$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d428b4-8173-3982-9cdf-84e481c4fd24.roa File: f5d428b4-8173-3982-9cdf-84e481c4fd24.roa (raw, json) Hash identifier: 8so1YQEbGjGl8htwQpp9YU6zrfgbvS/+wFeF07A7Shw= Subject key identifier: 1C:71:C5:84:BB:CF:42:DD:F3:B1:10:DA:23:5A:52:47:C7:3C:AC:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848AF2B8D311B3A70989352AA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d428b4-8173-3982-9cdf-84e481c4fd24.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 33661 IP address blocks: 70.88.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:8d:31:1b:3a:70:98:93:52:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=b9ecfa81-3213-479c-884c-6208bbb75c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:45:9c:79:19:aa:51:42:5b:c9:b2:f6:ac: 5e:69:74:15:b3:b1:3f:fe:44:b2:c3:76:8e:4e:27: ec:b4:d3:8c:3c:f8:bc:ed:e5:08:e1:e5:95:19:3c: 27:80:14:73:6b:09:85:86:10:a2:8f:0e:25:af:88: bd:6d:c5:07:e4:d8:46:3d:a7:82:ce:5b:34:2e:2c: 14:56:6b:ac:16:49:ad:89:26:7c:3c:59:65:b7:46: d5:5a:2f:f6:8c:53:1d:3e:c4:ed:ef:c8:03:29:8a: 42:c1:c6:a8:64:2f:d0:33:b0:cb:38:13:e8:81:52: 99:2d:a9:4c:2f:f9:de:56:79:c5:92:4d:8a:1d:14: 7e:2f:bd:fe:d1:0a:5e:09:16:f3:c7:61:04:8c:d1: d3:68:c9:43:92:56:cf:43:00:75:a9:8d:2a:b0:23: c9:38:ec:0f:fd:fb:e3:bc:77:5e:26:fc:fc:a6:e0: 70:47:27:46:24:41:ea:d9:53:28:50:22:18:31:e3: bf:17:01:28:06:18:b6:fa:73:6c:37:e9:06:a4:2a: 96:54:8a:30:d3:5a:7a:06:a2:9e:2e:a4:3e:ae:f4: c8:dd:de:10:f5:2d:16:f5:8a:71:3d:3b:4f:19:7b: a5:67:38:29:c4:74:76:5c:4d:14:5f:76:ee:03:fc: 23:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:71:C5:84:BB:CF:42:DD:F3:B1:10:DA:23:5A:52:47:C7:3C:AC:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d428b4-8173-3982-9cdf-84e481c4fd24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:3d:f0:4c:c4:28:d5:9a:74:3e:70:1b:c3:dc:8a:31:6b:d6: eb:1a:3a:e4:f2:58:6b:c0:d2:1b:6c:e1:db:0f:22:20:6c:18: 7b:40:1f:14:67:83:fa:e6:80:91:9e:9f:64:51:60:aa:bc:0c: 4b:b7:63:8e:fa:93:21:99:7c:fb:d9:ec:5f:66:a4:13:53:19: e6:dc:5e:d2:93:a1:b2:6a:dd:87:49:90:2e:2c:f2:6e:9d:ab: 54:db:c9:40:f5:05:99:dc:b2:8b:a2:09:73:fe:d5:a3:c2:83: e1:71:36:2a:0a:77:5b:97:ca:0c:06:f0:06:7d:67:2f:ec:fb: ee:d0:9f:5f:3d:ca:af:9f:69:90:4f:75:82:f9:7d:41:77:c8: a9:6b:d5:f1:03:26:f1:00:1e:d4:3b:7d:94:b8:77:7e:f2:3a: a0:69:c0:ac:15:55:66:ec:e3:93:7d:0e:27:f9:04:3a:bd:42: fc:64:36:46:f1:b0:94:0a:c7:6c:55:3a:a7:85:cb:ca:df:ad: 92:c3:00:31:5d:ca:5d:54:4f:93:f7:4b:81:14:c2:7e:09:7e: 58:ab:07:07:3b:78:45:15:7f:33:9f:49:a0:fb:84:05:7a:cc: 0f:ac:d8:04:1a:3b:3f:39:f4:b8:39:9b:df:a0:33:ad:db:ee: 66:ed:81:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK40xGzpwmJNSqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YjllY2ZhODEtMzIxMy00NzljLTg4NGMtNjIwOGJiYjc1YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtilFnHkZqlFCW8my9qxeaXQVs7E//kSyw3aO TifstNOMPPi87eUI4eWVGTwngBRzawmFhhCijw4lr4i9bcUH5NhGPaeCzls0LiwU VmusFkmtiSZ8PFllt0bVWi/2jFMdPsTt78gDKYpCwcaoZC/QM7DLOBPogVKZLalM L/neVnnFkk2KHRR+L73+0QpeCRbzx2EEjNHTaMlDklbPQwB1qY0qsCPJOOwP/fvj vHdeJvz8puBwRydGJEHq2VMoUCIYMeO/FwEoBhi2+nNsN+kGpCqWVIow01p6BqKe LqQ+rvTI3d4Q9S0W9YpxPTtPGXulZzgpxHR2XE0UX3buA/wjowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxxxYS7z0Ld87EQ2iNaUkfHPKwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjVkNDI4YjQtODE3My0z OTgyLTljZGYtODRlNDgxYzRmZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY98EzEKNWadD5wG8PcijFr1usaOuTyWGvA0hts4dsPIiBsGHtAHxRn g/rmgJGen2RRYKq8DEu3Y476kyGZfPvZ7F9mpBNTGebcXtKTobJq3YdJkC4s8m6d q1TbyUD1BZncsouiCXP+1aPCg+FxNioKd1uXygwG8AZ9Zy/s++7Qn189yq+faZBP dYL5fUF3yKlr1fEDJvEAHtQ7fZS4d37yOqBpwKwVVWbs45N9Dif5BDq9QvxkNkbx sJQKx2xVOqeFy8rfrZLDADFdyl1UT5P3S4EUwn4JflirBwc7eEUVfzOfSaD7hAV6 zA+s2AQaOz859Lg5m9+gM63b7mbtgYQ= -----END CERTIFICATE-----Generated at Mon Apr 7 06:29:47 2025 by rpki-client