$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82b0d5a5-84a5-3e12-a4bf-f072afdd3a23.roa File: 82b0d5a5-84a5-3e12-a4bf-f072afdd3a23.roa (raw, json) Hash identifier: xC1pp5/qy+fOPK8Iw1p7H/RsRTyUHo1PVmG1gl/KyBA= Subject key identifier: 1B:D2:1E:D0:9E:B6:38:DA:21:2C:DA:F3:98:16:73:FA:72:49:2A:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C1CDDD1FB4CBD8F055900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82b0d5a5-84a5-3e12-a4bf-f072afdd3a23.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33667 IP address blocks: 70.89.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:1c:dd:d1:fb:4c:bd:8f:05:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b9a404f0-971c-4ea0-9b1a-16ff6cb4a595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:af:92:e3:a8:40:3c:00:3e:27:d1:a7:2c: e5:e4:76:60:d0:29:e1:93:ed:c5:d6:69:d4:1f:45: 6c:7b:8e:8a:77:ab:d7:fa:7e:11:11:71:ab:e8:96: 38:70:3c:17:27:c6:22:32:ea:41:bc:d4:ee:78:f3: 09:48:08:41:3a:0b:7a:7a:9f:ff:76:68:c1:d0:36: ce:c6:24:a0:e9:34:f6:16:ab:a2:d4:10:59:c6:64: 83:e4:66:01:8c:15:26:18:3e:8d:69:35:08:3f:ef: 71:f2:4a:bd:9b:30:4d:ac:8f:61:20:d5:c3:d3:9f: 0f:13:f5:57:c6:79:52:38:66:90:c5:22:a8:46:b5: 80:76:5f:92:c4:b5:55:82:90:75:33:57:84:3b:98: 74:f4:86:b8:6d:0b:0a:3e:fb:a0:1d:21:16:92:12: 22:fc:25:8a:a6:99:0f:66:fc:f7:35:21:db:88:96: 82:ba:ce:0f:86:59:92:9f:0c:2c:f3:db:ea:aa:df: 3e:54:0c:f8:cf:d9:a4:0d:88:c1:f7:ee:b0:0d:c6: a1:c3:ed:61:fc:88:38:04:2e:b0:5c:07:08:4e:d6: cf:04:4d:42:a4:a9:71:b8:b5:ce:24:63:a4:59:e6: 51:eb:b5:e5:43:47:43:5f:68:f4:bc:09:47:b3:2e: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D2:1E:D0:9E:B6:38:DA:21:2C:DA:F3:98:16:73:FA:72:49:2A:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/82b0d5a5-84a5-3e12-a4bf-f072afdd3a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e6:3f:b0:00:4e:8e:49:e4:6f:af:31:d8:6f:43:c3:77:28: 05:07:df:a1:41:27:86:d0:96:4d:a0:bb:3d:09:fc:d4:ba:37: 15:e1:36:92:a2:20:cd:ee:98:d5:d0:da:5e:e5:fc:ae:bc:a4: 33:d4:72:3c:c7:a9:04:09:54:fd:e8:a8:6a:b0:a5:33:fa:c5: d0:37:9b:4c:ee:61:13:71:ce:51:80:fe:d0:01:4d:3e:b2:c6: cd:4d:72:8d:27:8f:4c:3c:a6:24:d6:2a:2b:6e:38:85:ae:d8: b7:6d:a2:85:2b:7d:4c:85:bc:46:e4:e0:41:25:94:34:82:ad: ad:72:67:dc:31:28:83:aa:55:36:7a:4a:cf:7b:59:f5:8d:fe: 05:8c:4b:a8:37:20:26:98:66:9c:0a:94:68:a4:7f:9c:17:6e: c5:0f:8a:d1:b4:1e:bb:11:c1:ad:c1:71:e4:38:7a:37:4a:9e: 9b:26:6b:5e:b9:58:b5:04:f8:aa:73:df:75:5e:c3:5a:40:7c: 25:53:0b:72:7a:ec:3f:ce:fb:9a:54:bc:8b:f8:50:6c:b1:f8: b7:11:e2:4b:17:83:5f:d2:0d:6d:bf:60:5e:ca:64:8b:a7:15: 2a:05:e6:f3:01:a5:b1:9d:37:46:44:a9:1e:70:78:b3:e2:58: 07:c1:af:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebBzd0ftMvY8FWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjlhNDA0ZjAtOTcxYy00ZWEwLTliMWEtMTZmZjZjYjRhNTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv86vkuOoQDwAPifRpyzl5HZg0Cnhk+3F1mnU H0Vse46Kd6vX+n4REXGr6JY4cDwXJ8YiMupBvNTuePMJSAhBOgt6ep//dmjB0DbO xiSg6TT2Fqui1BBZxmSD5GYBjBUmGD6NaTUIP+9x8kq9mzBNrI9hINXD058PE/VX xnlSOGaQxSKoRrWAdl+SxLVVgpB1M1eEO5h09Ia4bQsKPvugHSEWkhIi/CWKppkP Zvz3NSHbiJaCus4PhlmSnwws89vqqt8+VAz4z9mkDYjB9+6wDcahw+1h/Ig4BC6w XAcITtbPBE1CpKlxuLXOJGOkWeZR67XlQ0dDX2j0vAlHsy7xqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvSHtCetjjaISza85gWc/pySSrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODJiMGQ1YTUtODRhNS0z ZTEyLWE0YmYtZjA3MmFmZGQzYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRlmSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzmP7AATo5J5G+vMdhvQ8N3KAUH36FBJ4bQlk2guz0J/NS6NxXhNpKi IM3umNXQ2l7l/K68pDPUcjzHqQQJVP3oqGqwpTP6xdA3m0zuYRNxzlGA/tABTT6y xs1Nco0nj0w8piTWKituOIWu2LdtooUrfUyFvEbk4EEllDSCra1yZ9wxKIOqVTZ6 Ss97WfWN/gWMS6g3ICaYZpwKlGikf5wXbsUPitG0HrsRwa3BceQ4ejdKnpsma165 WLUE+Kpz33Vew1pAfCVTC3J67D/O+5pUvIv4UGyx+LcR4ksXg1/SDW2/YF7KZIun FSoF5vMBpbGdN0ZEqR5weLPiWAfBr2Q= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:19 2025 by rpki-client