$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa File: 83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa (raw, json) Hash identifier: /p3n9YJke3NoMkjMIxdZes0d5HQYl57LYCkQQI0Uk3o= Subject key identifier: 6A:0E:DC:E5:45:55:76:EE:78:ED:B2:11:E2:3D:42:94:9C:02:F4:93 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DEF9307A3ECEC6C6745A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 40306 IP address blocks: 70.41.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:ef:93:07:a3:ec:ec:6c:67:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=cd0db19f-192c-4fe2-86a4-790ff0854fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:06:17:ab:ff:2f:ff:d7:dc:8f:07:bd:e0:61: f7:84:a6:53:59:ff:9e:87:c1:77:46:2f:68:dc:10: 87:95:ac:79:c9:52:ab:d9:ce:c7:01:c0:b5:94:b2: 3f:95:99:55:1e:cc:e2:99:c3:7b:a6:08:46:f0:40: 94:aa:b7:31:50:bb:36:5a:1f:a0:5e:65:16:e7:26: ec:e1:0c:74:a2:44:e0:fa:c7:a9:b5:73:9b:6a:54: ea:75:86:72:01:2d:3c:43:db:83:75:be:35:60:3c: 5a:a6:8e:4f:5c:90:5a:67:15:c6:a8:74:4e:9b:b1: c2:32:53:2d:de:ed:c4:b5:f2:30:f3:c1:7b:5c:9a: 48:67:bd:a8:b8:1b:76:d6:26:d4:72:7e:c6:95:55: 77:09:71:b3:8b:1c:fe:91:84:d6:85:02:bd:fa:f2: 78:ea:4b:c2:fa:ba:67:63:75:c0:23:b7:e5:6b:ea: 4a:f8:54:94:08:58:c6:19:af:a8:3f:7d:d8:95:00: c5:68:4f:fd:67:36:b1:6e:5e:9b:0e:be:8b:c0:98: 65:45:be:3f:12:66:88:55:4e:99:41:bd:c1:6c:17: fd:fb:49:8c:68:b2:af:71:0b:cf:c4:58:4e:f7:b0: d9:e5:10:d9:73:a6:04:db:08:ed:c7:4b:08:20:67: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0E:DC:E5:45:55:76:EE:78:ED:B2:11:E2:3D:42:94:9C:02:F4:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:17:4b:65:d8:72:37:ed:1c:bb:17:70:ab:70:a9:33:4d:93: 7a:08:f9:13:05:d3:26:af:92:fa:0e:1e:18:26:2e:21:c7:3d: 39:e2:71:84:5b:16:ca:d4:6d:f1:3e:f8:ac:49:f9:31:49:d4: 8b:ca:be:ab:4d:00:98:65:f9:2e:49:63:47:fe:67:a6:a5:53: 09:f1:c7:b6:5e:1a:1e:93:79:56:1c:f3:25:8f:32:1f:dd:4d: 2d:8b:2d:2f:75:82:1e:14:b9:7f:20:6e:4e:98:d1:66:7a:88: 13:15:40:cf:e9:ff:9e:c6:f8:b4:f3:55:d7:e5:bb:37:77:ab: ff:e2:3b:3c:86:de:dd:92:6f:59:b7:55:44:18:29:48:16:c4: aa:77:d5:08:13:e9:3b:4e:23:df:3c:97:00:95:14:63:d6:b6: b1:2e:98:7f:44:6f:f3:ec:1d:20:2e:b4:9d:e2:2a:9c:c4:a3: af:b2:0a:6f:0c:44:ba:59:07:1f:31:d8:d2:ba:4a:4f:81:59: 21:83:f0:a2:41:ee:8a:3c:9d:38:67:de:5c:93:50:f4:8b:b4: 1f:06:df:5a:45:8e:c3:bd:a6:ce:4c:5b:bd:1e:1f:32:2d:cc: e3:06:9e:57:14:0c:42:da:98:cb:2a:51:34:76:ae:86:7b:0b: 2e:24:2d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPe+TB6Ps7GxnRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk Y2QwZGIxOWYtMTkyYy00ZmUyLTg2YTQtNzkwZmYwODU0ZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QYXq/8v/9fcjwe94GH3hKZTWf+eh8F3Ri9o 3BCHlax5yVKr2c7HAcC1lLI/lZlVHszimcN7pghG8ECUqrcxULs2Wh+gXmUW5ybs 4Qx0okTg+septXObalTqdYZyAS08Q9uDdb41YDxapo5PXJBaZxXGqHROm7HCMlMt 3u3EtfIw88F7XJpIZ72ouBt21ibUcn7GlVV3CXGzixz+kYTWhQK9+vJ46kvC+rpn Y3XAI7fla+pK+FSUCFjGGa+oP33YlQDFaE/9Zzaxbl6bDr6LwJhlRb4/EmaIVU6Z Qb3BbBf9+0mMaLKvcQvPxFhO97DZ5RDZc6YE2wjtx0sIIGfuwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoO3OVFVXbueO2yEeI9QpScAvSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODNlMGYxNWMtMmRkMy0z MzQ0LWI3MjQtNDQ4N2U2YTdkNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQXS2XYcjftHLsXcKtwqTNNk3oI+RMF0yavkvoOHhgmLiHHPTnicYRb FsrUbfE++KxJ+TFJ1IvKvqtNAJhl+S5JY0f+Z6alUwnxx7ZeGh6TeVYc8yWPMh/d TS2LLS91gh4UuX8gbk6Y0WZ6iBMVQM/p/57G+LTzVdfluzd3q//iOzyG3t2Sb1m3 VUQYKUgWxKp31QgT6TtOI988lwCVFGPWtrEumH9Eb/PsHSAutJ3iKpzEo6+yCm8M RLpZBx8x2NK6Sk+BWSGD8KJB7oo8nThn3lyTUPSLtB8G31pFjsO9ps5MW70eHzIt zOMGnlcUDELamMsqUTR2roZ7Cy4kLXQ= -----END CERTIFICATE-----Generated at Sun May 19 01:47:35 2024 by rpki-client on console-fra.rpki-client.org