$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/95eebf6d-d077-352d-92fd-01a38addd17f.roa File: 95eebf6d-d077-352d-92fd-01a38addd17f.roa (raw, json) Hash identifier: LTwrHDxAKGq09BsZSPcavKk78VoBOmQVbkLPaKJcKfs= Subject key identifier: 58:97:2E:87:2A:37:C3:5B:04:75:5F:DD:26:F2:2E:3E:AF:6C:C0:2A Certificate issuer: /CN=8252d812-07cd-4870-b413-e08fb8355928 Certificate serial: 010D0C9F43285848A29B48B3B06FF502F4360A00 Authority key identifier: 22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/95eebf6d-d077-352d-92fd-01a38addd17f.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 36642 IP address blocks: 170.88.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:48:b3:b0:6f:f5:02:f4:36:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8252d812-07cd-4870-b413-e08fb8355928 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=86ed6d98-3d7a-46b1-b370-ff53128449e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:1c:0c:95:3a:63:23:9f:87:8b:d6:d5:f1: 2b:cb:ac:f4:71:f4:f5:7a:ce:36:47:5e:13:0b:72: d7:63:09:b3:0d:46:da:03:a6:e5:33:a8:fc:73:84: 32:e8:7d:79:01:e1:6f:1f:d0:0a:00:93:4c:01:8d: 67:d3:69:18:a0:ad:a5:b7:d2:99:67:b8:b7:fb:d7: b4:bc:94:59:cd:78:14:cf:0e:91:90:81:2e:6f:77: 24:be:bb:31:4d:d5:10:f0:3a:4f:85:c9:bf:1c:37: 64:36:ac:c0:29:ed:0c:ee:b1:39:3d:76:b3:90:be: e1:9f:e4:c0:26:90:08:fd:ed:c1:a3:20:6f:ec:68: e0:4c:7e:5f:49:ad:c9:ba:0e:a3:61:11:d7:43:9c: 94:2b:99:13:eb:1c:14:f2:ac:5b:86:f4:0b:4b:32: d7:3e:a6:3d:2e:65:98:c3:86:8d:89:06:0a:2d:80: f2:dc:b9:4c:87:b5:73:a6:50:13:23:9b:97:d7:49: 3a:48:5d:b3:6e:63:44:04:f7:22:76:77:6e:f6:4f: a0:bf:21:43:70:71:fc:77:d9:c9:11:8e:ad:df:6f: 3c:9f:ea:04:a5:29:f7:c4:15:0c:a1:e4:09:65:fc: c3:b5:3d:76:a2:28:88:71:4d:de:25:2a:87:c6:88: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:97:2E:87:2A:37:C3:5B:04:75:5F:DD:26:F2:2E:3E:AF:6C:C0:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/95eebf6d-d077-352d-92fd-01a38addd17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928/8252d812-07cd-4870-b413-e08fb8355928.crl X509v3 Authority Key Identifier: keyid:22:F6:B7:89:81:53:28:BF:20:D6:FF:E0:86:EC:A6:DC:6E:1E:F6:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8252d812-07cd-4870-b413-e08fb8355928.cer sbgp-ipAddrBlock: critical IPv4: 170.88.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:8b:3d:66:ec:65:7b:d9:8a:71:7f:2b:9b:88:e3:92:3e:49: a2:13:33:a5:c7:a9:fa:46:6b:97:b8:5f:20:38:5d:33:50:6b: ae:f3:ac:0b:0a:a1:fa:88:37:0d:d3:7a:05:8c:a1:f2:3f:94: 0e:97:de:fe:0d:59:de:ab:2b:6d:b7:65:d0:f9:65:18:cb:67: f8:46:cd:68:92:5b:53:d3:b4:92:0a:b1:bc:df:bb:1f:24:c3: f0:bd:be:aa:a3:0f:39:04:1a:38:db:38:93:fa:66:fc:31:8a: 43:24:0a:da:96:1b:cf:1b:24:c1:97:19:3c:25:02:e0:71:68: 3a:93:32:d7:d2:0b:27:eb:66:b6:18:b3:a3:ac:8c:7a:fe:79: 7f:d2:4d:2d:1d:5e:d7:9a:c2:34:70:c4:c2:0c:81:33:1d:32: 58:9c:1f:5a:9a:7d:c5:5b:59:3a:e5:39:68:9d:d9:79:5b:1b: f4:b8:9d:f4:63:1e:96:5b:28:b1:e6:ee:35:ad:cf:65:0d:79: d3:b3:78:7f:e0:41:83:57:38:a0:23:38:7f:b9:85:c3:5e:45: 7c:07:f8:98:41:d1:e4:cf:4e:ce:ab:6a:2f:c0:93:4c:c8:6a: 20:ef:27:f1:65:d4:04:8a:f4:59:cd:7f:94:20:be:cf:18:dd: ab:a3:2d:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0izsG/1AvQ2CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1MmQ4MTItMDdjZC00ODcwLWI0MTMtZTA4ZmI4MzU1 OTI4MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk ODZlZDZkOTgtM2Q3YS00NmIxLWIzNzAtZmY1MzEyODQ0OWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc8cDJU6YyOfh4vW1fEry6z0cfT1es42R14T C3LXYwmzDUbaA6blM6j8c4Qy6H15AeFvH9AKAJNMAY1n02kYoK2lt9KZZ7i3+9e0 vJRZzXgUzw6RkIEub3ckvrsxTdUQ8DpPhcm/HDdkNqzAKe0M7rE5PXazkL7hn+TA JpAI/e3BoyBv7GjgTH5fSa3Jug6jYRHXQ5yUK5kT6xwU8qxbhvQLSzLXPqY9LmWY w4aNiQYKLYDy3LlMh7VzplATI5uX10k6SF2zbmNEBPcidndu9k+gvyFDcHH8d9nJ EY6t3288n+oEpSn3xBUMoeQJZfzDtT12oiiIcU3eJSqHxoiQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiXLocqN8NbBHVf3SbyLj6vbMAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjUy ZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhmYjgzNTU5MjgvOTVlZWJmNmQtZDA3Ny0z NTJkLTkyZmQtMDFhMzhhZGRkMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODI1MmQ4MTItMDdjZC00ODcwLWI0 MTMtZTA4ZmI4MzU1OTI4LzgyNTJkODEyLTA3Y2QtNDg3MC1iNDEzLWUwOGZiODM1 NTkyOC5jcmwwHwYDVR0jBBgwFoAUIva3iYFTKL8g1v/ghuym3G4e9twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjUyZDgxMi0wN2NkLTQ4NzAtYjQxMy1lMDhm YjgzNTU5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlhTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqLPWbsZXvZinF/K5uI45I+SaITM6XHqfpGa5e4XyA4XTNQa67zrAsK ofqINw3TegWMofI/lA6X3v4NWd6rK223ZdD5ZRjLZ/hGzWiSW1PTtJIKsbzfux8k w/C9vqqjDzkEGjjbOJP6ZvwxikMkCtqWG88bJMGXGTwlAuBxaDqTMtfSCyfrZrYY s6OsjHr+eX/STS0dXteawjRwxMIMgTMdMlicH1qafcVbWTrlOWid2XlbG/S4nfRj HpZbKLHm7jWtz2UNedOzeH/gQYNXOKAjOH+5hcNeRXwH+JhB0eTPTs6rai/Ak0zI aiDvJ/Fl1ASK9FnNf5Qgvs8Y3aujLZ4= -----END CERTIFICATE-----Generated at Fri Mar 14 07:17:35 2025 by rpki-client