$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f481f71-2d98-3429-9554-443b994424c7.roa File: 8f481f71-2d98-3429-9554-443b994424c7.roa (raw, json) Hash identifier: 81prmw+EYX3Fw82N/Gv6QtKbPcQZ937S11Ix1J7rntU= Subject key identifier: 64:98:0B:EB:C9:95:C6:40:DF:EA:1D:22:D3:11:57:AB:98:79:3D:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BE1EA3F1B7066B2590EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f481f71-2d98-3429-9554-443b994424c7.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33489 IP address blocks: 70.88.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:e1:ea:3f:1b:70:66:b2:59:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7974f9c5-2eae-4fba-a8fa-b7d9e12e3910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8e:1d:da:d2:99:69:bf:79:47:2a:ad:e8:87: 9a:c2:d6:00:03:e3:21:33:69:f2:45:41:7d:46:21: 0a:36:00:4b:df:67:15:b0:c6:f8:b2:f5:5b:18:fa: 5d:61:aa:1c:44:3c:5f:b8:4c:4f:14:99:cd:7c:0a: 11:8c:32:3c:f1:ea:b8:b7:dc:9a:79:8b:76:3f:73: 7b:1a:20:fb:e8:19:96:d7:a3:62:7a:3e:ef:33:bd: 2c:f3:24:5e:3c:22:55:93:3d:d3:66:11:63:5d:b9: 7f:76:0a:8e:d8:53:eb:2e:d0:6a:9c:c5:4f:52:bc: a3:e9:20:b7:43:8c:1c:bb:11:61:4e:2e:0b:a6:8b: e0:98:49:0c:61:67:bf:7f:ba:7c:42:39:65:20:6a: f9:97:03:2a:e8:e9:8c:61:aa:f4:25:c6:89:9e:d9: 48:62:75:81:15:28:f5:b2:2c:02:50:a9:cd:8c:17: 44:d9:98:a8:9b:0d:ed:59:14:fd:89:40:c1:90:52: 23:ea:23:b8:3e:be:78:7c:be:1b:6b:7e:47:7a:d9: b4:06:4f:b2:2b:09:c4:96:7e:2f:78:b8:81:e2:b3: 64:28:97:98:55:e1:fe:a8:5d:c5:56:08:e0:7d:e4: 02:62:9f:e8:e3:2e:79:7e:41:22:19:2b:86:00:2a: 1a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:98:0B:EB:C9:95:C6:40:DF:EA:1D:22:D3:11:57:AB:98:79:3D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f481f71-2d98-3429-9554-443b994424c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:00:55:80:1d:b6:0d:95:8a:7a:9c:b8:48:e4:6a:3c:ba:73: 40:bf:67:78:76:bd:6d:08:2d:a4:1f:ab:a0:45:4a:d5:a0:de: 36:d8:5f:15:2b:39:42:08:cc:99:5c:a9:86:92:5b:dd:9e:a4: 21:12:0e:ac:f6:7f:bd:db:b0:99:6b:00:3b:77:1a:e1:dc:2b: 81:6d:66:35:29:fe:18:88:98:e7:7c:b8:c1:e8:be:5e:b1:ab: fa:7f:4f:e4:ff:18:68:75:01:2b:a7:4d:cd:c5:1a:ba:9c:be: 41:3b:68:28:95:31:e5:f8:97:01:83:c6:da:38:33:a2:79:65: 31:51:fd:fa:66:54:57:c8:f6:ff:3c:4e:e0:b0:24:e2:51:e5: dd:c7:5c:36:f8:54:52:21:c2:e5:21:3d:d2:c6:35:03:91:e3: 10:ed:b9:7b:1d:f7:b0:3a:cf:17:8b:66:48:08:92:e6:5d:e1: a4:4b:9b:96:96:de:c7:02:56:a1:f0:8a:62:ff:73:aa:bd:ca: ef:31:fb:1b:c1:41:ae:e1:5b:51:8b:cc:cb:6c:1a:ca:b2:54: bb:51:35:af:ae:1d:b2:b0:66:12:49:d8:bc:f1:1e:a9:d8:ae: 03:b4:46:87:e7:8d:e3:9e:fe:0b:33:82:41:3d:95:a1:53:b6: 0f:6f:a3:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea+HqPxtwZrJZDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Nzk3NGY5YzUtMmVhZS00ZmJhLWE4ZmEtYjdkOWUxMmUzOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI4d2tKZab95Ryqt6IeawtYAA+MhM2nyRUF9 RiEKNgBL32cVsMb4svVbGPpdYaocRDxfuExPFJnNfAoRjDI88eq4t9yaeYt2P3N7 GiD76BmW16Niej7vM70s8yRePCJVkz3TZhFjXbl/dgqO2FPrLtBqnMVPUryj6SC3 Q4wcuxFhTi4LpovgmEkMYWe/f7p8QjllIGr5lwMq6OmMYar0JcaJntlIYnWBFSj1 siwCUKnNjBdE2Ziomw3tWRT9iUDBkFIj6iO4Pr54fL4ba35Hetm0Bk+yKwnEln4v eLiB4rNkKJeYVeH+qF3FVgjgfeQCYp/o4y55fkEiGSuGACoa7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSYC+vJlcZA3+odItMRV6uYeT2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGY0ODFmNzEtMmQ5OC0z NDI5LTk1NTQtNDQzYjk5NDQyNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRlg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8AVYAdtg2VinqcuEjkajy6c0C/Z3h2vW0ILaQfq6BFStWg3jbYXxUr OUIIzJlcqYaSW92epCESDqz2f73bsJlrADt3GuHcK4FtZjUp/hiImOd8uMHovl6x q/p/T+T/GGh1ASunTc3FGrqcvkE7aCiVMeX4lwGDxto4M6J5ZTFR/fpmVFfI9v88 TuCwJOJR5d3HXDb4VFIhwuUhPdLGNQOR4xDtuXsd97A6zxeLZkgIkuZd4aRLm5aW 3scCVqHwimL/c6q9yu8x+xvBQa7hW1GLzMtsGsqyVLtRNa+uHbKwZhJJ2LzxHqnY rgO0RofnjeOe/gszgkE9laFTtg9vo70= -----END CERTIFICATE-----Generated at Mon Apr 7 15:56:25 2025 by rpki-client