$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6383adb6-58a8-379c-9b6a-f9274753148e.roa File: 6383adb6-58a8-379c-9b6a-f9274753148e.roa (raw, json) Hash identifier: wyeSni/lzrkOQfsqXtclZzcHgmetsKhhjQ7lsm9uTV4= Subject key identifier: B0:3C:94:A8:EF:61:39:6E:70:6B:50:91:7D:17:A3:49:55:EA:AD:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CA96DF29AB41526682580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6383adb6-58a8-379c-9b6a-f9274753148e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 70.91.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:a9:6d:f2:9a:b4:15:26:68:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4a04887a-da5a-4c78-a8ac-7e67b8f2ee0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fa:5b:6a:ea:b1:b5:0e:4f:52:5b:ed:05:d1: a6:53:5e:8d:ee:d4:77:cf:4d:df:f9:f0:bf:f6:db: 4b:2f:f3:26:fe:ac:d8:6d:26:d0:bd:dd:08:64:bd: 57:c9:59:97:bf:50:1e:c7:4f:6c:43:cd:db:88:be: 28:97:bc:18:96:86:65:fb:c6:28:ef:9f:ad:6b:df: 90:ba:46:14:41:24:0b:65:ec:b7:74:42:a0:4f:34: ee:57:2b:7b:12:ae:b4:25:19:0d:94:88:4a:2c:23: c5:0e:a2:18:bd:f2:10:39:52:80:1e:c0:33:d6:0e: b6:f5:d7:39:ae:e2:1c:89:40:7f:aa:e1:8a:89:74: 73:11:88:53:39:d2:c2:b4:16:e1:9f:19:d1:f2:24: 9a:8c:34:6a:b6:39:00:7a:e4:88:f9:da:21:cb:f2: f0:81:62:13:00:b6:74:c4:6a:a7:8b:2b:ed:98:5b: 13:6c:52:c0:af:24:91:fb:b8:22:87:24:86:d9:90: 1f:4a:95:31:c6:03:94:f9:9a:25:84:f6:2c:99:eb: 4f:27:53:af:d7:f4:b3:31:7f:2b:58:85:c1:40:6b: 76:0e:11:fc:49:62:41:b6:d3:b9:23:00:b4:89:98: a1:53:e4:c6:8f:9f:40:bc:11:f7:26:54:82:dc:d6: 5e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3C:94:A8:EF:61:39:6E:70:6B:50:91:7D:17:A3:49:55:EA:AD:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6383adb6-58a8-379c-9b6a-f9274753148e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.91.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:11:3d:30:3f:3b:d6:ec:c2:43:87:bf:d2:2a:7d:6c:07:ff: 13:49:e2:16:d8:a2:60:42:94:87:6e:19:d7:4c:ae:ed:f7:e0: ee:dc:fe:cb:e4:95:cb:32:1f:e9:b0:25:80:71:93:75:01:81: 10:d3:b8:3c:3a:18:fc:b9:af:1d:c6:db:bb:ea:c3:df:09:94: 2b:60:70:96:84:1f:2c:0c:ee:c9:c8:43:48:ca:f3:a3:0a:c0: f1:44:df:76:a0:41:48:68:bc:1e:1d:7f:2b:ce:a6:3d:e0:5d: bd:6b:bf:de:25:7c:13:a6:d0:ce:87:58:e1:e6:70:f5:1c:7a: f3:94:3d:65:b0:28:c6:d6:51:f2:35:a9:c7:72:00:b2:d8:01: 7f:93:e4:47:9b:7a:9b:59:a4:d2:b4:02:0a:46:0c:04:88:e0: c7:3b:80:43:a8:a4:92:bb:d5:d3:db:8f:38:08:c2:92:c0:ff: bc:3f:ee:04:12:32:4f:ce:fb:db:75:21:c2:fb:c0:7e:46:da: 52:58:03:73:5f:fa:69:78:81:ba:71:94:23:56:f9:6c:eb:69: eb:d1:fc:bf:8f:6d:73:70:ed:f6:f2:7f:b3:0d:94:9b:60:ac: d5:ce:70:aa:a1:a1:34:f2:e5:07:92:91:ad:4e:a2:8b:b3:73: a5:6c:9f:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebKlt8pq0FSZoJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NGEwNDg4N2EtZGE1YS00Yzc4LWE4YWMtN2U2N2I4ZjJlZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPpbauqxtQ5PUlvtBdGmU16N7tR3z03f+fC/ 9ttLL/Mm/qzYbSbQvd0IZL1XyVmXv1Aex09sQ83biL4ol7wYloZl+8Yo75+ta9+Q ukYUQSQLZey3dEKgTzTuVyt7Eq60JRkNlIhKLCPFDqIYvfIQOVKAHsAz1g629dc5 ruIciUB/quGKiXRzEYhTOdLCtBbhnxnR8iSajDRqtjkAeuSI+dohy/LwgWITALZ0 xGqniyvtmFsTbFLArySR+7gihySG2ZAfSpUxxgOU+ZolhPYsmetPJ1Ov1/SzMX8r WIXBQGt2DhH8SWJBttO5IwC0iZihU+TGj59AvBH3JlSC3NZenQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA8lKjvYTlucGtQkX0Xo0lV6q3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjM4M2FkYjYtNThhOC0z NzljLTliNmEtZjkyNzQ3NTMxNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRluYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIERPTA/O9bswkOHv9IqfWwH/xNJ4hbYomBClIduGddMru334O7c/svk lcsyH+mwJYBxk3UBgRDTuDw6GPy5rx3G27vqw98JlCtgcJaEHywM7snIQ0jK86MK wPFE33agQUhovB4dfyvOpj3gXb1rv94lfBOm0M6HWOHmcPUcevOUPWWwKMbWUfI1 qcdyALLYAX+T5EebeptZpNK0AgpGDASI4Mc7gEOopJK71dPbjzgIwpLA/7w/7gQS Mk/O+9t1IcL7wH5G2lJYA3Nf+ml4gbpxlCNW+WzraevR/L+PbXNw7fbyf7MNlJtg rNXOcKqhoTTy5QeSka1Ooouzc6Vsnz8= -----END CERTIFICATE-----Generated at Mon Apr 7 06:32:22 2025 by rpki-client