$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10f53ca9-5beb-3603-b596-d6e2db88f557.roa File: 10f53ca9-5beb-3603-b596-d6e2db88f557.roa (raw, json) Hash identifier: tGazIxTdR7aocmaRCvhhm4NKdG7qmvD5+W2d91tuH0o= Subject key identifier: 0B:1F:08:96:2B:DE:33:12:A4:72:73:8A:72:BA:D6:C2:27:6E:B5:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6D2C3D9C9310EDAA089A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10f53ca9-5beb-3603-b596-d6e2db88f557.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7922 IP address blocks: 70.88.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:d2:c3:d9:c9:31:0e:da:a0:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=945fb3b4-44c3-4bb8-9bd1-053394389257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:ea:56:a2:48:34:82:cc:fd:ad:7d:a3:a6: 1e:c8:63:e1:c7:3c:0d:bd:a2:f3:79:6a:7f:f0:62: 65:71:25:ce:7c:49:d0:55:be:50:c7:97:7b:62:04: 1b:3f:f1:0a:0e:9e:9b:72:1f:19:39:33:7b:dd:d7: f0:7a:3b:80:94:8e:36:38:91:f6:aa:a2:d5:b5:b9: 1a:b1:c5:06:ef:80:8a:81:c3:0d:51:ab:88:9e:88: 2a:ea:13:bd:98:96:1f:9b:50:51:21:4e:af:0d:50: d2:7b:80:e4:b0:db:86:db:21:c9:78:20:ff:f4:1d: 7c:ce:04:15:90:58:bf:c1:0f:50:a1:16:dd:95:81: 40:03:05:16:c6:12:fa:9d:78:71:e0:62:d8:52:fa: 23:a0:4b:f9:61:04:e1:05:59:20:a5:56:20:2b:48: 3a:57:94:a8:dd:2e:fa:0d:d1:ab:57:4c:74:b2:49: f6:15:7c:23:7a:ef:74:44:fd:fc:66:e3:93:9a:f9: c3:dc:39:ab:74:f3:d0:c6:4b:fa:ae:b0:b4:1f:a4: e0:10:7d:27:e2:3b:f6:cd:ea:67:2c:e3:2c:d1:83: d4:19:c8:8b:37:fb:a4:86:3a:e2:d7:c6:62:c5:96: da:76:69:0b:dc:bb:c7:b6:59:36:43:f1:6e:90:e7: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:08:96:2B:DE:33:12:A4:72:73:8A:72:BA:D6:C2:27:6E:B5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10f53ca9-5beb-3603-b596-d6e2db88f557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.88.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d2:57:dd:bf:d4:42:71:35:9f:d3:2a:89:dd:3b:1c:e8:2a: cf:8e:43:ca:af:2f:5b:ce:e9:5c:92:06:33:96:61:2b:e4:f1: 28:17:b4:04:2f:20:f9:12:85:a5:1e:91:64:7e:fc:f9:6d:3f: 4a:e4:3a:fe:0f:ef:f3:f5:1c:45:38:4e:78:55:10:18:65:52: e2:31:0a:f6:d8:d2:3c:1c:3b:36:62:90:a4:e6:0c:06:f1:a2: 67:90:47:57:b7:2c:e0:38:c1:62:85:bc:34:36:f9:11:96:cd: f5:53:d5:02:17:d8:e6:01:f8:07:98:51:1a:00:6b:68:93:ee: 16:9b:a3:f1:a6:86:0b:8b:22:02:6b:99:1e:e1:35:fe:49:98: 4f:1a:6a:3b:46:26:df:cc:ab:5e:1d:68:72:dc:b1:dc:b4:22: 8a:a0:f7:bf:ec:40:9c:a6:19:3a:36:52:e9:78:d5:96:11:ba: 41:3e:d5:4f:2f:06:c8:dc:78:0b:80:30:d4:80:9a:15:ae:b8: 94:2a:ec:5d:a9:29:88:ab:10:ea:76:30:ac:d6:00:9d:5e:a7: 7b:58:e6:d2:27:f9:89:2d:5e:cf:3c:eb:20:2c:dc:52:95:22: bb:12:58:9b:af:26:1c:a4:25:6c:24:27:bd:8b:33:d2:6e:54: d2:0c:57:d0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEl9ptLD2ckxDtqgiaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTQ1ZmIzYjQtNDRjMy00YmI4LTliZDEtMDUzMzk0Mzg5MjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZvqVqJINILM/a19o6YeyGPhxzwNvaLzeWp/ 8GJlcSXOfEnQVb5Qx5d7YgQbP/EKDp6bch8ZOTN73dfwejuAlI42OJH2qqLVtbka scUG74CKgcMNUauInogq6hO9mJYfm1BRIU6vDVDSe4DksNuG2yHJeCD/9B18zgQV kFi/wQ9QoRbdlYFAAwUWxhL6nXhx4GLYUvojoEv5YQThBVkgpVYgK0g6V5So3S76 DdGrV0x0skn2FXwjeu90RP38ZuOTmvnD3DmrdPPQxkv6rrC0H6TgEH0n4jv2zepn LOMs0YPUGciLN/ukhjri18ZixZbadmkL3LvHtlk2Q/FukOe+mwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAsfCJYr3jMSpHJzinK61sInbrVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTBmNTNjYTktNWJlYi0z NjAzLWI1OTYtZDZlMmRiODhmNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRlgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAddJX3b/UQnE1n9Mqid07HOgqz45Dyq8vW87pXJIGM5ZhK+TxKBe0BC8g +RKFpR6RZH78+W0/SuQ6/g/v8/UcRThOeFUQGGVS4jEK9tjSPBw7NmKQpOYMBvGi Z5BHV7cs4DjBYoW8NDb5EZbN9VPVAhfY5gH4B5hRGgBraJPuFpuj8aaGC4siAmuZ HuE1/kmYTxpqO0Ym38yrXh1octyx3LQiiqD3v+xAnKYZOjZS6XjVlhG6QT7VTy8G yNx4C4Aw1ICaFa64lCrsXakpiKsQ6nYwrNYAnV6ne1jm0if5iS1ezzzrICzcUpUi uxJYm68mHKQlbCQnvYsz0m5U0gxX0A== -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:56 2025 by rpki-client