$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a38526c3-764b-3a1b-8738-d253135a31d1.roa File: a38526c3-764b-3a1b-8738-d253135a31d1.roa (raw, json) Hash identifier: E4d1IsuiqvAvgZkfkFB9+sEBLXa0Sf8S3RRGy36oPzk= Subject key identifier: 22:C5:98:83:E7:70:E1:42:F4:74:70:49:B2:70:9E:95:BF:4F:95:06 Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F43285849D594D01ECBCD8C92B7918CA0 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a38526c3-764b-3a1b-8738-d253135a31d1.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 1299 IP address blocks: 70.35.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:d0:1e:cb:cd:8c:92:b7:91:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=98ce591b-9e2c-4fb2-a11c-5679d4206285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:f7:58:e1:fa:9f:74:75:90:a2:31:db:08: 4d:b5:80:09:32:b9:47:d1:34:f0:9d:de:07:5c:b3: 24:b0:49:fe:b0:50:ba:ac:9d:a2:aa:72:6a:9b:e6: 9b:a7:25:7f:73:1f:7a:3b:0e:0f:4a:73:f0:f4:ad: 80:71:bb:41:59:d2:10:06:9a:1d:0d:7d:45:27:4f: 7f:74:59:f8:78:86:ee:ad:b7:2a:a8:b7:23:41:4d: 52:09:34:f6:ed:d8:ea:89:51:07:71:54:40:de:47: 3e:0a:e5:45:29:82:a8:a8:8b:99:83:b2:48:14:e1: fe:31:0f:73:e4:cf:80:8c:68:65:fe:43:0a:9d:ae: 55:49:e8:67:ce:84:e4:38:da:73:15:22:ab:ac:5f: 94:c5:7c:94:d9:04:9f:61:a0:de:0c:f4:0a:ed:1f: dd:06:a6:4d:f9:89:e4:f8:43:61:63:78:f5:47:ef: 81:f3:ce:4c:e9:7a:c9:14:46:1a:3b:98:0a:c1:50: 27:29:97:76:27:4f:f4:c5:e1:de:dd:3f:e5:6c:c3: b5:83:b4:8c:5f:74:63:a5:70:ef:40:7f:96:19:be: 98:70:42:c2:95:a4:b3:94:d8:fe:a5:94:a3:13:86: d8:1a:e6:37:45:c2:74:a3:55:c2:f9:19:e2:9f:a6: 3b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C5:98:83:E7:70:E1:42:F4:74:70:49:B2:70:9E:95:BF:4F:95:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a38526c3-764b-3a1b-8738-d253135a31d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 70.35.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:04:ce:7d:e8:90:91:5a:8d:23:cd:a8:17:81:43:6d:2e:0b: bd:2b:3f:02:77:ab:07:b9:a6:b4:83:f6:86:ac:a2:7d:29:31: c6:32:4a:dc:85:29:7b:14:d9:45:09:a2:fd:c9:9c:97:02:47: cf:42:4e:05:60:74:00:13:c6:b8:77:f5:69:76:d4:a0:69:c4: 17:0c:27:70:4d:40:33:2b:93:92:09:ea:c9:ff:79:3d:79:eb: d1:61:d1:5b:0f:98:05:55:1b:df:f0:e9:45:52:3b:7a:89:06: 43:aa:ce:e8:c8:dd:8a:84:48:eb:01:ab:bc:ea:07:9e:5b:04: a6:dd:2f:c5:02:e6:1b:1b:5e:32:3b:74:3a:9b:3d:a2:0e:fb: fb:c3:98:7a:b9:b4:53:54:b6:9a:55:dd:15:10:f0:57:27:36: 76:eb:c7:f8:fa:6a:f9:76:7d:a4:3f:37:fb:4d:ce:b9:ff:28: 00:be:36:08:f3:1b:31:5b:b8:a9:a2:09:c2:aa:b8:4c:4d:9d: ed:c2:a5:dd:fb:79:8f:c0:92:4b:7f:c1:3e:a9:aa:dd:ea:25: 1c:91:64:42:ff:6d:26:26:c7:8b:65:5d:40:87:0c:f8:23:58: 2d:69:99:9e:b0:25:2b:80:f2:c4:5d:8e:a7:b7:b0:0f:3a:7b: ef:29:db:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlNAey82MkreRjKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk OThjZTU5MWItOWUyYy00ZmIyLWExMWMtNTY3OWQ0MjA2Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WP3WOH6n3R1kKIx2whNtYAJMrlH0TTwnd4H XLMksEn+sFC6rJ2iqnJqm+abpyV/cx96Ow4PSnPw9K2AcbtBWdIQBpodDX1FJ09/ dFn4eIburbcqqLcjQU1SCTT27djqiVEHcVRA3kc+CuVFKYKoqIuZg7JIFOH+MQ9z 5M+AjGhl/kMKna5VSehnzoTkONpzFSKrrF+UxXyU2QSfYaDeDPQK7R/dBqZN+Ynk +ENhY3j1R++B885M6XrJFEYaO5gKwVAnKZd2J0/0xeHe3T/lbMO1g7SMX3RjpXDv QH+WGb6YcELClaSzlNj+pZSjE4bYGuY3RcJ0o1XC+Rnin6Y7dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLFmIPncOFC9HRwSbJwnpW/T5UGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvYTM4NTI2YzMtNzY0Yi0z YTFiLTg3MzgtZDI1MzEzNWEzMWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcEzn3okJFajSPNqBeBQ20uC70rPwJ3qwe5prSD9oason0pMcYyStyF KXsU2UUJov3JnJcCR89CTgVgdAATxrh39Wl21KBpxBcMJ3BNQDMrk5IJ6sn/eT15 69Fh0VsPmAVVG9/w6UVSO3qJBkOqzujI3YqESOsBq7zqB55bBKbdL8UC5hsbXjI7 dDqbPaIO+/vDmHq5tFNUtppV3RUQ8FcnNnbrx/j6avl2faQ/N/tNzrn/KAC+Ngjz GzFbuKmiCcKquExNne3Cpd37eY/Akkt/wT6pqt3qJRyRZEL/bSYmx4tlXUCHDPgj WC1pmZ6wJSuA8sRdjqe3sA86e+8p22w= -----END CERTIFICATE-----Generated at Mon Jun 16 00:33:03 2025 by rpki-client