$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60e02954-064e-35e0-a91c-47301f35080b.roa File: 60e02954-064e-35e0-a91c-47301f35080b.roa (raw, json) Hash identifier: 42Sb7/1TXlZaiNALgfRVmwv4YjagSBFCAGk0DXcjJKU= Subject key identifier: 40:AF:F3:37:4D:95:5B:C4:00:2F:6C:A5:96:3F:C8:45:C1:E9:10:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA48B6EB7F04C01B78B1E50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60e02954-064e-35e0-a91c-47301f35080b.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 70.88.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:8b:6e:b7:f0:4c:01:b7:8b:1e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=17b3d87f-13fb-4fc2-ad26-85a2f1a2902b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:36:bb:47:37:a4:9a:d1:65:89:40:e1:90: 49:57:bf:84:bd:7d:d9:9c:19:73:95:8d:c4:89:30: 5c:b4:46:8e:f2:b7:04:27:5c:5f:9b:26:32:a3:ff: 9a:f7:55:05:82:2c:79:38:63:65:58:b2:bd:90:a3: 8d:98:f1:ca:3b:01:84:78:65:7a:a5:50:5a:fe:d0: 25:c5:3c:87:28:d5:4f:62:13:34:25:37:d9:f5:a5: d7:5e:ce:4b:7b:83:4c:6b:02:d0:68:e1:a8:3e:fe: 0b:bf:8a:0f:d8:48:a3:e2:b2:f1:0d:db:ed:a8:7b: 0a:f4:d5:99:f1:dd:21:a0:13:40:46:aa:a4:f5:88: 82:91:04:2c:02:8d:84:ee:f9:ff:d0:ba:7a:fb:81: 33:46:ce:d6:0b:01:69:f4:e3:dd:8c:df:fc:2c:d0: 83:02:e8:c6:05:57:9c:86:c4:6c:b0:d1:41:ab:a7: ad:09:f9:cd:64:c1:a6:9e:20:f1:a4:82:3d:93:5a: fd:92:31:06:47:15:2c:3a:02:d9:9c:be:fe:d4:3d: 76:b8:c2:7b:de:1f:47:25:7d:0b:df:55:86:7c:e0: 74:0a:26:74:4a:4d:3c:b3:79:7a:a4:a7:69:27:46: e0:4e:15:ec:17:63:00:45:f8:a2:08:10:e1:34:9b: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AF:F3:37:4D:95:5B:C4:00:2F:6C:A5:96:3F:C8:45:C1:E9:10:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60e02954-064e-35e0-a91c-47301f35080b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c0:13:58:60:17:03:02:71:30:db:fe:f5:a2:19:d0:fe:7e: da:a1:6f:01:bf:33:5a:28:bd:1a:08:20:3d:de:56:03:61:80: a3:f0:7b:17:3d:a0:38:21:4e:44:bf:3e:f2:03:ee:58:41:e1: de:ec:ed:3c:63:7e:f8:19:7b:8a:79:58:ff:92:0c:4e:d8:b6: 64:6a:67:7d:24:64:0e:3b:bd:12:78:b7:5f:e8:fa:0f:b8:46: 14:ae:2d:0c:41:c6:bc:20:6a:91:8c:15:11:40:a1:70:f4:73: 1b:40:f5:d3:df:01:4d:9d:08:78:98:bd:bd:1c:55:49:85:74: 18:1a:8e:86:e9:61:3f:90:b7:a9:5d:50:21:cd:84:d1:0b:91: 40:a0:ba:38:f8:61:5f:f7:13:c1:74:3b:7a:d1:38:60:31:08: 1f:ea:3a:88:d1:2b:d0:d5:72:82:fa:be:c9:6c:02:0e:df:65: 91:05:39:2d:20:3b:80:5d:20:8f:54:29:66:a2:45:91:dc:8a: e9:34:3d:be:e5:9c:dd:0f:76:a8:a4:48:51:0d:99:a5:10:db: cb:cd:dd:0b:f6:78:ca:6b:1b:1e:c5:2d:92:cc:a3:24:0a:47: 13:c4:40:70:1a:eb:a5:37:9a:f1:bf:b7:6c:d6:38:54:14:3a: 70:ac:a4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pItut/BMAbeLHlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTdiM2Q4N2YtMTNmYi00ZmMyLWFkMjYtODVhMmYxYTI5MDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmk2u0c3pJrRZYlA4ZBJV7+EvX3ZnBlzlY3E iTBctEaO8rcEJ1xfmyYyo/+a91UFgix5OGNlWLK9kKONmPHKOwGEeGV6pVBa/tAl xTyHKNVPYhM0JTfZ9aXXXs5Le4NMawLQaOGoPv4Lv4oP2Eij4rLxDdvtqHsK9NWZ 8d0hoBNARqqk9YiCkQQsAo2E7vn/0Lp6+4EzRs7WCwFp9OPdjN/8LNCDAujGBVec hsRssNFBq6etCfnNZMGmniDxpII9k1r9kjEGRxUsOgLZnL7+1D12uMJ73h9HJX0L 31WGfOB0CiZ0Sk08s3l6pKdpJ0bgThXsF2MARfiiCBDhNJvcEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECv8zdNlVvEAC9spZY/yEXB6RBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBlMDI5NTQtMDY0ZS0z NWUwLWE5MWMtNDczMDFmMzUwODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHAE1hgFwMCcTDb/vWiGdD+ftqhbwG/M1oovRoIID3eVgNhgKPwexc9 oDghTkS/PvID7lhB4d7s7TxjfvgZe4p5WP+SDE7YtmRqZ30kZA47vRJ4t1/o+g+4 RhSuLQxBxrwgapGMFRFAoXD0cxtA9dPfAU2dCHiYvb0cVUmFdBgajobpYT+Qt6ld UCHNhNELkUCgujj4YV/3E8F0O3rROGAxCB/qOojRK9DVcoL6vslsAg7fZZEFOS0g O4BdII9UKWaiRZHciuk0Pb7lnN0PdqikSFENmaUQ28vN3Qv2eMprGx7FLZLMoyQK RxPEQHAa66U3mvG/t2zWOFQUOnCspHs= -----END CERTIFICATE-----Generated at Tue Jun 3 06:33:49 2025 by rpki-client