$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09984cd6-4e9e-3a11-8b1e-c812381993c2.roa File: 09984cd6-4e9e-3a11-8b1e-c812381993c2.roa (raw, json) Hash identifier: EO31xuJ4nojBqntWpZYz2cKQP5rYPwa3cGhhDC7nElQ= Subject key identifier: 9F:D9:25:4F:19:03:EC:CF:A4:E1:3C:2E:23:58:6E:77:59:18:69:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58104061DDA3949DAFAC3C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09984cd6-4e9e-3a11-8b1e-c812381993c2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:04:06:1d:da:39:49:da:fa:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=436bfc4d-af1b-4bda-9e79-03d7b8126724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:f4:ae:a9:23:18:16:9d:9c:07:ca:6c:f5: 2b:73:f0:14:18:ce:a6:41:1d:be:81:af:27:95:ad: 5c:c9:ed:e4:bc:07:08:41:88:ff:34:dc:ca:02:9e: 6b:1b:bb:f4:75:85:a4:f1:d8:ec:76:4a:ee:40:3f: 58:60:94:af:74:47:c9:d2:72:2d:9b:72:08:b8:75: 07:2a:9a:90:d6:51:39:56:50:c2:3a:bf:ba:e0:8a: b6:d0:06:dc:c8:fc:64:68:4a:b1:1f:a5:ff:69:64: 6b:4e:5e:21:f9:69:b7:d8:89:a1:1f:68:0a:8f:c6: 5e:0b:2d:ad:d5:29:63:86:3c:fd:73:f2:92:c6:d9: e9:d3:d0:b5:a5:27:b1:88:d3:69:7a:1e:49:1d:3e: ce:16:e3:be:bd:6c:d1:c4:e7:53:8f:f0:d5:09:77: 2d:24:b6:13:7e:2d:95:19:d6:70:27:97:0e:02:fb: 6f:e8:fe:25:2b:c6:c2:26:3e:fa:cc:0b:1a:de:8c: 16:74:25:bf:68:87:2a:ca:3e:35:65:55:3f:71:6c: 92:e6:91:08:d8:b6:02:1d:34:7a:31:2e:63:8c:5d: 26:bc:c7:54:5a:83:f5:b8:49:81:2e:8b:d8:e3:3b: 00:e2:ca:36:6c:db:43:37:38:59:f6:73:37:08:ba: df:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D9:25:4F:19:03:EC:CF:A4:E1:3C:2E:23:58:6E:77:59:18:69:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09984cd6-4e9e-3a11-8b1e-c812381993c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0c:fd:06:f6:bd:e5:6a:50:3e:0e:a1:95:5b:9e:a1:8a:d7: 36:ad:27:6c:d5:c8:a6:75:af:b2:4e:93:a4:88:71:41:e4:c7: ee:0e:14:97:34:9b:cc:75:df:90:7f:c9:74:cf:a9:8d:89:c7: cf:d1:d2:29:ab:a6:16:54:6d:a4:08:ea:05:71:e0:f8:82:7c: 80:6f:b3:37:8a:0d:f4:c7:5c:22:d9:21:4b:b6:03:c2:83:1e: 55:5f:24:dc:d7:9b:bb:5d:70:7a:89:c0:4d:bb:e6:f3:12:06: 89:8d:cd:39:58:58:09:d2:a2:85:d3:f4:53:5c:dd:b4:b4:83: cf:42:d0:cb:29:f5:60:6a:bf:3b:ad:ce:16:67:af:15:15:54: 52:16:5d:0e:ef:7d:56:ab:c1:87:1f:9c:96:3b:b7:c4:57:aa: 69:7b:25:f1:bf:03:da:d5:fd:ac:a1:f6:ba:ba:2c:e2:94:5f: 20:08:2b:93:ef:d2:e2:b2:76:fe:1d:92:f6:da:42:32:85:15: b1:93:5b:cf:2a:cb:74:10:e1:f9:4d:aa:8e:a2:db:7f:09:04: 8a:90:4a:d4:5f:09:e4:96:1a:d5:35:1c:19:7c:40:56:ad:33: 99:a6:19:07:98:50:26:d6:d9:2c:32:c7:3e:a4:5d:cb:76:e7: 94:a8:03:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQQGHdo5Sdr6w8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDM2YmZjNGQtYWYxYi00YmRhLTllNzktMDNkN2I4MTI2NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK30rqkjGBadnAfKbPUrc/AUGM6mQR2+ga8n la1cye3kvAcIQYj/NNzKAp5rG7v0dYWk8djsdkruQD9YYJSvdEfJ0nItm3IIuHUH KpqQ1lE5VlDCOr+64Iq20AbcyPxkaEqxH6X/aWRrTl4h+Wm32ImhH2gKj8ZeCy2t 1Sljhjz9c/KSxtnp09C1pSexiNNpeh5JHT7OFuO+vWzRxOdTj/DVCXctJLYTfi2V GdZwJ5cOAvtv6P4lK8bCJj76zAsa3owWdCW/aIcqyj41ZVU/cWyS5pEI2LYCHTR6 MS5jjF0mvMdUWoP1uEmBLovY4zsA4so2bNtDNzhZ9nM3CLrfAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/ZJU8ZA+zPpOE8LiNYbndZGGkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDk5ODRjZDYtNGU5ZS0z YTExLThiMWUtYzgxMjM4MTk5M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMM/Qb2veVqUD4OoZVbnqGK1zatJ2zVyKZ1r7JOk6SIcUHkx+4OFJc0 m8x135B/yXTPqY2Jx8/R0imrphZUbaQI6gVx4PiCfIBvszeKDfTHXCLZIUu2A8KD HlVfJNzXm7tdcHqJwE275vMSBomNzTlYWAnSooXT9FNc3bS0g89C0Msp9WBqvzut zhZnrxUVVFIWXQ7vfVarwYcfnJY7t8RXqml7JfG/A9rV/ayh9rq6LOKUXyAIK5Pv 0uKydv4dkvbaQjKFFbGTW88qy3QQ4flNqo6i238JBIqQStRfCeSWGtU1HBl8QFat M5mmGQeYUCbW2Swyxz6kXct255SoA5w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:19 2025 by rpki-client