$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa File: 456ba9f7-e72c-305d-b3cd-691ae04fe061.roa (raw, json) Hash identifier: 8e0xfzisdhJL3cYe6YIKA+1QVSXFLyAdkBo6upmZr5g= Subject key identifier: 88:D0:39:75:B3:62:E9:EB:CE:B8:4F:5F:02:1E:9A:16:4F:6B:5D:9A Certificate issuer: /CN=8a57b69a-d683-4350-83d4-e449c0242b7d Certificate serial: 010D0C9F432858499294A2B89469B3871396FF60 Authority key identifier: 38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 55134 IP address blocks: 70.34.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a2:b8:94:69:b3:87:13:96:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a57b69a-d683-4350-83d4-e449c0242b7d Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=494ee19b-4264-42bf-a145-379be5ac9769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:bd:24:50:9b:22:17:58:09:bb:92:c9:24: 4d:cd:b3:ee:37:e2:91:4b:04:a2:94:eb:3a:c0:90: ae:65:41:64:79:62:d8:d6:ef:e0:c0:d4:1e:84:a8: fa:1b:17:5d:10:76:d7:31:9b:0c:29:ba:22:f1:3d: 8d:fc:39:42:6f:05:1b:c8:f3:a6:04:60:7e:fd:a6: 52:93:77:04:d6:d5:14:1d:c9:a6:57:8c:84:51:ac: f9:02:72:95:02:64:06:e1:2b:83:fd:1e:f7:24:de: fc:b1:11:ae:72:5f:6d:66:74:dd:e0:b6:98:17:17: 82:f7:93:18:9d:60:7c:8a:e1:d7:ce:0e:b5:6e:43: af:cb:68:f9:ee:ac:a7:1f:c4:c6:8f:97:53:cc:57: d6:f5:01:c1:a4:c3:f0:f1:22:77:9c:aa:0b:c2:5b: d4:55:8a:6e:be:04:4b:df:fb:f9:ce:75:07:9d:c2: 02:a3:c6:5b:7f:15:b8:56:cf:85:db:d9:95:05:83: 51:0a:5b:33:d5:c2:e0:b3:10:e3:9a:7f:4d:a1:07: 4b:d7:6c:f5:49:f9:0a:04:7c:36:bb:f0:d9:ca:72: 3a:e3:fa:35:8c:cf:d5:40:6e:48:29:54:1e:a6:4c: b5:7f:40:3d:ec:0b:2f:d1:10:97:93:ea:57:4c:18: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:39:75:B3:62:E9:EB:CE:B8:4F:5F:02:1E:9A:16:4F:6B:5D:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/456ba9f7-e72c-305d-b3cd-691ae04fe061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d/8a57b69a-d683-4350-83d4-e449c0242b7d.crl X509v3 Authority Key Identifier: keyid:38:8D:06:A4:B8:D5:B5:2E:32:40:F9:04:97:CD:53:11:DC:85:6F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a57b69a-d683-4350-83d4-e449c0242b7d.cer sbgp-ipAddrBlock: critical IPv4: 70.34.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:65:82:8d:62:7f:f1:0c:94:17:47:2b:26:51:5a:73:e7:7a: bf:60:cd:35:13:dc:c8:89:e8:ab:db:7a:4f:13:ba:8f:f7:e1: 69:be:75:d3:90:92:c9:6d:ab:94:c3:58:c4:3a:90:58:98:c0: bf:6b:d9:b2:97:27:ee:2a:63:9e:5e:1f:c7:60:1a:22:04:4f: a0:3b:87:b9:f5:ae:c2:f9:77:a1:41:46:48:7d:98:51:38:b2: 21:17:1a:9b:f9:58:d5:07:c1:6a:28:9b:93:6f:cc:c1:45:e8: 4b:fa:25:bb:81:ed:88:c0:cc:af:eb:31:be:5a:a9:b8:be:52: 95:be:83:9e:e3:77:da:70:bf:6c:04:fc:02:d3:c5:84:f0:40: 99:ac:85:59:9b:f2:59:5b:9c:40:bb:15:70:8c:b4:c2:ad:1f: 44:da:72:f9:74:8b:4a:1c:d5:ae:04:5c:9c:f3:83:d3:13:47: 22:f4:01:f6:82:85:73:b6:e2:5c:cd:72:1e:43:18:00:da:54: 43:43:a7:2c:cb:a8:26:af:d3:6a:62:5d:d1:3d:f9:9c:f1:52: 0f:cc:bd:2c:e1:65:88:12:5c:a5:cf:46:02:a0:15:7a:47:31: dd:d3:9e:67:aa:5f:a1:28:4c:b4:7e:29:79:c5:b4:94:c1:ec: 4c:61:d1:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKK4lGmzhxOW/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1N2I2OWEtZDY4My00MzUwLTgzZDQtZTQ0OWMwMjQy YjdkMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NDk0ZWUxOWItNDI2NC00MmJmLWExNDUtMzc5YmU1YWM5NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6+9JFCbIhdYCbuSySRNzbPuN+KRSwSilOs6 wJCuZUFkeWLY1u/gwNQehKj6GxddEHbXMZsMKboi8T2N/DlCbwUbyPOmBGB+/aZS k3cE1tUUHcmmV4yEUaz5AnKVAmQG4SuD/R73JN78sRGucl9tZnTd4LaYFxeC95MY nWB8iuHXzg61bkOvy2j57qynH8TGj5dTzFfW9QHBpMPw8SJ3nKoLwlvUVYpuvgRL 3/v5znUHncICo8ZbfxW4Vs+F29mVBYNRClsz1cLgsxDjmn9NoQdL12z1SfkKBHw2 u/DZynI64/o1jM/VQG5IKVQepky1f0A97Asv0RCXk+pXTBgXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjQOXWzYunrzrhPXwIemhZPa12aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3 YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5YzAyNDJiN2QvNDU2YmE5ZjctZTcyYy0z MDVkLWIzY2QtNjkxYWUwNGZlMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE1N2I2OWEtZDY4My00MzUwLTgz ZDQtZTQ0OWMwMjQyYjdkLzhhNTdiNjlhLWQ2ODMtNDM1MC04M2Q0LWU0NDljMDI0 MmI3ZC5jcmwwHwYDVR0jBBgwFoAUOI0GpLjVtS4yQPkEl81TEdyFbwkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTU3YjY5YS1kNjgzLTQzNTAtODNkNC1lNDQ5 YzAyNDJiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJlgo1if/EMlBdHKyZRWnPner9gzTUT3MiJ6Kvbek8Tuo/34Wm+ddOQ ksltq5TDWMQ6kFiYwL9r2bKXJ+4qY55eH8dgGiIET6A7h7n1rsL5d6FBRkh9mFE4 siEXGpv5WNUHwWoom5NvzMFF6Ev6JbuB7YjAzK/rMb5aqbi+UpW+g57jd9pwv2wE /ALTxYTwQJmshVmb8llbnEC7FXCMtMKtH0Tacvl0i0oc1a4EXJzzg9MTRyL0AfaC hXO24lzNch5DGADaVENDpyzLqCav02piXdE9+ZzxUg/MvSzhZYgSXKXPRgKgFXpH Md3TnmeqX6EoTLR+KXnFtJTB7Exh0Zw= -----END CERTIFICATE-----Generated at Sun Apr 27 22:13:01 2025 by rpki-client