$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5ab34f9-410c-317a-9ae5-ec5a583eed14.roa File: c5ab34f9-410c-317a-9ae5-ec5a583eed14.roa (raw, json) Hash identifier: yrO22KzpRa7ps8NCXtBZFOX3rPMtcMXNWOiGpd41v7g= Subject key identifier: E9:A0:5D:2F:FB:BE:2A:4D:C1:29:8C:13:15:49:DE:7B:28:13:F3:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D9814340260FB31DD4300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5ab34f9-410c-317a-9ae5-ec5a583eed14.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33668 IP address blocks: 69.137.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:98:14:34:02:60:fb:31:dd:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=87288d8b-d6d7-4263-8790-36f5cb8ed79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:d5:84:b6:22:da:32:4e:76:01:32:c5:ed: a5:68:40:bb:5a:35:98:db:64:84:06:e9:c4:06:bd: 6b:6a:77:f4:dc:b7:f4:a0:c9:46:4a:0c:94:76:dc: e6:8b:db:6d:fe:7b:77:7a:51:64:8f:65:39:f3:5d: 39:34:f2:2f:73:01:85:ea:ab:91:41:3c:c7:fe:f7: 7d:3d:39:fa:45:8c:5f:04:5d:18:87:5e:94:cb:44: bf:8e:ac:0c:81:43:64:99:dd:4f:85:8a:68:f9:2b: c9:6d:91:48:75:fb:38:fc:19:15:02:20:a7:4f:99: c2:db:48:a5:01:10:1a:09:19:5e:39:a0:62:b7:e2: e7:88:67:81:37:d2:7e:63:e0:fe:b3:4d:02:83:01: 38:cd:59:f3:b2:88:8c:a2:57:ac:06:55:db:66:ab: 28:ec:0c:39:7a:7a:23:59:97:c5:f6:ee:9a:15:8d: 36:29:11:66:b5:02:cd:11:bd:8d:77:a5:a3:07:91: 44:2f:b0:c8:87:9f:51:97:76:29:b2:fb:a0:80:e4: 0b:ac:51:aa:cd:6f:fb:e4:70:a9:c2:0a:ae:3e:38: 26:70:49:d5:24:7e:71:bd:0a:96:28:44:30:0b:3a: cb:04:0f:38:01:cf:8c:05:09:33:18:5d:2d:04:b9: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A0:5D:2F:FB:BE:2A:4D:C1:29:8C:13:15:49:DE:7B:28:13:F3:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5ab34f9-410c-317a-9ae5-ec5a583eed14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.137.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:6a:fe:ad:9d:a3:0d:28:73:05:b0:05:c4:0b:c7:bd:ab:f0: 51:21:d5:52:50:c6:1b:b7:22:ca:49:21:a3:c3:b1:1a:6b:4d: 84:cc:7b:38:92:64:09:47:48:d3:bf:04:0b:b5:f2:75:3f:15: 86:ca:48:e2:8a:05:ca:66:6d:ea:c6:1d:69:3d:40:88:ff:ef: ae:2e:b7:f1:7f:9c:43:2a:73:b3:af:0b:bc:3f:83:68:83:71: 42:e1:77:c5:89:57:bf:b5:15:80:18:7a:78:96:79:10:1c:df: 64:3b:b2:b7:33:80:c2:88:ea:ac:ac:ca:f4:3f:4a:af:ac:17: 3c:d1:ae:43:eb:83:0f:80:80:d9:c4:ce:67:fc:59:ad:18:9c: ff:68:d6:dd:77:5e:5e:f7:2e:c3:45:2c:75:74:32:77:80:5c: 91:c5:67:af:db:38:4e:58:af:76:c8:80:2c:f1:11:05:fd:23: 90:a1:c6:a6:57:3d:d5:27:ad:9c:25:11:dd:bd:23:0a:8c:78: 83:3e:90:0f:69:fc:fe:9a:28:48:9b:40:7c:67:e2:e4:e4:8c: d5:a1:40:21:10:c5:6a:18:60:70:ce:c1:c8:9f:20:5a:80:c9: c0:eb:fc:15:c3:0c:36:10:a1:03:86:22:13:f5:3f:f6:45:2b: 30:7c:19:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebZgUNAJg+zHdQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ODcyODhkOGItZDZkNy00MjYzLTg3OTAtMzZmNWNiOGVkNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0vVhLYi2jJOdgEyxe2laEC7WjWY22SEBunE Br1ranf03Lf0oMlGSgyUdtzmi9tt/nt3elFkj2U58105NPIvcwGF6quRQTzH/vd9 PTn6RYxfBF0Yh16Uy0S/jqwMgUNkmd1PhYpo+SvJbZFIdfs4/BkVAiCnT5nC20il ARAaCRleOaBit+LniGeBN9J+Y+D+s00CgwE4zVnzsoiMolesBlXbZqso7Aw5enoj WZfF9u6aFY02KRFmtQLNEb2Nd6WjB5FEL7DIh59Rl3YpsvuggOQLrFGqzW/75HCp wgquPjgmcEnVJH5xvQqWKEQwCzrLBA84Ac+MBQkzGF0tBLnSpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmgXS/7vipNwSmMExVJ3nsoE/OWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzVhYjM0ZjktNDEwYy0z MTdhLTlhZTUtZWM1YTU4M2VlZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERYnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRq/q2dow0ocwWwBcQLx72r8FEh1VJQxhu3IspJIaPDsRprTYTMeziS ZAlHSNO/BAu18nU/FYbKSOKKBcpmberGHWk9QIj/764ut/F/nEMqc7OvC7w/g2iD cULhd8WJV7+1FYAYeniWeRAc32Q7srczgMKI6qysyvQ/Sq+sFzzRrkPrgw+AgNnE zmf8Wa0YnP9o1t13Xl73LsNFLHV0MneAXJHFZ6/bOE5Yr3bIgCzxEQX9I5ChxqZX PdUnrZwlEd29IwqMeIM+kA9p/P6aKEibQHxn4uTkjNWhQCEQxWoYYHDOwcifIFqA ycDr/BXDDDYQoQOGIhP1P/ZFKzB8Gbg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:20:29 2025 by rpki-client