$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d930f9-d6f4-3529-85d8-1209abde5bbc.roa File: 18d930f9-d6f4-3529-85d8-1209abde5bbc.roa (raw, json) Hash identifier: pQebjMaHcB8zxgmbDyEddNX+vAAp3lfspOC8CYun3PU= Subject key identifier: 1B:01:36:62:CA:6E:15:24:77:5E:CF:4C:02:33:CD:02:AA:18:20:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D64D91F59352B46A388C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d930f9-d6f4-3529-85d8-1209abde5bbc.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 70.89.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:64:d9:1f:59:35:2b:46:a3:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=37365bc8-3811-46bb-9a65-cf9a3c9ee646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:32:3b:cf:07:ef:5c:ee:d6:4e:52:26:c8: 59:61:4b:e7:b1:59:c6:83:a3:fb:75:29:4c:22:34: 2e:8f:3f:95:25:3d:50:97:4c:9e:a4:4a:de:ee:61: 10:6f:fb:8d:91:34:be:51:8f:3a:8c:38:61:50:e2: 71:ff:bc:94:43:37:31:66:da:a0:ce:8a:31:87:9c: 98:32:16:b9:93:d8:20:51:64:1e:4f:3a:e8:d4:bb: 62:91:7c:fd:1d:31:51:ac:f7:46:59:95:b4:12:0b: 0c:dc:14:9b:df:86:43:d4:e8:f1:b1:a1:1b:f4:4c: 31:00:51:9a:1a:64:7c:94:f1:8c:14:38:26:f1:b5: 8b:57:b3:e4:b9:12:ea:2d:92:83:3e:95:23:f7:eb: 9d:3e:8f:0e:33:36:23:cd:62:59:63:3d:dd:36:79: a2:fb:80:a6:58:65:a5:8a:32:aa:a3:50:84:78:44: 06:c8:93:7a:35:e7:68:99:d3:95:a3:31:57:cb:22: 53:a4:7a:86:c0:db:dd:7e:c5:27:c4:fa:f2:62:cd: 7c:be:20:a1:12:a2:1a:8f:87:ee:65:bb:2e:7b:ee: 00:4d:e1:31:61:7b:52:62:2d:4d:3d:f4:64:3b:67: 4c:df:3b:c5:37:8b:06:a7:80:6e:6c:86:5c:3c:8b: bb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:01:36:62:CA:6E:15:24:77:5E:CF:4C:02:33:CD:02:AA:18:20:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d930f9-d6f4-3529-85d8-1209abde5bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2d:f3:3a:5f:18:ad:07:09:1e:a1:1c:05:21:3c:6c:b5:30: e5:19:51:0c:e9:be:76:80:1c:59:10:74:36:09:ec:e3:79:17: 75:c1:46:6c:fb:ab:f9:bb:28:5f:28:00:bb:3c:7d:2a:22:1b: f2:1a:94:dc:35:d1:37:28:1e:5e:e7:4a:44:0f:70:f1:70:4f: d5:d9:fb:a1:55:15:09:39:64:ff:fe:48:10:3d:11:af:a4:62: b0:f8:51:54:38:24:bc:03:d1:42:bc:30:b0:02:f2:c4:51:2f: 55:9f:51:12:24:ab:34:6c:c5:1d:90:c7:80:43:a8:3f:f9:ab: 43:e0:35:af:e7:9b:4c:89:18:3b:95:27:98:bd:70:6c:97:1c: 84:32:6c:02:17:d0:0d:1b:b8:1b:ea:3d:e1:cb:f2:00:64:ec: 83:ea:15:dc:0d:05:74:e2:f6:80:c6:5d:c6:eb:fd:ee:23:8a: e5:be:89:40:27:d1:dc:ee:9f:46:a2:91:27:3c:72:00:d3:62: ad:29:19:e8:3f:07:71:b8:9b:db:a3:6a:9d:5e:c0:9c:d1:f2: 59:38:d1:6c:4b:b2:1c:c9:df:15:17:95:a0:55:1d:71:54:aa: c2:0e:c7:65:3f:ba:4e:1e:1c:99:6c:58:f7:14:a9:f1:e8:6e: e1:4f:b9:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebWTZH1k1K0ajiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MzczNjViYzgtMzgxMS00NmJiLTlhNjUtY2Y5YTNjOWVlNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxsyO88H71zu1k5SJshZYUvnsVnGg6P7dSlM IjQujz+VJT1Ql0yepEre7mEQb/uNkTS+UY86jDhhUOJx/7yUQzcxZtqgzooxh5yY Mha5k9ggUWQeTzro1LtikXz9HTFRrPdGWZW0EgsM3BSb34ZD1OjxsaEb9EwxAFGa GmR8lPGMFDgm8bWLV7PkuRLqLZKDPpUj9+udPo8OMzYjzWJZYz3dNnmi+4CmWGWl ijKqo1CEeEQGyJN6NedomdOVozFXyyJTpHqGwNvdfsUnxPryYs18viChEqIaj4fu Zbsue+4ATeExYXtSYi1NPfRkO2dM3zvFN4sGp4BubIZcPIu7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsBNmLKbhUkd17PTAIzzQKqGCD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMThkOTMwZjktZDZmNC0z NTI5LTg1ZDgtMTIwOWFiZGU1YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlmcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwt8zpfGK0HCR6hHAUhPGy1MOUZUQzpvnaAHFkQdDYJ7ON5F3XBRmz7 q/m7KF8oALs8fSoiG/IalNw10TcoHl7nSkQPcPFwT9XZ+6FVFQk5ZP/+SBA9Ea+k YrD4UVQ4JLwD0UK8MLAC8sRRL1WfURIkqzRsxR2Qx4BDqD/5q0PgNa/nm0yJGDuV J5i9cGyXHIQybAIX0A0buBvqPeHL8gBk7IPqFdwNBXTi9oDGXcbr/e4jiuW+iUAn 0dzun0aikSc8cgDTYq0pGeg/B3G4m9ujap1ewJzR8lk40WxLshzJ3xUXlaBVHXFU qsIOx2U/uk4eHJlsWPcUqfHobuFPucI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:15 2025 by rpki-client