$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a2826c5c-71cd-305b-9a91-6e0436a57441.roa File: a2826c5c-71cd-305b-9a91-6e0436a57441.roa (raw, json) Hash identifier: D9reSGv0EpcNjFHKmL93Q9r8xDnLIcu+c6mgyc1Qsow= Subject key identifier: 8E:92:45:BE:E2:B9:AD:C9:5D:A2:DF:C1:DF:1A:DD:8C:95:56:37:BF Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Certificate serial: 010D0C9F432858486695C1388771FB05E6D86080 Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a2826c5c-71cd-305b-9a91-6e0436a57441.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 3695 IP address blocks: 70.36.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:c1:38:87:71:fb:05:e6:d8:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520 Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=0cef0c52-45fc-4c34-85ab-58d3186d4c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:1c:c6:fa:f4:74:82:e8:bd:84:be:30:67: 1a:86:f6:b9:fb:23:72:a6:41:49:a8:7b:30:8c:b6: a3:d7:db:3f:90:1d:65:8e:ea:a0:32:57:1c:c3:6e: 5b:fe:51:b0:62:73:ff:4b:96:97:5d:39:12:6e:5e: e4:ce:3e:73:00:c8:53:d3:c5:f5:76:65:53:16:cd: 31:24:69:d1:d4:1e:4b:c2:89:39:c0:69:f6:c5:84: 6b:6d:16:66:fe:a8:35:80:64:28:70:47:2b:99:06: 82:a8:60:b0:96:46:78:b4:bc:92:0a:ad:e4:9d:bc: 91:48:fd:4e:4a:fc:1b:b0:dd:01:d8:2b:07:af:6c: d2:95:ce:dd:86:be:6d:c7:d1:67:1f:90:64:ca:f5: 92:8e:92:5a:aa:c2:64:92:81:97:60:d0:19:54:ce: a0:ed:c6:5f:67:bc:b3:66:77:42:0d:4e:f5:89:53: 2c:73:67:fb:41:b2:41:e0:65:cc:04:eb:62:d8:9f: ec:83:ef:f9:ac:dc:6a:eb:0d:51:71:b2:3a:e0:10: 93:08:8b:ad:46:0d:63:51:44:72:37:ed:5f:63:61: cb:68:5e:50:61:d0:b2:12:87:08:f8:7f:26:bd:df: 0a:51:48:c9:58:b3:af:3e:08:15:c3:f8:ae:b7:91: 1a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:92:45:BE:E2:B9:AD:C9:5D:A2:DF:C1:DF:1A:DD:8C:95:56:37:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a2826c5c-71cd-305b-9a91-6e0436a57441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl X509v3 Authority Key Identifier: keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer sbgp-ipAddrBlock: critical IPv4: 70.36.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:86:a7:30:f5:2b:25:26:0c:3a:a9:2c:7c:82:c7:a2:9b:5f: 37:7c:c1:82:8c:e3:38:be:8d:70:3f:c0:a4:d9:76:06:74:a6: f2:c1:73:47:c8:1e:1a:80:3b:d4:09:ea:21:55:10:c8:38:d2: 08:02:ab:7d:6e:63:cd:b1:3d:74:14:f1:d9:3e:8f:bc:8a:6b: b7:1e:fa:73:ca:0f:ff:7e:fd:20:2c:02:72:b4:9c:c7:3e:2e: 3e:14:52:11:7d:7b:aa:3c:02:b3:90:1e:73:62:1b:17:b1:ce: 88:ab:98:d1:ea:5b:e4:55:c8:71:46:a4:9d:80:e8:30:d3:c8: 9a:2a:f3:ae:0b:6a:96:ef:b7:da:8e:6a:f6:04:51:be:12:4b: 88:44:c7:e2:db:5f:ef:13:42:b4:f2:ef:5b:6f:12:21:c7:32: 55:db:76:e1:82:2e:b1:cf:7e:a1:e6:87:e4:29:63:18:5d:0b: 31:33:fa:8d:e4:6c:ec:05:e6:1f:db:ec:27:72:22:30:b0:ed: 0b:5c:fe:6b:c8:6f:81:d5:d5:0d:07:3a:5a:3d:74:b5:a1:5b: e3:be:1c:be:7f:e4:36:bf:24:1a:83:7f:57:c8:f4:5a:37:61: f7:1e:35:ab:31:cb:0e:00:01:40:47:81:d4:6b:6b:6e:5f:c0: c1:d4:7f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlcE4h3H7BebYYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi NTIwMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk MGNlZjBjNTItNDVmYy00YzM0LTg1YWItNThkMzE4NmQ0YzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7scxvr0dILovYS+MGcahva5+yNypkFJqHsw jLaj19s/kB1ljuqgMlccw25b/lGwYnP/S5aXXTkSbl7kzj5zAMhT08X1dmVTFs0x JGnR1B5Lwok5wGn2xYRrbRZm/qg1gGQocEcrmQaCqGCwlkZ4tLySCq3knbyRSP1O SvwbsN0B2CsHr2zSlc7dhr5tx9FnH5BkyvWSjpJaqsJkkoGXYNAZVM6g7cZfZ7yz ZndCDU71iVMsc2f7QbJB4GXMBOti2J/sg+/5rNxq6w1RcbI64BCTCIutRg1jUURy N+1fY2HLaF5QYdCyEocI+H8mvd8KUUjJWLOvPggVw/iut5EaXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6SRb7iua3JXaLfwd8a3YyVVje/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvYTI4MjZjNWMtNzFjZC0z MDViLTlhOTEtNmUwNDM2YTU3NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0 MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSGpzD1KyUmDDqpLHyCx6KbXzd8wYKM4zi+jXA/wKTZdgZ0pvLBc0fI HhqAO9QJ6iFVEMg40ggCq31uY82xPXQU8dk+j7yKa7ce+nPKD/9+/SAsAnK0nMc+ Lj4UUhF9e6o8ArOQHnNiGxexzoirmNHqW+RVyHFGpJ2A6DDTyJoq864Lapbvt9qO avYEUb4SS4hEx+LbX+8TQrTy71tvEiHHMlXbduGCLrHPfqHmh+QpYxhdCzEz+o3k bOwF5h/b7CdyIjCw7Qtc/mvIb4HV1Q0HOlo9dLWhW+O+HL5/5Da/JBqDf1fI9Fo3 YfceNasxyw4AAUBHgdRra25fwMHUf5A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:34 2025 by rpki-client