$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09682f4b-3cbf-3550-9004-0ba68aaf31a1.roa File: 09682f4b-3cbf-3550-9004-0ba68aaf31a1.roa (raw, json) Hash identifier: aNxk6fqudo4g8GkdzKr34N3Hf+8XYwLgB5C0tEAAm0Q= Subject key identifier: 61:CC:EE:3D:83:17:B3:57:CD:EA:52:1F:CC:36:DF:BA:4A:D6:A6:B5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581992ADFB78311CC73C300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09682f4b-3cbf-3550-9004-0ba68aaf31a1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:99:2a:df:b7:83:11:cc:73:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=243714f0-4b0d-4edb-938a-77f7d583ac4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:29:b4:c4:7f:7f:a8:7a:11:9d:14:cd:d2:7e: cc:44:18:fe:9d:95:0c:3c:09:64:50:ea:3b:4a:35: 5f:b5:33:28:cb:f5:ee:cf:28:48:c6:b6:e6:df:36: 28:62:07:03:bf:ed:0f:1d:89:81:1b:d9:95:21:d1: 9b:d6:69:2f:eb:09:ae:13:55:dd:05:93:7f:c6:87: a1:c9:33:4b:1d:e6:e2:a0:91:53:0a:64:86:f6:ae: e3:8d:0c:a9:c2:3f:5c:bf:58:d6:c3:39:ac:1b:4f: 1a:04:80:40:7f:b7:0c:12:88:33:f9:1f:67:33:63: 09:c9:b4:30:d7:7e:b8:99:7b:45:5a:2a:1f:2f:29: 65:0c:aa:17:d6:fb:28:01:b5:99:60:42:b0:4f:34: f5:b6:b9:c5:30:70:d6:8a:1c:be:88:35:1a:2e:84: 94:d4:b3:06:40:23:7f:b6:52:09:d6:d4:da:7b:95: 76:ff:b6:7c:18:11:b3:96:32:d0:1a:96:41:4a:df: 2e:16:3f:6b:8d:16:0a:90:8e:dd:93:05:96:67:e7: 87:bb:7f:5a:0e:1b:43:cf:db:28:90:b6:cb:c1:11: c5:87:96:09:f3:d4:23:4f:fc:fb:dc:77:3e:45:8a: 5d:fe:07:9b:36:f7:38:9c:f0:c5:3b:78:3d:57:b4: 1b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CC:EE:3D:83:17:B3:57:CD:EA:52:1F:CC:36:DF:BA:4A:D6:A6:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09682f4b-3cbf-3550-9004-0ba68aaf31a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:53:c9:72:93:cd:2f:a9:b9:c7:fb:87:5f:0d:df:41:1a:b3: 2e:1e:f6:7b:35:ad:86:47:68:44:51:6b:d3:9e:2e:85:2b:c3: db:4f:a1:0d:0a:96:21:6f:fe:4e:a7:03:8f:83:67:86:7c:b5: 5b:63:da:5b:10:3e:c3:6d:9f:bd:ae:6a:5e:13:bd:2c:ce:9c: 8e:10:b4:95:ba:a6:69:e4:f8:19:79:ad:bd:a7:89:f7:07:60: 06:9f:db:c1:b1:52:75:af:e1:d3:86:02:1d:3b:7e:66:54:d4: 89:f4:4c:42:1c:e7:ba:ee:e7:12:b6:86:f7:8e:57:d4:5e:69: f5:5e:08:05:cc:32:2b:c6:f0:3c:4e:03:31:49:55:0f:14:6b: de:44:8c:b5:05:87:6e:4d:de:6f:06:07:ea:66:a3:c7:4e:12: d6:bf:ed:e1:ca:6b:41:4d:38:af:f1:f0:41:f6:ba:b9:c0:3b: f8:6d:87:14:16:5a:36:fa:12:7f:fd:50:d5:0c:bd:e8:9f:7d: 9b:a4:64:9a:46:46:2d:b2:51:53:41:09:8a:07:b2:99:8e:ea: 68:23:e9:cd:45:52:26:a7:24:19:54:e1:e7:fb:b9:3e:46:b1: d4:de:f7:71:94:f2:21:78:df:ce:b3:1a:66:c2:e9:63:10:7d: 47:08:3e:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZkq37eDEcxzwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjQzNzE0ZjAtNGIwZC00ZWRiLTkzOGEtNzdmN2Q1ODNhYzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSm0xH9/qHoRnRTN0n7MRBj+nZUMPAlkUOo7 SjVftTMoy/XuzyhIxrbm3zYoYgcDv+0PHYmBG9mVIdGb1mkv6wmuE1XdBZN/xoeh yTNLHebioJFTCmSG9q7jjQypwj9cv1jWwzmsG08aBIBAf7cMEogz+R9nM2MJybQw 1364mXtFWiofLyllDKoX1vsoAbWZYEKwTzT1trnFMHDWihy+iDUaLoSU1LMGQCN/ tlIJ1tTae5V2/7Z8GBGzljLQGpZBSt8uFj9rjRYKkI7dkwWWZ+eHu39aDhtDz9so kLbLwRHFh5YJ89QjT/z73Hc+RYpd/gebNvc4nPDFO3g9V7QbcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHM7j2DF7NXzepSH8w237pK1qa1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDk2ODJmNGItM2NiZi0z NTUwLTkwMDQtMGJhNjhhYWYzMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVTyXKTzS+pucf7h18N30Easy4e9ns1rYZHaERRa9OeLoUrw9tPoQ0K liFv/k6nA4+DZ4Z8tVtj2lsQPsNtn72ual4TvSzOnI4QtJW6pmnk+Bl5rb2nifcH YAaf28GxUnWv4dOGAh07fmZU1In0TEIc57ru5xK2hveOV9ReafVeCAXMMivG8DxO AzFJVQ8Ua95EjLUFh25N3m8GB+pmo8dOEta/7eHKa0FNOK/x8EH2urnAO/hthxQW Wjb6En/9UNUMveiffZukZJpGRi2yUVNBCYoHspmO6mgj6c1FUianJBlU4ef7uT5G sdTe93GU8iF4386zGmbC6WMQfUcIPkw= -----END CERTIFICATE-----Generated at Fri Apr 11 23:13:46 2025 by rpki-client