$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa File: 61f3e7bb-3cef-3819-a71f-ff3645a33210.roa (raw, json) Hash identifier: AKDAJ+Pm3gM6UuMIDtCqqWGw2qkyIvbkBFgU/EVwjK8= Subject key identifier: 55:D8:2E:8A:A7:BD:E3:DE:0E:79:3D:12:79:CD:1C:08:4B:EC:27:99 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F43285848FD56BB444CBA853685AB45C0 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 20303 IP address blocks: 69.91.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bb:44:4c:ba:85:36:85:ab:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=3ab15d85-044d-4fac-8ee5-3a32db6c5426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3f:44:1e:6d:eb:a9:0d:d3:bc:8b:aa:ba:f0: 1c:0b:43:1c:47:aa:6d:4e:92:9c:66:03:c6:22:c1: 68:8b:b7:52:40:40:5f:e1:3d:11:78:30:6c:66:b1: 9a:c2:5c:f7:9e:67:e3:08:d5:00:4a:4c:88:8e:0e: f0:f1:ed:86:f0:4c:94:34:dc:37:51:2e:b8:8e:29: 9d:8e:5d:f7:99:ed:d7:3f:a4:8a:a7:09:91:6c:2a: 44:40:28:e4:40:90:ff:a4:00:89:a5:b4:99:9c:d5: 42:2b:c7:e8:a0:ea:40:07:d4:c9:1b:9f:ec:59:17: 7f:ba:97:3f:cf:49:f9:4f:58:c5:f7:ab:da:63:29: 3b:11:e8:75:55:7a:fa:48:1c:e1:57:74:49:11:b2: 4c:7d:c1:8e:11:cf:32:00:b9:a9:23:b2:ba:3b:eb: de:94:75:66:46:30:21:61:cf:ba:2f:45:fa:50:60: fe:39:e3:9a:e8:ca:c8:13:03:91:0e:95:f5:eb:bc: e5:13:9d:cb:b4:c3:28:dd:59:1c:78:06:66:e0:b8: aa:64:7d:bf:d8:5b:f7:8f:7f:9e:5c:1a:c7:81:1d: 2f:8e:7f:3d:00:09:81:c0:10:d6:6d:19:80:a6:f4: 9d:c3:52:4d:f4:aa:c8:4c:47:ed:e2:5b:9c:ed:67: 6b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D8:2E:8A:A7:BD:E3:DE:0E:79:3D:12:79:CD:1C:08:4B:EC:27:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/61f3e7bb-3cef-3819-a71f-ff3645a33210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 69.91.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c8:32:60:2d:af:87:75:71:6a:00:1a:a0:6d:9c:df:24:ee: 70:5c:3c:3b:9c:47:c9:13:cd:0e:7a:c1:7f:d4:44:e8:8b:6d: ea:4d:09:e0:c4:1d:f4:47:e8:49:66:e4:92:92:08:41:74:0c: f4:59:eb:99:a4:5c:ed:fa:92:38:e6:de:2c:e2:bb:e0:38:0a: d6:b7:97:09:6a:ec:f0:7c:4c:cd:51:c6:ed:8a:82:ff:95:d0: fd:5e:25:78:95:1c:c3:fe:68:02:3f:c7:47:88:6f:b5:f4:d0: 7d:98:b9:9a:46:9b:99:ba:d1:18:ac:42:28:c8:37:9c:04:c3: 1d:48:21:42:09:ac:03:57:e2:24:fe:ab:3a:dc:bb:d8:6c:be: 60:f0:6f:76:e6:97:df:70:94:6d:5c:26:f7:d9:2e:27:dd:e5: 9d:7d:32:63:6c:47:98:12:4a:72:78:63:ef:2b:2b:70:3d:41: 78:7f:8b:97:bc:3e:5e:3e:34:83:e9:79:6a:78:1f:40:23:54: 14:bc:a7:3c:d5:42:0a:36:c4:96:93:76:4a:a1:ab:3c:79:83: 43:c3:90:6f:f4:0f:2c:3d:8d:2b:d6:a9:d5:d3:dc:a9:b5:40: e8:c2:6f:b3:86:52:67:ba:75:20:6c:cb:b9:1a:25:ab:97:b4: ce:96:b6:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrtETLqFNoWrRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2FiMTVkODUtMDQ0ZC00ZmFjLThlZTUtM2EzMmRiNmM1NDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D9EHm3rqQ3TvIuquvAcC0McR6ptTpKcZgPG IsFoi7dSQEBf4T0ReDBsZrGawlz3nmfjCNUASkyIjg7w8e2G8EyUNNw3US64jimd jl33me3XP6SKpwmRbCpEQCjkQJD/pACJpbSZnNVCK8fooOpAB9TJG5/sWRd/upc/ z0n5T1jF96vaYyk7Eeh1VXr6SBzhV3RJEbJMfcGOEc8yALmpI7K6O+velHVmRjAh Yc+6L0X6UGD+OeOa6MrIEwORDpX167zlE53LtMMo3VkceAZm4LiqZH2/2Fv3j3+e XBrHgR0vjn89AAmBwBDWbRmApvSdw1JN9KrITEft4luc7WdrtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXYLoqnvePeDnk9EnnNHAhL7CeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjFmM2U3YmItM2NlZi0z ODE5LWE3MWYtZmYzNjQ1YTMzMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRVuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjIMmAtr4d1cWoAGqBtnN8k7nBcPDucR8kTzQ56wX/UROiLbepNCeDE HfRH6Elm5JKSCEF0DPRZ65mkXO36kjjm3iziu+A4Cta3lwlq7PB8TM1Rxu2Kgv+V 0P1eJXiVHMP+aAI/x0eIb7X00H2YuZpGm5m60RisQijIN5wEwx1IIUIJrANX4iT+ qzrcu9hsvmDwb3bml99wlG1cJvfZLifd5Z19MmNsR5gSSnJ4Y+8rK3A9QXh/i5e8 Pl4+NIPpeWp4H0AjVBS8pzzVQgo2xJaTdkqhqzx5g0PDkG/0Dyw9jSvWqdXT3Km1 QOjCb7OGUme6dSBsy7kaJauXtM6Wtkc= -----END CERTIFICATE-----Generated at Sun Apr 27 03:59:36 2025 by rpki-client