$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60e02954-064e-35e0-a91c-47301f35080b.roa File: 60e02954-064e-35e0-a91c-47301f35080b.roa (raw, json) Hash identifier: dF3D638wbM6aqtXTUZHSCI9aAzb31oK2seYRXNJbPRA= Subject key identifier: F3:3B:86:7C:21:E0:B7:C9:FA:17:7C:FC:3B:BA:D9:AB:F3:78:38:6A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B891CB7044C871F9CF000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60e02954-064e-35e0-a91c-47301f35080b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 70.88.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:89:1c:b7:04:4c:87:1f:9c:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b3c98c4f-3c65-4b75-95c8-6fed92c6e9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:e3:f2:73:b5:88:c0:7c:eb:4f:11:22:d2: 6e:7e:49:b1:52:fa:04:cf:6c:9a:96:b7:1c:d4:0f: b4:a3:b1:93:92:24:e7:56:63:7c:f8:c5:b1:60:60: 33:7c:e2:a6:78:d3:99:36:43:9a:f9:9f:25:ab:6a: a7:7d:24:16:4f:42:0f:41:0e:87:aa:33:bd:d5:19: 80:84:ae:21:28:15:fa:14:87:72:00:be:51:36:55: 6c:8d:5b:1f:39:ba:5f:92:30:b7:32:be:eb:13:83: 65:b1:ed:a0:c5:26:dc:4f:0a:e5:bc:02:c6:e8:68: 9e:75:3b:0e:a2:15:b7:42:49:df:08:e5:76:93:69: e6:7f:13:42:34:a8:a6:25:f4:2e:93:50:17:0b:eb: 8f:c3:0a:5f:1c:da:33:71:17:77:4b:6f:dc:f8:c6: cf:bb:f9:15:f0:7b:da:1b:8e:45:38:f7:10:4e:50: c4:8d:56:92:e3:be:a2:20:7b:77:50:f9:3f:b9:47: 29:10:3c:a6:fe:e1:10:fb:23:77:6b:5c:63:76:63: 35:58:34:10:54:7a:54:31:77:7e:b9:94:14:b6:f6: a6:b3:92:97:00:3e:31:69:95:a9:3b:5d:37:3b:ba: 3f:bf:2f:c1:ee:d9:50:e2:a0:02:f7:df:8c:7f:d8: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3B:86:7C:21:E0:B7:C9:FA:17:7C:FC:3B:BA:D9:AB:F3:78:38:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60e02954-064e-35e0-a91c-47301f35080b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:0e:e2:f2:a0:70:1e:d4:81:14:30:2e:e6:f4:b2:1e:df:71: 0a:e0:ab:af:cd:87:b4:15:8b:27:dc:38:f0:25:dd:35:ac:2f: 25:89:61:61:f4:3b:5f:3d:ef:e7:51:ab:63:05:be:8b:37:ff: c5:f0:d8:df:bf:64:2c:90:ab:15:10:1c:7f:d0:4b:1d:17:77: 4e:92:2a:8f:48:7f:57:d8:40:f9:63:b0:bf:40:36:c2:72:4c: 00:b0:3a:1f:33:39:58:1d:13:a0:0b:3f:b1:c3:9b:13:07:ed: 72:f0:10:68:68:46:d7:78:c4:67:da:5b:4c:18:1e:4e:64:7b: 33:17:da:68:01:84:70:89:16:3d:31:73:c8:56:fb:ae:af:d4: 00:c1:83:58:b9:7a:bd:65:39:98:cc:f3:78:ef:51:26:18:af: 1b:c6:26:cb:65:30:6e:92:ba:7a:31:fc:11:75:d8:f0:0c:82: 6e:d3:2c:da:5f:ea:8d:bc:34:e4:4f:28:49:83:51:fc:ae:c7: e4:2f:f4:63:ff:a5:9c:e3:35:18:cb:42:b0:62:80:21:19:eb: f6:dd:27:e8:77:86:9a:19:14:58:36:fb:ac:2b:01:73:e4:3a: ea:1e:26:63:f3:1e:e3:0c:04:af:30:7f:51:06:7d:3a:a6:8c: 33:6f:6f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea4kctwRMhx+c8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjNjOThjNGYtM2M2NS00Yjc1LTk1YzgtNmZlZDkyYzZlOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5zj8nO1iMB8608RItJufkmxUvoEz2yalrcc 1A+0o7GTkiTnVmN8+MWxYGAzfOKmeNOZNkOa+Z8lq2qnfSQWT0IPQQ6HqjO91RmA hK4hKBX6FIdyAL5RNlVsjVsfObpfkjC3Mr7rE4Nlse2gxSbcTwrlvALG6GiedTsO ohW3QknfCOV2k2nmfxNCNKimJfQuk1AXC+uPwwpfHNozcRd3S2/c+MbPu/kV8Hva G45FOPcQTlDEjVaS476iIHt3UPk/uUcpEDym/uEQ+yN3a1xjdmM1WDQQVHpUMXd+ uZQUtvams5KXAD4xaZWpO103O7o/vy/B7tlQ4qAC99+Mf9hW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM7hnwh4LfJ+hd8/Du62avzeDhqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBlMDI5NTQtMDY0ZS0z NWUwLWE5MWMtNDczMDFmMzUwODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkO4vKgcB7UgRQwLub0sh7fcQrgq6/Nh7QViyfcOPAl3TWsLyWJYWH0 O1897+dRq2MFvos3/8Xw2N+/ZCyQqxUQHH/QSx0Xd06SKo9If1fYQPljsL9ANsJy TACwOh8zOVgdE6ALP7HDmxMH7XLwEGhoRtd4xGfaW0wYHk5kezMX2mgBhHCJFj0x c8hW+66v1ADBg1i5er1lOZjM83jvUSYYrxvGJstlMG6Sunox/BF12PAMgm7TLNpf 6o28NORPKEmDUfyux+Qv9GP/pZzjNRjLQrBigCEZ6/bdJ+h3hpoZFFg2+6wrAXPk OuoeJmPzHuMMBK8wf1EGfTqmjDNvb/A= -----END CERTIFICATE-----Generated at Mon Apr 7 09:34:14 2025 by rpki-client