$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f919d8-7eb8-3575-ad23-f892658feb56.roa File: 87f919d8-7eb8-3575-ad23-f892658feb56.roa (raw, json) Hash identifier: QaMbKclczFXg5jyVdGoul0+yVoXyFbdhQ9jIxB89Ol0= Subject key identifier: D5:5D:60:8C:6F:88:0A:0E:B7:8F:FB:D2:80:D5:69:9C:87:22:08:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858451FABB6DB8FDCF1B7D7CC5520 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f919d8-7eb8-3575-ad23-f892658feb56.roa Signing time: Thu 07 Mar 2024 02:00:25 +0000 ROA not before: Thu 07 Mar 2024 02:00:25 +0000 ROA not after: Wed 05 Jun 2024 01:00:25 +0000 asID: 33667 IP address blocks: 70.89.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1f:ab:b6:db:8f:dc:f1:b7:d7:cc:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 7 02:00:25 2024 GMT Not After : Jun 5 01:00:25 2024 GMT Subject: CN=bdbf01d3-f0a7-4908-81c1-241e55d3d8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:9e:19:4f:77:0a:9b:12:a5:da:07:6d:14: 48:44:88:c8:ba:01:4e:7f:bf:3d:20:e7:e3:22:54: 22:fe:71:5a:03:75:ba:c2:58:c3:91:7e:80:1e:ac: 7d:d8:cd:a7:88:05:12:68:0c:a1:f2:9e:bc:62:42: f3:ec:44:16:1d:e6:9b:f4:75:01:f1:e1:de:24:8d: b2:3d:6e:aa:88:fe:30:08:59:52:92:e5:48:84:7b: 08:30:0c:dd:e4:64:3f:51:f6:91:d8:bc:8c:1f:cb: 24:1a:b8:51:5e:8d:c0:c8:cc:b5:d3:95:71:c7:9b: f6:33:23:19:22:3b:94:21:1f:e1:99:7e:33:b4:cd: 07:ca:9b:94:c7:a8:42:6c:53:c2:5e:86:8e:5a:ba: d5:79:7b:d3:d5:ee:fe:31:e8:5c:13:33:96:e9:40: 5c:e3:6f:56:3f:0a:d9:4f:21:8e:70:44:52:00:90: 5a:c1:b7:08:f4:83:dd:c7:dd:1b:16:84:2b:91:44: c6:b7:e7:48:7a:6a:d3:91:e6:ea:f2:ad:ec:34:d3: bd:d3:a2:dd:ce:54:93:83:6b:9b:15:c6:53:58:81: 57:13:d8:30:3c:59:5c:f4:a3:8f:83:e4:14:9c:f2: 41:d3:f0:b5:01:e7:d9:22:9c:c6:67:8e:90:3e:ea: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5D:60:8C:6F:88:0A:0E:B7:8F:FB:D2:80:D5:69:9C:87:22:08:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f919d8-7eb8-3575-ad23-f892658feb56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:5d:a3:ee:1a:f6:c4:7a:57:95:74:a6:e0:2c:7b:f5:2a:00: b4:fb:45:ba:dd:72:f4:7e:3e:00:a6:7a:76:a2:fd:31:40:0c: 52:58:8c:3e:03:1a:02:bd:54:ef:42:5a:4c:1c:89:be:6b:0b: f6:1b:65:f6:c7:dc:a3:1d:41:33:2a:69:f6:61:de:9e:f7:8a: 86:86:2a:3b:bd:5d:7b:2b:bd:25:f5:22:23:07:78:8f:13:36: 99:a6:2f:7b:f5:3b:8b:90:92:ed:7a:41:0b:6e:c6:2a:f7:26: 1a:de:66:fa:05:3f:d5:22:6f:90:e8:4b:37:db:46:70:f8:e2: 4b:2f:7a:be:7e:df:68:b6:6d:8a:07:4c:da:be:1e:57:68:b7: 1e:ff:e4:c2:46:fe:3b:00:fc:60:59:3e:fc:00:57:49:bc:ff: dd:b5:34:18:18:3d:15:eb:fc:ac:d9:f6:4a:d1:9f:cb:85:71: 76:7c:2c:74:6a:79:bd:cb:98:1a:76:48:2a:60:16:66:39:36: 10:91:05:a4:c1:88:fe:4f:ee:7c:22:f0:86:41:d2:93:d8:26: 17:64:62:78:3f:79:14:12:9f:ff:d6:19:bd:63:b1:b4:20:37: 75:12:74:2b:20:4b:d9:7d:e0:47:08:dc:c8:9f:4d:85:f4:68: fc:16:10:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfq7bbj9zxt9fMVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk YmRiZjAxZDMtZjBhNy00OTA4LTgxYzEtMjQxZTU1ZDNkOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgeeGU93CpsSpdoHbRRIRIjIugFOf789IOfj IlQi/nFaA3W6wljDkX6AHqx92M2niAUSaAyh8p68YkLz7EQWHeab9HUB8eHeJI2y PW6qiP4wCFlSkuVIhHsIMAzd5GQ/UfaR2LyMH8skGrhRXo3AyMy105Vxx5v2MyMZ IjuUIR/hmX4ztM0HypuUx6hCbFPCXoaOWrrVeXvT1e7+MehcEzOW6UBc429WPwrZ TyGOcERSAJBawbcI9IPdx90bFoQrkUTGt+dIemrTkebq8q3sNNO906LdzlSTg2ub FcZTWIFXE9gwPFlc9KOPg+QUnPJB0/C1AefZIpzGZ46QPurcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVdYIxviAoOt4/70oDVaZyHIggCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdmOTE5ZDgtN2ViOC0z NTc1LWFkMjMtZjg5MjY1OGZlYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVdo+4a9sR6V5V0puAse/UqALT7RbrdcvR+PgCmenai/TFADFJYjD4D GgK9VO9CWkwcib5rC/YbZfbH3KMdQTMqafZh3p73ioaGKju9XXsrvSX1IiMHeI8T NpmmL3v1O4uQku16QQtuxir3JhreZvoFP9Uib5DoSzfbRnD44ksver5+32i2bYoH TNq+Hldotx7/5MJG/jsA/GBZPvwAV0m8/921NBgYPRXr/KzZ9krRn8uFcXZ8LHRq eb3LmBp2SCpgFmY5NhCRBaTBiP5P7nwi8IZB0pPYJhdkYng/eRQSn//WGb1jsbQg N3USdCsgS9l94EcI3MifTYX0aPwWEIY= -----END CERTIFICATE-----Generated at Sat May 4 14:52:06 2024 by rpki-client on console-fra.rpki-client.org