$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04f73d22-93a8-3bff-9132-cc7fcbf665e1.roa File: 04f73d22-93a8-3bff-9132-cc7fcbf665e1.roa (raw, json) Hash identifier: rtXz98ygfiWSPMZOOnc4rgOaji39Jv4T37k3weqopaQ= Subject key identifier: CA:03:E8:59:36:5A:83:EC:30:B3:66:8A:79:B1:06:2D:34:04:52:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58105DDC101C3C0A3FEF9C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04f73d22-93a8-3bff-9132-cc7fcbf665e1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:05:dd:c1:01:c3:c0:a3:fe:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5b62a5da-f04a-4cf9-af3e-219a0e1e2a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:e8:9b:5e:4d:7c:db:3a:f6:d9:78:5d:cf: 2e:91:7a:ef:be:24:08:6b:e8:c6:2c:c3:eb:b4:54: 68:49:29:5f:3b:de:87:97:8b:e3:86:9d:ba:49:51: 8a:3c:08:36:82:d2:43:43:c1:a9:7f:14:53:1a:2c: ad:26:c2:4f:aa:b5:8c:83:9d:c8:ee:b2:ca:20:64: f6:42:a0:36:89:b0:64:81:e2:c0:16:85:b5:06:3e: 0a:45:47:f5:96:4c:22:db:ab:dd:e7:f3:5e:54:89: b1:37:12:99:fd:31:62:f3:3e:90:69:eb:f5:00:85: cc:76:f8:22:31:ac:87:6e:12:59:e3:0c:c5:7e:5c: 6b:04:c5:bb:c7:ba:f5:05:ea:c1:8e:8e:f8:92:ef: 6a:a7:34:b1:c6:77:62:47:3e:13:50:bc:d6:d7:6e: cc:5e:7f:08:2b:ec:8d:38:54:46:e2:cc:8d:70:3e: 2e:6b:8e:3e:8d:de:da:c8:e1:72:19:81:33:a5:38: c0:71:74:b3:d2:69:b7:1a:53:11:32:86:7d:53:ab: 7d:03:b9:e9:4c:84:95:88:3c:a9:54:79:9e:9a:17: e1:82:2b:f3:14:52:2d:52:42:c7:f7:00:c4:99:5f: bb:f0:13:d9:a1:6b:16:c1:30:23:52:9c:4e:d3:ad: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:03:E8:59:36:5A:83:EC:30:B3:66:8A:79:B1:06:2D:34:04:52:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04f73d22-93a8-3bff-9132-cc7fcbf665e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:20:1c:19:3b:c4:91:a1:f0:6b:c2:69:64:26:3d:f5:98:db: 3a:bd:6b:57:8e:eb:ac:f1:27:0d:bf:35:94:bc:87:1b:d3:d0: f7:88:92:53:64:01:05:3d:67:0f:8d:72:a3:70:89:12:80:a8: 67:06:91:5c:c7:56:63:7a:5c:e7:c4:f8:eb:96:09:f2:29:b0: 5f:fe:aa:92:28:23:3b:74:ed:be:51:23:ea:92:4a:f4:de:fb: 10:92:0b:f3:2a:59:c1:73:b5:89:9c:8d:b0:21:e9:87:02:51: 6d:83:b8:4e:b0:d3:ea:10:07:d0:70:24:da:97:02:4e:19:50: a9:df:60:5a:37:70:32:f7:2b:89:4c:31:12:f3:aa:7a:f9:b0: f9:d3:b2:77:e3:94:af:28:3d:af:fc:7c:cc:d6:9a:db:68:53: e2:c1:c4:7e:f7:42:c9:14:a4:a4:a3:76:f1:1e:ff:b4:a3:ac: 7b:19:8b:95:56:6a:44:55:bb:92:f6:02:fe:b4:38:90:38:3f: 9e:cf:9d:e5:2b:c9:6a:8a:c2:80:0a:3a:c1:69:07:09:71:0b: 86:63:e4:f0:6f:f5:21:b1:8e:64:af:c1:19:6a:8a:31:b2:b0: 88:54:5e:88:23:35:6d:2c:70:23:6f:9c:0a:53:82:39:46:bf: b9:10:9b:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQXdwQHDwKP++cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWI2MmE1ZGEtZjA0YS00Y2Y5LWFmM2UtMjE5YTBlMWUyYTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Dom15NfNs69tl4Xc8ukXrvviQIa+jGLMPr tFRoSSlfO96Hl4vjhp26SVGKPAg2gtJDQ8GpfxRTGiytJsJPqrWMg53I7rLKIGT2 QqA2ibBkgeLAFoW1Bj4KRUf1lkwi26vd5/NeVImxNxKZ/TFi8z6Qaev1AIXMdvgi MayHbhJZ4wzFflxrBMW7x7r1BerBjo74ku9qpzSxxndiRz4TULzW127MXn8IK+yN OFRG4syNcD4ua44+jd7ayOFyGYEzpTjAcXSz0mm3GlMRMoZ9U6t9A7npTISViDyp VHmemhfhgivzFFItUkLH9wDEmV+78BPZoWsWwTAjUpxO062pBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoD6Fk2WoPsMLNminmxBi00BFIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRmNzNkMjItOTNhOC0z YmZmLTkxMzItY2M3ZmNiZjY2NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIgHBk7xJGh8GvCaWQmPfWY2zq9a1eO66zxJw2/NZS8hxvT0PeIklNk AQU9Zw+NcqNwiRKAqGcGkVzHVmN6XOfE+OuWCfIpsF/+qpIoIzt07b5RI+qSSvTe +xCSC/MqWcFztYmcjbAh6YcCUW2DuE6w0+oQB9BwJNqXAk4ZUKnfYFo3cDL3K4lM MRLzqnr5sPnTsnfjlK8oPa/8fMzWmttoU+LBxH73QskUpKSjdvEe/7SjrHsZi5VW akRVu5L2Av60OJA4P57PneUryWqKwoAKOsFpBwlxC4Zj5PBv9SGxjmSvwRlqijGy sIhUXogjNW0scCNvnApTgjlGv7kQm7c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:46 2025 by rpki-client