$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa File: fcbb683d-69c1-3103-ba72-9ebfb8834220.roa (raw, json) Hash identifier: gv9d3XLAWA2q4ad7YU3SYNgCoguvNBFxk/Ub+l1tVjo= Subject key identifier: 47:4B:00:BC:D6:81:1A:3F:5C:2A:6B:AC:E5:AF:4A:14:72:8D:7D:19 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F43285849C20A1E348C7CAA3D12A8C540 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 22418 IP address blocks: 70.34.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1e:34:8c:7c:aa:3d:12:a8:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=0e99fbf7-22e9-4292-bb69-f10b0c777064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:ec:67:40:fe:69:1f:2e:59:19:1a:e9:aa: d7:5a:5d:54:d1:f9:89:d0:d2:04:68:15:6d:cd:b6: e9:b3:d4:e7:8c:d4:56:c4:b4:05:63:6b:26:32:10: b0:43:6e:ab:65:f6:90:53:1f:c4:d5:0c:d3:06:9b: 7b:6d:64:36:58:f9:7a:b8:c3:cc:b1:72:dc:74:57: 5f:e9:10:61:30:dd:a2:30:b5:5f:10:9b:24:1c:8c: 73:91:74:b9:bf:ea:b6:f2:9a:7a:78:5e:c9:fc:cb: d2:fa:6e:6c:9b:96:34:4b:31:ec:51:d1:74:c6:76: 1a:b2:7c:80:13:c6:31:ed:69:d4:de:78:03:65:a9: 4d:90:1a:f0:5e:40:ec:af:a1:c1:88:d5:1b:c6:fa: 4a:8c:0f:3f:2f:29:04:98:58:74:5c:29:f4:2a:24: f7:28:2b:05:ab:b6:8f:c7:00:f0:7c:12:4d:c5:9c: 7c:76:f8:7e:48:0b:b8:51:d9:f2:f2:9e:1b:b9:2c: a2:ad:0c:04:cc:d7:2b:9a:3e:c6:9f:34:e9:06:bc: 77:46:2a:4b:40:8e:53:70:42:07:69:f2:c7:c8:37: cb:58:09:f9:a3:9f:3b:25:77:df:97:19:95:d0:76: 88:d9:43:b9:c4:ba:3f:98:33:28:28:ce:8e:05:44: 7c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4B:00:BC:D6:81:1A:3F:5C:2A:6B:AC:E5:AF:4A:14:72:8D:7D:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/fcbb683d-69c1-3103-ba72-9ebfb8834220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 70.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:00:db:18:8e:5e:81:75:4d:fc:97:2f:98:6c:67:4f:26:92: d5:fa:f0:42:f0:56:ab:f2:d6:5e:e4:66:09:e8:0e:6f:27:3e: 92:21:a3:a0:6c:31:83:75:41:d6:b2:af:ed:bf:c0:dd:cc:3a: 53:c1:f1:f3:af:92:20:37:98:31:90:84:3d:9e:b5:f1:7e:e6: 65:29:13:56:da:d2:a2:85:48:9f:75:58:5c:2e:8c:9e:d9:30: e4:14:34:a1:0f:9c:1b:2d:03:72:e6:03:5e:b4:09:2d:96:c5: 85:09:0f:c5:ff:ff:d4:2f:fb:4c:54:f5:54:83:45:ad:f6:22: 91:d9:d0:a0:1d:0d:17:5d:2e:b1:6a:ef:d7:f3:c9:bb:42:27: b5:d0:29:a8:1a:7e:0d:22:21:b0:00:22:8d:b7:62:91:40:46: 7e:97:cc:a1:6e:f6:54:96:2d:77:0a:d7:03:c6:79:5b:62:34: 36:ce:81:4a:8f:15:a5:5f:55:33:89:99:2f:a9:0a:d4:58:89: c3:78:2f:35:9e:35:a2:64:51:e2:ae:de:83:26:40:cb:24:2b: 24:1a:71:3e:34:28:30:a1:09:76:3d:8d:9d:ad:ec:a9:b6:bf: f3:5b:c9:2c:44:d2:a4:58:03:19:86:a0:a9:f8:a3:6b:38:37: 20:09:82:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCh40jHyqPRKoxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MGU5OWZiZjctMjJlOS00MjkyLWJiNjktZjEwYjBjNzc3MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTvsZ0D+aR8uWRka6arXWl1U0fmJ0NIEaBVt zbbps9TnjNRWxLQFY2smMhCwQ26rZfaQUx/E1QzTBpt7bWQ2WPl6uMPMsXLcdFdf 6RBhMN2iMLVfEJskHIxzkXS5v+q28pp6eF7J/MvS+m5sm5Y0SzHsUdF0xnYasnyA E8Yx7WnU3ngDZalNkBrwXkDsr6HBiNUbxvpKjA8/LykEmFh0XCn0KiT3KCsFq7aP xwDwfBJNxZx8dvh+SAu4Udny8p4buSyirQwEzNcrmj7GnzTpBrx3RipLQI5TcEIH afLHyDfLWAn5o587JXfflxmV0HaI2UO5xLo/mDMoKM6OBUR8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdLALzWgRo/XCprrOWvShRyjX0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvZmNiYjY4M2QtNjljMS0z MTAzLWJhNzItOWViZmI4ODM0MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIA2xiOXoF1TfyXL5hsZ08mktX68ELwVqvy1l7kZgnoDm8nPpIho6Bs MYN1Qdayr+2/wN3MOlPB8fOvkiA3mDGQhD2etfF+5mUpE1ba0qKFSJ91WFwujJ7Z MOQUNKEPnBstA3LmA160CS2WxYUJD8X//9Qv+0xU9VSDRa32IpHZ0KAdDRddLrFq 79fzybtCJ7XQKagafg0iIbAAIo23YpFARn6XzKFu9lSWLXcK1wPGeVtiNDbOgUqP FaVfVTOJmS+pCtRYicN4LzWeNaJkUeKu3oMmQMskKyQacT40KDChCXY9jZ2t7Km2 v/NbySxE0qRYAxmGoKn4o2s4NyAJgjA= -----END CERTIFICATE-----Generated at Sat May 10 19:26:07 2025 by rpki-client