$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f919d8-7eb8-3575-ad23-f892658feb56.roa File: 87f919d8-7eb8-3575-ad23-f892658feb56.roa (raw, json) Hash identifier: bUOAXET+P3ajo4H1+0He1BPfEBovAVcuit46OIPCNp4= Subject key identifier: 7A:5C:C8:AE:12:93:5A:4E:41:46:B2:C4:A1:73:89:91:6A:07:82:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C1CC7070D35A025C52D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f919d8-7eb8-3575-ad23-f892658feb56.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33667 IP address blocks: 70.89.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:1c:c7:07:0d:35:a0:25:c5:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=2887ade6-b9ab-4cc9-bb3b-9e73f7af4a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:26:94:ec:6c:57:11:98:91:26:76:dd:a9: 8c:7d:b7:d7:91:2d:c7:09:62:1e:67:3c:2f:6c:dd: 6c:ab:47:cc:88:55:30:9e:36:a7:77:e5:3f:6d:dc: b9:51:a1:87:0d:ed:d6:f3:4f:2b:07:fa:ac:fb:17: 26:30:95:ea:2c:64:a0:f8:73:c2:3a:eb:bf:ff:00: dc:5a:c4:2c:9b:3c:fe:0e:69:93:d2:a1:39:ae:bc: 82:95:43:2c:9e:59:98:ca:25:62:77:ad:58:20:a5: 3d:98:73:eb:12:42:63:3f:fb:85:a5:8e:cb:6d:8c: 83:58:7e:22:41:c0:ba:30:ea:43:55:9d:41:e2:2c: 4c:4f:a4:68:a9:75:69:05:66:ed:da:9f:e6:db:ee: 0e:06:0b:7d:79:af:a2:1c:85:8a:6f:de:53:6f:f3: 2b:2e:66:04:19:9c:ef:20:21:20:1c:32:cb:7d:fb: d8:9d:07:6c:ec:78:93:47:af:e2:06:4d:75:f8:b3: a2:4d:b7:df:44:09:ef:83:9e:82:26:23:fd:8f:22: 33:6f:24:2e:f7:e1:32:66:ca:42:cf:90:11:53:32: 09:aa:d6:c7:1d:ea:b1:3e:37:d8:0b:99:55:29:08: ca:e8:04:cd:49:a2:48:c4:5a:f6:ef:db:e0:ee:b6: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5C:C8:AE:12:93:5A:4E:41:46:B2:C4:A1:73:89:91:6A:07:82:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f919d8-7eb8-3575-ad23-f892658feb56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a0:d9:fe:27:18:ab:79:63:22:55:0b:fb:4d:6b:55:27:d2: 56:c9:6b:19:05:09:83:4b:f2:16:25:54:76:34:0b:4b:19:7c: ac:29:9c:c1:f1:a9:fd:3f:8d:40:86:7e:5d:c1:e0:4b:42:0b: 74:da:ff:4a:db:bb:36:89:c1:39:21:2d:28:ac:fe:c1:89:0e: e5:64:c0:1c:0c:64:f6:a7:e2:97:fe:93:2f:1a:29:a9:dd:1c: a8:3f:aa:99:6a:53:a4:e1:9a:26:70:35:dc:ef:7f:2d:13:f3: 92:06:54:05:a7:ac:2c:e3:28:2a:75:ee:34:d5:70:e7:2e:9b: 64:35:91:b7:c6:23:88:49:f8:57:9f:b8:e0:13:61:87:83:1b: cf:fd:e6:c8:71:5d:5a:92:66:2c:97:bf:21:92:ba:75:b1:74: c6:15:a4:5d:77:d9:56:2e:7b:4d:57:7a:6d:3f:f4:c3:50:3d: cc:1c:60:8a:31:6c:78:59:a8:be:9f:57:f1:7c:3b:5b:6a:b4: 34:9d:a5:02:96:18:24:37:2d:f6:a9:4a:b8:d0:e0:5d:4d:3d: 1b:38:7d:08:4c:27:6b:e1:9e:9a:c1:e1:40:ac:38:f6:ea:15: 95:f0:c7:ab:0d:45:f6:d5:ae:3a:88:45:f9:c6:97:dd:f9:05: 18:84:4f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebBzHBw01oCXFLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Mjg4N2FkZTYtYjlhYi00Y2M5LWJiM2ItOWU3M2Y3YWY0YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj4mlOxsVxGYkSZ23amMfbfXkS3HCWIeZzwv bN1sq0fMiFUwnjand+U/bdy5UaGHDe3W808rB/qs+xcmMJXqLGSg+HPCOuu//wDc WsQsmzz+DmmT0qE5rryClUMsnlmYyiVid61YIKU9mHPrEkJjP/uFpY7LbYyDWH4i QcC6MOpDVZ1B4ixMT6RoqXVpBWbt2p/m2+4OBgt9ea+iHIWKb95Tb/MrLmYEGZzv ICEgHDLLffvYnQds7HiTR6/iBk11+LOiTbffRAnvg56CJiP9jyIzbyQu9+EyZspC z5ARUzIJqtbHHeqxPjfYC5lVKQjK6ATNSaJIxFr279vg7rbAxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpcyK4Sk1pOQUayxKFziZFqB4LLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdmOTE5ZDgtN2ViOC0z NTc1LWFkMjMtZjg5MjY1OGZlYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGg2f4nGKt5YyJVC/tNa1Un0lbJaxkFCYNL8hYlVHY0C0sZfKwpnMHx qf0/jUCGfl3B4EtCC3Ta/0rbuzaJwTkhLSis/sGJDuVkwBwMZPan4pf+ky8aKand HKg/qplqU6ThmiZwNdzvfy0T85IGVAWnrCzjKCp17jTVcOcum2Q1kbfGI4hJ+Fef uOATYYeDG8/95shxXVqSZiyXvyGSunWxdMYVpF132VYue01Xem0/9MNQPcwcYIox bHhZqL6fV/F8O1tqtDSdpQKWGCQ3LfapSrjQ4F1NPRs4fQhMJ2vhnprB4UCsOPbq FZXwx6sNRfbVrjqIRfnGl935BRiET9c= -----END CERTIFICATE-----Generated at Mon Apr 7 16:04:18 2025 by rpki-client