$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e7551c0-211b-3b7d-a2a7-6f22bf5781f7.roa File: 2e7551c0-211b-3b7d-a2a7-6f22bf5781f7.roa (raw, json) Hash identifier: IxrI+jpDTeTlUnzYv0ggY6+LsdtJ6/DqMQfhE/DFte8= Subject key identifier: 50:BA:18:CC:3A:81:AD:43:3A:CF:A8:D8:7A:08:0E:A5:1E:78:C9:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D7683DE49D00D848FD680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e7551c0-211b-3b7d-a2a7-6f22bf5781f7.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33652 IP address blocks: 70.89.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:76:83:de:49:d0:0d:84:8f:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c25c3fa3-a0dc-400d-b52e-7e5771981866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:4f:d9:53:b3:12:89:2e:69:f6:f8:0a:55: b1:93:57:dc:d1:39:43:be:3c:1c:2d:66:57:dc:4b: 4f:5d:f9:05:86:85:cb:2c:53:ea:1d:c9:0b:0b:19: a4:10:65:5e:e1:83:af:ee:81:df:97:a8:93:4d:34: 72:54:19:fc:0b:79:04:a0:62:d3:f1:55:ba:49:6a: d5:c7:ca:6b:8e:67:1c:88:b7:8f:fb:47:f3:5f:aa: 17:c0:46:cc:34:c4:16:78:f6:58:5e:60:03:0f:08: f8:1e:ba:4a:47:11:f7:ef:07:ab:c7:7c:fc:7a:25: c3:61:50:36:40:f4:e4:2b:71:4f:bd:2f:2f:a8:d4: 6d:d5:06:90:e4:78:15:e2:41:7a:9b:6e:42:19:b7: 96:c3:bd:fd:ea:86:5e:0a:a8:e9:7c:42:c7:46:9a: b5:86:03:bd:f1:97:84:f3:24:83:b2:7e:c6:5f:92: bd:9e:09:c1:47:0d:6c:42:eb:f8:6c:e5:02:c4:ce: 96:50:dd:a8:f5:aa:d5:cd:72:81:45:aa:e8:2f:59: 27:5e:08:e3:f7:d8:c8:49:5f:39:45:15:f3:84:ea: 60:92:c2:96:6f:35:b3:23:d1:eb:8c:5c:fc:5b:8a: 7f:90:67:95:58:a5:f7:fe:a4:a7:d7:59:ca:4e:bb: 2a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BA:18:CC:3A:81:AD:43:3A:CF:A8:D8:7A:08:0E:A5:1E:78:C9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e7551c0-211b-3b7d-a2a7-6f22bf5781f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:3c:c0:2f:28:e2:00:a3:7c:ae:75:45:29:70:cf:25:d5:b7: 46:b5:ea:42:83:1a:b0:a2:18:03:0e:c4:65:c2:b1:09:25:01: d6:5b:a2:61:20:50:56:4e:fd:01:a5:4f:e2:ef:42:26:9a:14: b8:7f:ef:0e:39:aa:45:1e:a0:3a:83:62:4d:1c:24:c0:15:1e: e0:c9:85:80:1f:57:6d:9b:6c:d3:77:fc:5a:07:68:1c:e8:25: 33:8a:18:74:2f:5a:46:55:81:fb:a6:4a:40:6a:84:2b:77:73: 08:79:cd:54:0d:8d:a3:78:34:9c:d5:c7:55:b4:78:56:84:e5: 55:4e:c5:8c:9a:df:21:7b:ac:da:79:7c:f6:fa:f5:2b:10:3c: e2:de:6d:a9:a7:98:01:ba:50:2a:86:7f:61:01:71:33:7f:e5: a9:39:ac:6b:56:7e:a0:65:85:02:cc:53:37:37:14:a9:9f:47: b7:ea:d0:fe:2d:c4:47:47:60:ac:1d:0f:e6:68:39:2f:2d:f0: 25:3a:95:7f:60:74:88:1a:d0:48:c9:68:c7:53:25:02:9d:c5: 1a:8f:8b:46:60:08:5c:43:46:f8:66:ae:af:09:d3:cd:e5:7b: 9d:3e:5c:73:c0:6f:e5:22:55:60:d3:e4:32:2e:64:cb:09:74: 9d:b5:05:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebXaD3knQDYSP1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzI1YzNmYTMtYTBkYy00MDBkLWI1MmUtN2U1NzcxOTgxODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHdP2VOzEokuafb4ClWxk1fc0TlDvjwcLWZX 3EtPXfkFhoXLLFPqHckLCxmkEGVe4YOv7oHfl6iTTTRyVBn8C3kEoGLT8VW6SWrV x8prjmcciLeP+0fzX6oXwEbMNMQWePZYXmADDwj4HrpKRxH37werx3z8eiXDYVA2 QPTkK3FPvS8vqNRt1QaQ5HgV4kF6m25CGbeWw7396oZeCqjpfELHRpq1hgO98ZeE 8ySDsn7GX5K9ngnBRw1sQuv4bOUCxM6WUN2o9arVzXKBRaroL1knXgjj99jISV85 RRXzhOpgksKWbzWzI9HrjFz8W4p/kGeVWKX3/qSn11nKTrsqfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC6GMw6ga1DOs+o2HoIDqUeeMm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU3NTUxYzAtMjExYi0z YjdkLWEyYTctNmYyMmJmNTc4MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERlmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKk8wC8o4gCjfK51RSlwzyXVt0a16kKDGrCiGAMOxGXCsQklAdZbomEg UFZO/QGlT+LvQiaaFLh/7w45qkUeoDqDYk0cJMAVHuDJhYAfV22bbNN3/FoHaBzo JTOKGHQvWkZVgfumSkBqhCt3cwh5zVQNjaN4NJzVx1W0eFaE5VVOxYya3yF7rNp5 fPb69SsQPOLebamnmAG6UCqGf2EBcTN/5ak5rGtWfqBlhQLMUzc3FKmfR7fq0P4t xEdHYKwdD+ZoOS8t8CU6lX9gdIga0EjJaMdTJQKdxRqPi0ZgCFxDRvhmrq8J083l e50+XHPAb+UiVWDT5DIuZMsJdJ21BZI= -----END CERTIFICATE-----Generated at Mon Apr 7 03:51:23 2025 by rpki-client