$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa File: 9f593d47-3a3d-306a-9551-03bd70997c05.roa (raw, json) Hash identifier: xywg7q7qGQHn6VawTYFj5lviYuOBm+belcUSZyuZ/vg= Subject key identifier: 14:2B:6B:C7:54:2A:5C:06:D1:00:CB:D3:84:8D:1F:C3:F7:71:95:F0 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584973DEE5BA88B2D572372CD700 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 23465 IP address blocks: 70.97.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e5:ba:88:b2:d5:72:37:2c:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=bf27d08c-ba69-4fc0-8206-9afe2e163c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:e9:a1:66:97:c8:70:22:df:98:41:10:81: e3:d3:33:df:26:fe:09:a9:12:c4:7c:1b:3c:89:ba: 3b:39:35:78:c9:85:29:bc:93:cd:97:a0:7b:f3:a4: b7:6d:f7:10:d5:8c:98:3b:3d:7d:41:3b:a5:35:62: 8a:19:ea:1c:8c:35:f8:eb:97:44:e2:20:07:d2:88: 87:bd:19:57:57:33:8d:93:67:b1:44:98:9f:e1:06: 30:00:01:f1:4d:f8:56:db:ea:9a:df:fe:45:f6:27: 9e:a1:0b:c7:6b:45:c6:06:6b:55:7e:0a:5a:75:02: 2a:dc:0c:c9:37:6a:94:c0:6d:ee:4f:91:c8:94:86: e4:5d:ef:20:db:26:49:5f:5b:fa:74:9e:11:20:80: b1:da:4e:70:9f:da:55:e8:96:d2:c1:6c:3d:ff:6d: 4b:5a:71:87:45:f6:5c:5c:7d:9a:5f:69:e2:ab:6b: 19:d1:95:c1:61:a3:b4:58:a0:f6:ec:90:6c:67:82: b1:0b:02:cc:2d:25:b9:e3:d9:b8:cf:28:7c:77:94: 7e:a5:dc:7e:3b:eb:a8:8c:ee:00:d7:a5:81:5e:16: a7:c8:f5:75:80:24:f5:d7:eb:ed:c1:97:70:10:fa: 5d:7d:ff:73:c6:b0:f7:6e:3f:ad:ed:cb:52:9e:02: b8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2B:6B:C7:54:2A:5C:06:D1:00:CB:D3:84:8D:1F:C3:F7:71:95:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/9f593d47-3a3d-306a-9551-03bd70997c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 70.97.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ce:cc:ec:31:17:9f:17:22:0a:50:1c:1d:46:4f:47:f2:b5: 78:f7:e6:6c:62:e7:46:4a:0d:45:f7:77:f3:b1:3c:b8:65:32: 7d:a7:f3:aa:53:5e:07:77:4f:51:aa:16:26:81:68:14:31:96: 3c:df:6c:c4:8b:22:eb:29:50:59:e2:e2:40:24:b1:c9:97:56: 12:6f:6d:03:fe:c0:9d:02:5e:44:7b:34:e5:c1:32:15:97:9d: 7c:98:e5:b0:1f:f2:e2:09:69:d2:30:a4:03:89:54:59:70:ad: 79:bf:4a:a1:76:fa:5c:bc:8f:43:a3:c7:46:8f:bf:d6:f5:2f: be:25:3b:55:37:62:cf:78:f2:f0:35:4b:d4:2b:ff:16:5c:e4: ec:46:23:fa:52:3f:9c:a3:ef:ed:22:19:9e:5c:f9:b0:84:3c: f9:9c:c0:38:38:6b:b1:5e:41:0c:9f:66:8a:59:48:2a:c1:25: 97:6e:f7:4a:8d:61:70:fa:8f:6c:17:2a:a8:05:f6:f3:8f:a7: 42:45:a9:03:fc:19:b9:d1:65:d7:c0:c8:93:40:97:8c:62:93: 41:61:91:eb:d6:e7:3c:94:fd:08:86:93:c4:f2:e2:bf:d7:e5: 5c:bf:63:13:a3:7b:46:b3:50:07:40:a4:ad:bb:f8:2e:fd:9a: a1:ba:f0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uW6iLLVcjcs1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YmYyN2QwOGMtYmE2OS00ZmMwLTgyMDYtOWFmZTJlMTYzYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ7poWaXyHAi35hBEIHj0zPfJv4JqRLEfBs8 ibo7OTV4yYUpvJPNl6B786S3bfcQ1YyYOz19QTulNWKKGeocjDX465dE4iAH0oiH vRlXVzONk2exRJif4QYwAAHxTfhW2+qa3/5F9ieeoQvHa0XGBmtVfgpadQIq3AzJ N2qUwG3uT5HIlIbkXe8g2yZJX1v6dJ4RIICx2k5wn9pV6JbSwWw9/21LWnGHRfZc XH2aX2niq2sZ0ZXBYaO0WKD27JBsZ4KxCwLMLSW549m4zyh8d5R+pdx+O+uojO4A 16WBXhanyPV1gCT11+vtwZdwEPpdff9zxrD3bj+t7ctSngK4XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQra8dUKlwG0QDL04SNH8P3cZXwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvOWY1OTNkNDctM2EzZC0z MDZhLTk1NTEtMDNiZDcwOTk3YzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERmGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELOzOwxF58XIgpQHB1GT0fytXj35mxi50ZKDUX3d/OxPLhlMn2n86pT Xgd3T1GqFiaBaBQxljzfbMSLIuspUFni4kAkscmXVhJvbQP+wJ0CXkR7NOXBMhWX nXyY5bAf8uIJadIwpAOJVFlwrXm/SqF2+ly8j0Ojx0aPv9b1L74lO1U3Ys948vA1 S9Qr/xZc5OxGI/pSP5yj7+0iGZ5c+bCEPPmcwDg4a7FeQQyfZopZSCrBJZdu90qN YXD6j2wXKqgF9vOPp0JFqQP8GbnRZdfAyJNAl4xik0FhkevW5zyU/QiGk8Ty4r/X 5Vy/YxOje0azUAdApK27+C79mqG68Ow= -----END CERTIFICATE-----Generated at Thu May 1 02:24:46 2025 by rpki-client