$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b52a449-4acc-378f-8abb-f501dea017d5.roa File: 0b52a449-4acc-378f-8abb-f501dea017d5.roa (raw, json) Hash identifier: /0DJrNuT892fzzauPDsxrwyv0miAvY2tLV/Dobb+XNw= Subject key identifier: 8B:D5:7C:AD:12:12:9F:21:58:4F:85:97:E6:6A:9D:F9:33:5E:60:F8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819A417D3952FC073A8BC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b52a449-4acc-378f-8abb-f501dea017d5.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9a:41:7d:39:52:fc:07:3a:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b5b654ed-d8ba-4e5d-9064-7dfe23df8d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e9:7f:9e:77:fa:24:be:c1:31:7a:51:0e:c8: a3:7c:fe:8c:42:a4:3a:25:1b:73:b2:ad:eb:b7:6b: 94:ab:e0:28:18:e2:38:9e:33:c3:ba:c5:ef:00:ac: a8:5a:63:13:79:d9:ba:8a:bc:49:b3:6f:8d:04:d3: d0:ae:6f:db:b3:a5:f7:ff:b0:59:aa:c0:44:18:0e: fe:59:ea:f8:05:22:9d:32:fc:7a:8c:ee:76:66:48: b4:fc:f8:0e:fb:05:e4:86:0b:4d:9b:5b:08:5c:c6: cb:d7:2d:ed:37:a2:43:1a:d1:b5:3a:01:9d:40:99: eb:98:d0:28:d3:5b:e9:e5:cc:a4:fc:52:e9:08:dd: a4:46:8d:6f:55:a5:f9:c0:06:4e:0c:21:f7:f1:8a: bd:3d:6f:de:c2:4c:57:91:db:9a:02:71:c0:e4:5c: ce:5b:99:80:d2:08:35:71:6e:94:7c:17:11:4c:29: 09:12:40:b6:92:8b:c6:64:a3:cc:86:a0:c0:24:49: c4:60:2b:f7:5d:4f:44:44:36:04:c6:d7:a2:82:5f: 3d:5a:3d:7e:ce:66:38:7e:0c:fa:e1:73:e4:4d:4e: 70:4d:85:16:b7:42:1a:eb:17:95:48:28:c0:24:9b: db:1b:3e:ab:4c:26:fa:0f:26:12:97:e4:22:67:cb: 05:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D5:7C:AD:12:12:9F:21:58:4F:85:97:E6:6A:9D:F9:33:5E:60:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b52a449-4acc-378f-8abb-f501dea017d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:cd:2b:e7:68:9f:3e:6f:b6:78:4e:4b:10:92:4e:28:28:9c: 32:77:cf:53:55:33:02:3c:9c:6a:30:e1:de:73:24:e1:e5:ae: d6:a5:30:0c:1b:0a:fa:38:b5:2f:19:03:a2:9c:f0:cc:8e:e8: 7c:b7:03:b3:18:bb:73:57:b0:a6:e6:7b:94:3a:56:df:91:45: c0:be:ec:03:42:72:47:de:65:bb:cc:a7:34:f1:e7:8c:93:86: ca:7f:23:ab:ee:a2:7d:21:38:b7:f9:0d:6e:60:2c:c5:58:8c: 56:f5:52:c9:a0:57:7b:08:41:91:ad:72:7e:7b:04:e3:52:73: 2f:36:9d:3e:64:6b:65:30:8d:55:45:74:03:3a:9f:1a:e6:47: 3d:39:10:40:5f:05:71:77:7e:b9:f5:e4:7d:13:4d:c2:9f:a9: 35:53:9f:6d:ec:89:68:0a:23:57:6e:21:dc:75:22:80:2c:29: ce:9b:fc:85:cd:15:c4:3d:6c:12:7a:57:6b:61:4c:ed:be:34: bd:85:d6:d2:d0:b7:39:17:ef:9a:88:8c:55:5f:6a:cb:a8:23: 74:5a:1c:c1:f7:5b:38:d5:22:30:cf:fc:e5:70:04:1b:31:2d: 07:02:30:31:75:51:50:48:7e:29:be:b2:7b:25:8c:1b:ac:d1: 35:43:27:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZpBfTlS/Ac6i8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjViNjU0ZWQtZDhiYS00ZTVkLTkwNjQtN2RmZTIzZGY4ZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+l/nnf6JL7BMXpRDsijfP6MQqQ6JRtzsq3r t2uUq+AoGOI4njPDusXvAKyoWmMTedm6irxJs2+NBNPQrm/bs6X3/7BZqsBEGA7+ Wer4BSKdMvx6jO52Zki0/PgO+wXkhgtNm1sIXMbL1y3tN6JDGtG1OgGdQJnrmNAo 01vp5cyk/FLpCN2kRo1vVaX5wAZODCH38Yq9PW/ewkxXkduaAnHA5FzOW5mA0gg1 cW6UfBcRTCkJEkC2kovGZKPMhqDAJEnEYCv3XU9ERDYExteigl89Wj1+zmY4fgz6 4XPkTU5wTYUWt0Ia6xeVSCjAJJvbGz6rTCb6DyYSl+QiZ8sFvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvVfK0SEp8hWE+Fl+ZqnfkzXmD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI1MmE0NDktNGFjYy0z NzhmLThhYmItZjUwMWRlYTAxN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARim6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnNK+donz5vtnhOSxCSTigonDJ3z1NVMwI8nGow4d5zJOHlrtalMAwb Cvo4tS8ZA6Kc8MyO6Hy3A7MYu3NXsKbme5Q6Vt+RRcC+7ANCckfeZbvMpzTx54yT hsp/I6vuon0hOLf5DW5gLMVYjFb1UsmgV3sIQZGtcn57BONScy82nT5ka2UwjVVF dAM6nxrmRz05EEBfBXF3frn15H0TTcKfqTVTn23siWgKI1duIdx1IoAsKc6b/IXN FcQ9bBJ6V2thTO2+NL2F1tLQtzkX75qIjFVfasuoI3RaHMH3WzjVIjDP/OVwBBsx LQcCMDF1UVBIfim+snsljBus0TVDJ80= -----END CERTIFICATE-----Generated at Fri Apr 11 22:32:56 2025 by rpki-client