:26:f5:a2:ab:7a:6b:2c:1d:83:ea:b3: cd:42:10:c7:2c:7b:b8:88:ad:a9:e8:bc:82:9e:43: 28:56:14:20:2b:0c:ce:c5:2c:a5:0a:fa:39:91:03: f1:4c:53:a6:44:15:cc:8a:0d:bf:a6:0c:4c:34:64: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:32:C0:98:B0:AE:94:AB:5C:0E:7C:7F:33:05:AE:37:4C:04:7D:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/2ec02e0a-22a7-3391-86c5-84be3a2560c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl X509v3 Authority Key Identifier: keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer sbgp-ipAddrBlock: critical IPv4: 70.36.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d5:09:c1:5f:41:e0:38:c7:59:3d:41:73:e0:12:79:d8:8f: 01:fc:17:48:f1:79:cd:85:a2:6f:8a:d0:66:94:69:70:43:68: 26:ec:11:38:87:27:d4:a8:84:dc:49:16:86:0a:ab:8a:46:72: 21:c8:5a:1b:ab:42:c1:37:b3:ad:6c:ad:ce:c1:15:0d:13:f7: aa:8b:b5:05:93:5f:c1:49:46:3a:87:73:aa:41:91:21:ba:03: 46:5e:f7:d1:28:86:a2:ad:44:a3:96:46:ab:fc:17:25:82:7b: fb:72:bb:e8:8f:ca:2a:04:2b:65:ba:78:d3:4e:d8:8e:93:69: ad:41:cf:e8:1c:3e:a0:58:4c:14:99:9e:da:fc:07:e2:4b:f2: 84:98:17:dd:dd:bc:79:7c:b5:1e:45:88:b7:56:74:15:fb:9e: 47:06:41:bf:7d:4a:68:20:11:60:d4:33:17:74:f8:74:b5:4e: 53:0a:10:51:f1:c8:34:dc:4b:31:d6:e3:d5:53:27:e5:ec:03: 9d:55:8b:f9:63:b0:e1:d3:0f:5c:41:ce:45:fc:e0:c4:0b:e0: 4b:a4:1a:49:2c:89:67:b9:96:ce:90:69:30:3c:dc:82:4a:77: 8f:27:b5:70:f3:9d:27:e8:96:9c:af:b8:23:75:72:10:da:22: cf:8d:07:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+s7ROAQhfOavOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi NTIwMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NzljMTM2NjUtMzkzNy00ODQ3LTllODItOTRlMDRjOTQyNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6lNxU1G/V7LCD7cJsnh1RfiGZweegVHmLE4 WfStrlHgoOWe9kGYXaHjmyzgJnRLTuMC36YUOyxjhsTkX4nHi58ZJo23v4fnYnL1 0pYZN0wbYplZuoZrxRiL4EHCDia5h38RSy7QZGhVVYMHmJcF/tSf7VYoNFvbU3ZQ xk3n/4yNtVukbro1XeBzX0rudufTzl/+QzxtSoN3xxMSWtvEL9ZJ6tqGNlFZTdo+ 9IZTgS/HUNgreChciNRSwfk2PZ3Uuc+ndSP3JvWiq3prLB2D6rPNQhDHLHu4iK2p 6LyCnkMoVhQgKwzOxSylCvo5kQPxTFOmRBXMig2/pgxMNGSqLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsywJiwrpSrXA58fzMFrjdMBH1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvMmVjMDJlMGEtMjJhNy0z MzkxLTg2YzUtODRiZTNhMjU2MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0 MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDVCcFfQeA4x1k9QXPgEnnYjwH8F0jxec2Fom+K0GaUaXBDaCbsETiH J9SohNxJFoYKq4pGciHIWhurQsE3s61src7BFQ0T96qLtQWTX8FJRjqHc6pBkSG6 A0Ze99EohqKtRKOWRqv8FyWCe/tyu+iPyioEK2W6eNNO2I6Taa1Bz+gcPqBYTBSZ ntr8B+JL8oSYF93dvHl8tR5FiLdWdBX7nkcGQb99SmggEWDUMxd0+HS1TlMKEFHx yDTcSzHW49VTJ+XsA51Vi/ljsOHTD1xBzkX84MQL4EukGkksiWe5ls6QaTA83IJK d48ntXDznSfolpyvuCN1chDaIs+NB/w= -----END CERTIFICATE-----Generated at Fri May 9 06:13:55 2025 by rpki-client