$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7927f230-4eda-3069-9826-75cf6971a65e.roa File: 7927f230-4eda-3069-9826-75cf6971a65e.roa (raw, json) Hash identifier: HFtoOwCDwDzwdw1kJk7o9nSTw13mhnwNvHBKkvTOLcQ= Subject key identifier: 6E:62:52:D9:E9:5A:81:5D:F8:FF:4E:6D:5E:FF:D0:BB:7B:55:8E:92 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584921342C6611F0E21255246D40 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7927f230-4eda-3069-9826-75cf6971a65e.roa Signing time: Sun 09 Mar 2025 10:20:37 +0000 ROA not before: Sun 09 Mar 2025 10:20:37 +0000 ROA not after: Sat 07 Jun 2025 10:20:37 +0000 asID: 36522 IP address blocks: 70.28.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:2c:66:11:f0:e2:12:55:24:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:37 2025 GMT Not After : Jun 7 10:20:37 2025 GMT Subject: CN=0dcd38e8-5fce-4e42-9c06-5efd2f603ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:29:61:27:03:ca:1a:d7:a8:12:99:35:5f: fb:04:79:8a:9e:27:eb:71:7e:cb:55:74:c2:76:b1: 3d:30:b4:02:19:92:a0:a8:e7:d1:93:75:90:ec:ab: 40:58:bb:40:a8:27:65:a8:17:06:ec:ba:58:f4:24: cf:d0:5d:07:43:76:c8:56:ce:f2:1f:5f:5e:0c:23: 14:20:95:55:f8:75:d7:01:46:c8:5d:85:c5:e5:11: d2:4c:19:c6:c8:a1:09:02:33:32:5b:50:b3:42:17: db:91:b7:1b:55:92:55:6f:a2:66:cb:0d:7b:b2:3a: c9:89:2c:02:a7:7c:e2:fe:52:32:07:72:65:2a:6e: d5:71:ba:70:e3:c5:33:47:f4:ca:73:92:40:34:f4: 16:07:e8:d9:43:6c:cc:54:28:cc:e9:b4:1c:09:68: 05:8e:d2:14:34:64:8a:71:0a:00:2d:71:49:49:35: 01:a1:d8:cf:ab:ac:b3:62:8f:7c:7d:14:a9:2b:8f: 38:05:e1:a7:e8:bd:6a:b0:b3:37:5c:90:0e:5a:94: 55:86:bf:6d:04:e0:8d:1f:54:e3:95:a8:65:7a:88: dc:57:70:a1:ab:3e:88:23:8f:6e:f1:1c:27:8e:f4: e5:d4:3e:16:3a:d8:5e:0f:94:28:9b:bf:ee:ef:98: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:62:52:D9:E9:5A:81:5D:F8:FF:4E:6D:5E:FF:D0:BB:7B:55:8E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7927f230-4eda-3069-9826-75cf6971a65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 70.28.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f8:4c:e6:99:f9:a1:f1:ec:be:80:fd:56:42:c3:68:87:c7: 93:c4:cb:cd:93:cd:05:b5:0e:6a:23:77:99:1a:3a:e8:2d:85: 71:77:12:86:4a:4a:13:d3:2a:35:2e:68:09:2e:87:a0:34:26: b8:c1:c4:fd:d0:96:07:bc:2e:cd:a5:5e:9f:f6:eb:41:73:66: eb:d2:fb:c3:a6:77:90:02:1c:83:45:8c:1d:b6:ed:b1:93:20: 1a:00:d4:46:9b:71:c1:82:7e:53:eb:d0:8e:11:8a:67:f6:e3: b6:40:91:b4:bf:94:a4:b7:7d:e5:18:d2:09:c4:67:cb:b2:b3: 7b:f5:41:d0:3c:da:9f:96:e9:af:4a:2d:ec:f6:de:6a:ae:bc: 94:68:bc:2a:4e:12:03:96:2f:29:2c:9f:b9:91:56:6b:b7:e2: cf:cf:cf:cd:61:38:ed:1e:32:d6:15:7f:b8:21:1e:3f:79:a5: 3e:cc:08:3f:f8:f9:d5:40:8e:fe:66:f8:06:6a:a1:94:03:fb: 6f:da:36:2a:e2:ca:3c:bd:4e:5f:c3:81:bb:f6:6d:87:ff:49: ee:c2:f2:05:bd:ca:b0:06:9d:5a:c2:2b:b6:6c:91:8e:9c:a0: 4b:1c:d8:36:99:9f:20:74:af:82:91:2d:04:83:f5:61:1c:35: 2d:52:0d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNCxmEfDiElUkbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjAzN1oXDTI1MDYwNzEwMjAzN1owLzEtMCsGA1UEAxMk MGRjZDM4ZTgtNWZjZS00ZTQyLTljMDYtNWVmZDJmNjAzZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlIpYScDyhrXqBKZNV/7BHmKnifrcX7LVXTC drE9MLQCGZKgqOfRk3WQ7KtAWLtAqCdlqBcG7LpY9CTP0F0HQ3bIVs7yH19eDCMU IJVV+HXXAUbIXYXF5RHSTBnGyKEJAjMyW1CzQhfbkbcbVZJVb6Jmyw17sjrJiSwC p3zi/lIyB3JlKm7Vcbpw48UzR/TKc5JANPQWB+jZQ2zMVCjM6bQcCWgFjtIUNGSK cQoALXFJSTUBodjPq6yzYo98fRSpK484BeGn6L1qsLM3XJAOWpRVhr9tBOCNH1Tj lahleojcV3Chqz6II49u8RwnjvTl1D4WOtheD5Qom7/u75j4NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5iUtnpWoFd+P9ObV7/0Lt7VY6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNzkyN2YyMzAtNGVkYS0z MDY5LTk4MjYtNzVjZjY5NzFhNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRhyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz4TOaZ+aHx7L6A/VZCw2iHx5PEy82TzQW1Dmojd5kaOugthXF3EoZK ShPTKjUuaAkuh6A0JrjBxP3Qlge8Ls2lXp/260FzZuvS+8Omd5ACHINFjB227bGT IBoA1EabccGCflPr0I4Rimf247ZAkbS/lKS3feUY0gnEZ8uys3v1QdA82p+W6a9K Lez23mquvJRovCpOEgOWLyksn7mRVmu34s/Pz81hOO0eMtYVf7ghHj95pT7MCD/4 +dVAjv5m+AZqoZQD+2/aNiriyjy9Tl/Dgbv2bYf/Se7C8gW9yrAGnVrCK7ZskY6c oEsc2DaZnyB0r4KRLQSD9WEcNS1SDTg= -----END CERTIFICATE-----Generated at Tue Apr 29 14:06:45 2025 by rpki-client