$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d63709ba-efc4-3caf-83fd-1de3e9f77899.roa File: d63709ba-efc4-3caf-83fd-1de3e9f77899.roa (raw, json) Hash identifier: oSB37qokr8KTPyFYNJ/aqP8n4hTG0rF9Op2ikOL8Lss= Subject key identifier: 45:84:59:DD:B3:B1:A9:0B:47:45:44:40:82:6E:E4:79:BA:E5:07:03 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F43285849C20A1E43B2EA1BDAD1333008 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d63709ba-efc4-3caf-83fd-1de3e9f77899.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 22418 IP address blocks: 70.34.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1e:43:b2:ea:1b:da:d1:33:30:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=a8a5e981-1cb5-4464-9cb6-02acad06da31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c8:26:4d:0c:48:cf:ef:d9:2c:2f:57:6d:53: 7e:cf:a3:eb:20:43:91:4c:74:5e:1c:cd:bf:80:17: 56:f4:0c:b9:c4:cb:c9:a0:2f:34:a1:58:13:76:a7: 88:31:d2:4a:85:bb:1d:15:5f:27:fe:fc:6f:80:35: 48:27:c6:cc:56:20:4a:53:db:c9:fb:59:5e:63:6f: b0:ae:bd:e0:28:10:b2:6b:c9:a5:54:08:4c:fc:9b: db:46:f4:9a:98:94:f2:60:60:f3:a9:05:d9:eb:29: 3c:47:47:52:70:bf:3f:c7:92:11:42:67:1a:88:fe: 88:0e:ee:3c:5e:1a:46:e6:d5:90:4c:be:b0:67:f5: 98:af:d7:b2:3c:2c:cc:32:d1:e2:a7:da:4c:d5:8b: 5f:a8:05:26:c8:e6:74:ab:58:54:d8:48:a0:54:80: 4a:b7:fd:39:8b:d5:c2:9b:7a:5d:61:2a:46:3c:82: 46:5b:1f:4f:d0:b9:d6:e1:68:f5:d3:01:e8:3a:21: b6:86:b2:d6:33:99:0f:4b:2d:91:f2:95:c6:b1:69: fb:a8:a4:44:8e:dc:88:48:29:89:aa:db:66:0d:61: c3:7b:59:c1:5d:bd:b9:93:27:25:9f:cb:bd:f1:51: be:98:61:6b:57:6d:5b:39:b5:85:c1:f1:cf:e4:77: 9c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:84:59:DD:B3:B1:A9:0B:47:45:44:40:82:6E:E4:79:BA:E5:07:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/d63709ba-efc4-3caf-83fd-1de3e9f77899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:8b:a9:f3:d5:1c:58:35:2c:98:ef:ff:f3:24:3c:ee:56:13: 13:4b:61:83:87:9e:7a:10:4b:bf:22:0c:91:7c:b4:f3:17:e8: ec:c9:ba:b5:4d:e8:9c:36:e4:f0:a0:19:73:89:4f:62:70:6b: 9c:23:64:12:82:d3:0d:17:e7:e8:95:60:6b:c0:a7:80:b6:2e: df:92:ee:c3:f0:a5:4e:fa:f3:c7:f2:5a:20:37:64:a1:d8:0a: 60:12:9e:bf:81:af:ae:ec:58:3a:65:ca:84:5e:ee:25:38:99: 5f:a5:b1:9a:01:0b:8f:cc:79:c1:5e:9c:65:e2:1d:4e:5b:32: d7:c8:00:25:43:e8:b1:48:78:af:42:a6:b2:10:5e:0e:3f:fd: 89:0e:3d:98:10:bb:08:a6:bc:be:ef:23:04:40:38:1b:a9:a3: f4:c0:42:65:ea:a6:89:9f:84:0b:f3:24:92:6a:35:48:6a:aa: 69:0c:e4:e0:8f:82:d1:e0:0f:ee:2b:27:3e:26:61:bf:a5:ed: e4:1a:ac:23:96:4e:46:48:27:81:f3:bb:be:95:95:ff:f5:80: ef:92:5a:e1:1f:ed:71:ab:87:9d:99:22:27:ea:58:9f:7e:35: 9d:ea:08:78:5f:ea:84:75:c2:bd:f7:7a:9b:59:e9:7e:03:8c: 78:55:4e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCh5Dsuob2tEzMAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YThhNWU5ODEtMWNiNS00NDY0LTljYjYtMDJhY2FkMDZkYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcgmTQxIz+/ZLC9XbVN+z6PrIEORTHReHM2/ gBdW9Ay5xMvJoC80oVgTdqeIMdJKhbsdFV8n/vxvgDVIJ8bMViBKU9vJ+1leY2+w rr3gKBCya8mlVAhM/JvbRvSamJTyYGDzqQXZ6yk8R0dScL8/x5IRQmcaiP6IDu48 XhpG5tWQTL6wZ/WYr9eyPCzMMtHip9pM1YtfqAUmyOZ0q1hU2EigVIBKt/05i9XC m3pdYSpGPIJGWx9P0LnW4Wj10wHoOiG2hrLWM5kPSy2R8pXGsWn7qKREjtyISCmJ qttmDWHDe1nBXb25kycln8u98VG+mGFrV21bObWFwfHP5HecSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWEWd2zsakLR0VEQIJu5Hm65QcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvZDYzNzA5YmEtZWZjNC0z Y2FmLTgzZmQtMWRlM2U5Zjc3ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRiJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANqLqfPVHFg1LJjv//MkPO5WExNLYYOHnnoQS78iDJF8tPMX6OzJurVN 6Jw25PCgGXOJT2Jwa5wjZBKC0w0X5+iVYGvAp4C2Lt+S7sPwpU7688fyWiA3ZKHY CmASnr+Br67sWDplyoRe7iU4mV+lsZoBC4/MecFenGXiHU5bMtfIACVD6LFIeK9C prIQXg4//YkOPZgQuwimvL7vIwRAOBupo/TAQmXqpomfhAvzJJJqNUhqqmkM5OCP gtHgD+4rJz4mYb+l7eQarCOWTkZIJ4Hzu76Vlf/1gO+SWuEf7XGrh52ZIifqWJ9+ NZ3qCHhf6oR1wr33eptZ6X4DjHhVTgA= -----END CERTIFICATE-----Generated at Sun May 11 04:10:49 2025 by rpki-client