$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa File: 35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa (raw, json) Hash identifier: AXH5aXct2q0BgNQLnCenokSAQjEYf6PQXV6zhC0HmHA= Subject key identifier: 2E:A8:36:17:E6:56:90:8D:69:BA:61:22:B8:8C:83:4C:12:92:1B:F0 Certificate issuer: /CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Certificate serial: 010D0C9F4328584976A98FC0A0FFBFF1A76E9F00 Authority key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa Signing time: Wed 09 Apr 2025 01:00:47 +0000 ROA not before: Wed 09 Apr 2025 01:00:47 +0000 ROA not after: Tue 08 Jul 2025 01:00:47 +0000 asID: 209242 IP address blocks: 139.64.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:76:a9:8f:c0:a0:ff:bf:f1:a7:6e:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Validity Not Before: Apr 9 01:00:47 2025 GMT Not After : Jul 8 01:00:47 2025 GMT Subject: CN=bad082f6-30fc-4ce1-84a5-f0613426120f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:4c:60:4d:0c:e2:7e:41:19:25:60:89:d4: 44:96:d0:28:8f:03:02:41:42:60:53:1e:0e:46:c5: 72:30:d9:77:62:2a:50:15:ae:0f:53:1f:ff:db:3b: c8:c5:ff:54:ca:db:f4:80:51:36:f2:f0:38:fb:f2: f2:30:81:c7:13:1b:5b:69:d2:b6:8a:d3:b2:29:7b: 40:11:7b:74:53:9c:72:39:16:30:d7:9e:42:e8:ff: 84:da:7b:79:dd:b0:7d:ce:6e:cc:a5:58:5d:fb:86: e2:c6:b7:8a:fa:1b:65:f4:60:7d:67:04:ca:11:5f: 64:ca:50:58:e2:ae:0c:30:c1:47:a6:3b:25:e6:a2: db:8c:fb:84:86:96:64:d3:37:c5:3d:a4:84:05:9a: 68:27:cb:d2:2e:b0:61:e6:84:3c:d7:f9:ad:7a:53: 8d:e2:5c:5b:be:76:d5:8a:8a:96:b5:61:50:b0:f5: e6:ba:a8:26:13:1a:3f:9c:a3:a7:db:cd:8a:7d:0d: 26:a2:99:f3:60:05:09:6d:6f:24:67:bd:70:6e:01: 68:7a:ec:dd:bb:52:30:2c:e0:3c:1d:0a:ad:f9:4b: 65:ea:1e:a0:0c:f7:67:dc:a8:4e:01:80:e0:6b:55: f1:a9:15:0d:ee:e0:37:a3:ac:d1:b2:d4:b4:b9:9f: 7f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A8:36:17:E6:56:90:8D:69:BA:61:22:B8:8C:83:4C:12:92:1B:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35b6386f-cf6f-3f35-a6a5-dbfb07a8bfeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.crl X509v3 Authority Key Identifier: keyid:DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer sbgp-ipAddrBlock: critical IPv4: 139.64.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ba:f2:91:da:b8:5b:be:1f:00:aa:47:39:d1:61:a8:29:96: ec:2c:79:aa:30:56:9c:cc:7b:6b:da:53:03:3c:34:fb:e4:39: 74:35:7e:94:a3:0d:b2:65:8f:aa:97:b7:56:14:94:aa:6e:ea: 58:1f:4c:0b:fb:0e:9b:f6:b9:c4:53:1a:80:97:7f:93:da:41: f4:bd:ef:68:64:c9:2c:64:28:9b:bc:88:64:2a:b2:e8:a3:c6: 10:73:4b:2a:7e:03:df:4c:bb:58:56:bf:28:24:8f:a5:7b:47: 4c:8f:68:22:ad:b5:b2:66:93:46:a7:a2:78:e9:64:b3:2f:7b: d7:52:39:13:e4:90:f3:23:26:bf:1f:71:fb:58:ce:f5:17:14: b2:8e:de:ea:ce:fc:d3:37:43:2a:c8:40:cf:1b:7a:42:42:e4: fe:7a:ee:b9:df:33:93:d4:33:a0:5f:29:e8:b0:07:18:92:5f: d5:29:57:e9:c6:21:b9:f2:05:e9:4d:66:03:0e:41:d1:12:fa: 67:d0:d8:d9:8e:32:a9:78:34:0d:ad:23:87:56:4a:ca:b7:db: 1b:82:23:30:f4:0f:69:ad:02:54:b6:25:9e:04:6e:c2:95:b4: 9f:3b:b7:7e:66:bc:69:64:93:fa:2c:f6:46:56:3d:e2:60:7b: 5d:73:73:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qY/AoP+/8adunwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1 NTYwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk YmFkMDgyZjYtMzBmYy00Y2UxLTg0YTUtZjA2MTM0MjYxMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBlMYE0M4n5BGSVgidREltAojwMCQUJgUx4O RsVyMNl3YipQFa4PUx//2zvIxf9Uytv0gFE28vA4+/LyMIHHExtbadK2itOyKXtA EXt0U5xyORYw155C6P+E2nt53bB9zm7MpVhd+4bixreK+htl9GB9ZwTKEV9kylBY 4q4MMMFHpjsl5qLbjPuEhpZk0zfFPaSEBZpoJ8vSLrBh5oQ81/mtelON4lxbvnbV ioqWtWFQsPXmuqgmExo/nKOn282KfQ0mopnzYAUJbW8kZ71wbgFoeuzdu1IwLOA8 HQqt+Utl6h6gDPdn3KhOAYDga1XxqRUN7uA3o6zRstS0uZ9/YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6oNhfmVpCNabphIriMg0wSkhvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRk MzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMzViNjM4NmYtY2Y2Zi0z ZjM1LWE2YTUtZGJmYjA3YThiZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzVkZDM0YzQtNjQ0ZC00NjNmLThh YmEtNWEzZDUwOWQ1NTYwLzM1ZGQzNGM0LTY0NGQtNDYzZi04YWJhLTVhM2Q1MDlk NTU2MC5jcmwwHwYDVR0jBBgwFoAU3mi1RTB62gtzbhXuYImcL57uHD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNk NTA5ZDU1NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0DrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL268pHauFu+HwCqRznRYagpluwseaowVpzMe2vaUwM8NPvkOXQ1fpSj DbJlj6qXt1YUlKpu6lgfTAv7Dpv2ucRTGoCXf5PaQfS972hkySxkKJu8iGQqsuij xhBzSyp+A99Mu1hWvygkj6V7R0yPaCKttbJmk0anonjpZLMve9dSORPkkPMjJr8f cftYzvUXFLKO3urO/NM3QyrIQM8bekJC5P567rnfM5PUM6BfKeiwBxiSX9UpV+nG IbnyBelNZgMOQdES+mfQ2NmOMql4NA2tI4dWSsq32xuCIzD0D2mtAlS2JZ4EbsKV tJ87t35mvGlkk/os9kZWPeJge11zc+c= -----END CERTIFICATE-----Generated at Sat Apr 26 14:46:14 2025 by rpki-client