$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa File: 9859d862-4d98-35a1-89c4-8fbd5124fac9.roa (raw, json) Hash identifier: szm29W2sB3UQ8NGPiQYYrFYugevomLhNP7ECWQaYycc= Subject key identifier: 66:23:4C:63:A0:E6:F4:38:A6:11:AC:74:76:61:88:9E:61:62:80:67 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499AF48AB17FBD8311AB06403E Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 72.35.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8a:b1:7f:bd:83:11:ab:06:40:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=447a285b-8ee0-4633-85fe-04591f4d512e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:a0:41:a5:29:82:43:50:a8:7f:e5:52:9b: e3:ad:1d:b9:77:30:10:95:45:92:5d:78:df:8f:ba: af:2d:57:6e:fd:6d:3f:75:2d:d8:78:c7:65:eb:27: 2c:09:89:86:2d:d4:60:f1:a3:00:1a:e8:74:8d:2e: c9:76:16:78:fe:29:cd:27:87:5e:2d:c0:71:14:61: ab:bd:94:27:73:c4:69:73:df:cf:c5:8c:22:06:43: a0:b1:0a:c0:ef:fb:da:f8:7c:88:b2:41:68:47:09: 71:ec:20:19:fb:63:77:21:0f:bb:e5:ec:08:e6:f4: f5:43:e2:a7:60:8d:d3:a1:de:73:32:d6:64:8c:7c: cb:00:15:81:72:7f:6b:4e:ab:81:ca:7b:5a:20:05: 2a:1f:15:d2:14:53:9b:72:26:99:f1:07:d3:76:e7: c1:b0:31:04:5f:fd:72:d9:2e:d1:8c:c9:56:02:45: 11:23:4e:35:f8:dc:2a:50:39:6a:de:bc:4d:a0:75: 90:54:ab:93:29:54:58:e0:f2:79:7c:57:d5:54:5f: 92:e5:01:6b:eb:cd:59:11:6a:ab:35:ce:92:65:af: a6:54:0a:ec:ea:8a:41:d9:6c:13:6e:f2:e4:29:90: 00:66:9e:9f:74:6c:b0:3d:70:67:3b:f8:dc:2f:a1: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:4C:63:A0:E6:F4:38:A6:11:AC:74:76:61:88:9E:61:62:80:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:58:9f:67:4c:db:69:87:d3:06:0d:86:93:22:9b:98:58:ce: 07:5f:03:bb:ba:28:bc:1e:30:88:05:06:0f:ee:67:4c:12:23: 21:ef:77:ed:b9:5a:85:65:c6:e0:e8:c9:d0:a7:bc:80:bf:e1: fc:74:e1:10:f0:0d:37:89:ca:2a:e8:c2:d6:54:78:13:77:42: 04:4e:ff:d8:33:5b:d2:7e:11:d0:be:d9:f6:b2:ed:48:a6:83: 8d:fb:31:ed:0e:9d:d8:99:00:c9:29:6f:48:c2:6a:17:8e:c0: 9f:31:9e:4c:a0:3b:62:6e:9a:45:84:a2:54:1a:03:82:7a:69: 59:a8:ca:f4:46:24:eb:3a:7c:9b:2c:30:a3:1e:03:71:b3:02: 89:5d:94:3f:ac:16:74:ff:a5:9b:22:0b:61:ae:69:8f:78:3c: 88:9f:ec:3a:c3:8b:87:ea:b6:9e:e3:aa:bb:28:62:63:78:04: 7d:f9:02:48:96:85:e1:fe:90:6b:eb:32:0e:b7:60:cf:49:6a: 99:af:23:5f:44:19:53:6e:4b:e4:3d:0b:22:0e:36:71:f4:f3: 25:02:bc:7c:16:31:47:9e:e6:57:7e:f1:f6:ce:a9:4d:82:f8: 6b:0b:18:44:56:b0:41:b1:d2:54:7d:81:fb:b3:a6:e6:ae:d5: 23:27:19:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Iqxf72DEasGQD4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NDQ3YTI4NWItOGVlMC00NjMzLTg1ZmUtMDQ1OTFmNGQ1MTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYGgQaUpgkNQqH/lUpvjrR25dzAQlUWSXXjf j7qvLVdu/W0/dS3YeMdl6ycsCYmGLdRg8aMAGuh0jS7JdhZ4/inNJ4deLcBxFGGr vZQnc8Rpc9/PxYwiBkOgsQrA7/va+HyIskFoRwlx7CAZ+2N3IQ+75ewI5vT1Q+Kn YI3Tod5zMtZkjHzLABWBcn9rTquByntaIAUqHxXSFFObciaZ8QfTdufBsDEEX/1y 2S7RjMlWAkURI041+NwqUDlq3rxNoHWQVKuTKVRY4PJ5fFfVVF+S5QFr681ZEWqr Nc6SZa+mVArs6opB2WwTbvLkKZAAZp6fdGywPXBnO/jcL6H37QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYjTGOg5vQ4phGsdHZhiJ5hYoBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvOTg1OWQ4NjItNGQ5OC0z NWExLTg5YzQtOGZiZDUxMjRmYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9Yn2dM22mH0wYNhpMim5hYzgdfA7u6KLweMIgFBg/uZ0wSIyHvd+25 WoVlxuDoydCnvIC/4fx04RDwDTeJyirowtZUeBN3QgRO/9gzW9J+EdC+2fay7Uim g437Me0OndiZAMkpb0jCaheOwJ8xnkygO2JumkWEolQaA4J6aVmoyvRGJOs6fJss MKMeA3GzAoldlD+sFnT/pZsiC2GuaY94PIif7DrDi4fqtp7jqrsoYmN4BH35AkiW heH+kGvrMg63YM9JapmvI19EGVNuS+Q9CyIONnH08yUCvHwWMUee5ld+8fbOqU2C +GsLGERWsEGx0lR9gfuzpuau1SMnGfc= -----END CERTIFICATE-----Generated at Sun Jun 15 15:52:53 2025 by rpki-client