$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f5c85bc-3d13-312f-9c91-10de2a393217.roa File: 9f5c85bc-3d13-312f-9c91-10de2a393217.roa (raw, json) Hash identifier: uVzsx0tya3PwNW+r288d+qgNG49iBGVbQo8vhIc8qNc= Subject key identifier: 9D:BE:DB:21:4A:D3:6A:E5:00:9F:FA:D9:09:6A:DA:46:AA:68:71:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BD983B5CAD170606C26D8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f5c85bc-3d13-312f-9c91-10de2a393217.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 21508 IP address blocks: 70.88.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:d9:83:b5:ca:d1:70:60:6c:26:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=782d8e91-d802-4415-bbf1-2ba94b12cf3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:ed:9d:54:78:5a:a2:36:5c:23:af:9f:cf: 3a:e1:eb:d8:52:d8:af:0c:23:09:c0:a1:85:b2:03: 0c:cd:98:0f:b0:86:87:e0:31:24:c1:78:48:50:0e: 28:08:9e:ed:1b:4a:d3:56:b7:55:ca:bb:6f:de:69: 61:77:9f:80:a7:0b:d8:65:7d:c8:4c:86:fb:f0:00: a8:bf:07:93:c4:91:c3:05:ec:7d:6b:70:88:bf:93: 8a:1a:a9:10:26:01:5f:1a:8c:3c:a1:08:4b:6f:8a: 65:cb:75:f8:a0:98:f9:c3:55:2e:47:b0:31:07:17: 7f:a8:c0:b5:89:c4:b2:69:ee:e2:5d:34:f6:93:48: 3e:b4:39:34:14:06:96:2b:9e:98:fb:dc:86:f2:43: 03:38:dd:b2:30:ca:bf:b5:21:86:70:13:dd:89:7b: 32:47:7c:f6:6b:a5:ef:2b:c8:ca:7f:9f:ef:8b:d0: f0:75:ec:7c:c7:f7:3f:e3:2b:db:f0:9b:66:7d:90: a7:13:81:2f:10:c5:a0:53:0b:1a:8e:b5:3b:f6:20: 44:cd:ec:56:b8:24:c1:d0:d9:83:42:cd:70:88:79: 95:72:17:25:f5:e1:c5:76:91:ac:36:67:3a:80:58: ce:f7:61:17:dd:3e:b4:55:79:c4:4d:12:1d:93:20: 2b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BE:DB:21:4A:D3:6A:E5:00:9F:FA:D9:09:6A:DA:46:AA:68:71:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f5c85bc-3d13-312f-9c91-10de2a393217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e4:c4:99:71:35:75:dc:c6:a4:de:d9:e8:c4:48:dd:b2:e5: 3f:09:64:a6:b7:61:ef:9b:50:fb:a8:fc:0f:69:e6:08:c2:df: 50:d7:42:8a:e2:4a:41:b4:c3:7d:fd:22:81:2b:5d:d4:fd:20: 57:ae:14:3c:68:b8:92:f9:b5:28:d4:ba:18:99:a3:24:2e:dc: 33:5f:85:69:b1:89:7f:c6:56:40:1c:33:7d:8a:44:5c:d8:94: 6a:d4:00:ff:d5:a0:fe:2e:7c:b7:d7:a3:39:79:e1:3a:7c:8c: 3d:23:7d:d7:e7:d5:66:20:8e:42:69:59:2f:54:18:69:4f:1e: cc:09:09:f6:61:46:57:ee:8a:16:33:72:ad:85:86:04:f8:4f: 65:68:6b:60:8d:6f:e0:29:7b:e9:52:49:bc:88:d7:e7:47:42: 83:66:a0:4d:1f:bc:2b:54:52:f4:f6:70:cc:ef:82:f0:c7:57: 34:17:4e:ad:b3:25:74:a7:97:9a:0e:8e:27:0d:e2:8d:6f:53: ff:32:6c:cd:3f:dc:7b:ee:ab:7a:65:0d:2a:3d:ae:b7:ea:6e: cc:39:16:57:22:b0:5a:35:c6:38:86:3f:f1:f1:26:5a:d1:58: 93:d2:53:ba:a3:4f:72:dd:5f:a2:e0:87:a1:53:57:d6:77:ec: bc:00:98:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea9mDtcrRcGBsJtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzgyZDhlOTEtZDgwMi00NDE1LWJiZjEtMmJhOTRiMTJjZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqvtnVR4WqI2XCOvn8864evYUtivDCMJwKGF sgMMzZgPsIaH4DEkwXhIUA4oCJ7tG0rTVrdVyrtv3mlhd5+ApwvYZX3ITIb78ACo vweTxJHDBex9a3CIv5OKGqkQJgFfGow8oQhLb4ply3X4oJj5w1UuR7AxBxd/qMC1 icSyae7iXTT2k0g+tDk0FAaWK56Y+9yG8kMDON2yMMq/tSGGcBPdiXsyR3z2a6Xv K8jKf5/vi9Dwdex8x/c/4yvb8JtmfZCnE4EvEMWgUwsajrU79iBEzexWuCTB0NmD Qs1wiHmVchcl9eHFdpGsNmc6gFjO92EX3T60VXnETRIdkyAr6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2+2yFK02rlAJ/62Qlq2kaqaHH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY1Yzg1YmMtM2QxMy0z MTJmLTljOTEtMTBkZTJhMzkzMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRlgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrkxJlxNXXcxqTe2ejESN2y5T8JZKa3Ye+bUPuo/A9p5gjC31DXQori SkG0w339IoErXdT9IFeuFDxouJL5tSjUuhiZoyQu3DNfhWmxiX/GVkAcM32KRFzY lGrUAP/VoP4ufLfXozl54Tp8jD0jfdfn1WYgjkJpWS9UGGlPHswJCfZhRlfuihYz cq2FhgT4T2Voa2CNb+Ape+lSSbyI1+dHQoNmoE0fvCtUUvT2cMzvgvDHVzQXTq2z JXSnl5oOjicN4o1vU/8ybM0/3Hvuq3plDSo9rrfqbsw5FlcisFo1xjiGP/HxJlrR WJPSU7qjT3LdX6Lgh6FTV9Z37LwAmA8= -----END CERTIFICATE-----Generated at Mon Apr 7 09:37:27 2025 by rpki-client