$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/13c6d202-c102-3ad7-86fc-48892074ebfb.roa File: 13c6d202-c102-3ad7-86fc-48892074ebfb.roa (raw, json) Hash identifier: RGxdEInP2ixbvMpsFaW7yVMakm2zSb+hBJ7K5e0Hb4k= Subject key identifier: 73:03:CD:91:82:28:E0:EC:96:C1:0B:03:F7:F2:87:58:71:B2:02:EF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848CDE116F1EF60DB804D7706E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/13c6d202-c102-3ad7-86fc-48892074ebfb.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 40306 IP address blocks: 70.41.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:16:f1:ef:60:db:80:4d:77:06:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=f0df4336-f87c-4859-984f-56b92c73bf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:80:a0:e0:50:b6:54:3e:10:b8:17:97:20: fa:b4:52:8f:78:68:57:b7:3d:38:e4:09:a2:8d:72: 53:fe:b2:e0:78:b6:95:15:1d:68:71:08:c7:d4:09: 3e:7a:e7:b6:2e:1c:3c:62:4f:4b:7f:6b:8d:80:8e: 48:85:81:b7:b6:e4:78:72:ba:7c:53:10:d4:30:d4: 03:3d:f9:ba:52:49:32:4b:2e:a7:a5:5d:3c:c4:a2: 1e:91:32:e8:35:43:88:0b:9d:6e:2e:06:7e:82:a8: 84:cf:46:d4:68:fb:b1:26:75:c1:1e:39:f6:cb:c4: 88:09:75:b5:0f:38:30:d1:98:47:62:29:68:0b:fa: a7:0e:78:55:fa:68:e6:ce:e2:64:8a:9c:6b:08:6e: 60:44:b1:08:ee:d1:a8:be:4e:5e:e8:16:00:24:7d: 8c:c3:92:78:58:29:98:a0:cc:5e:1e:4b:aa:a4:3a: af:94:63:3d:9b:6b:dc:e0:8c:ea:81:88:db:e8:92: 39:54:6a:96:98:15:5b:b3:73:d4:74:97:d3:3d:27: c4:62:25:7e:e4:8b:b4:cc:a4:b8:72:20:7e:57:fd: 9c:03:b9:6a:b5:70:60:bc:32:49:35:5a:59:01:17: 5d:11:c2:be:74:63:29:2a:e6:10:da:90:46:e8:ec: 3c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:03:CD:91:82:28:E0:EC:96:C1:0B:03:F7:F2:87:58:71:B2:02:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/13c6d202-c102-3ad7-86fc-48892074ebfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:35:fc:20:e9:5e:0d:cb:42:75:c6:bf:a2:35:ef:15:ad:e6: 84:4a:bb:39:a7:5b:2c:ce:6a:3f:cc:f1:83:85:f7:34:b4:2a: 3c:a5:49:09:fb:e5:40:9b:88:d7:9e:e7:d7:d6:35:a7:2a:e4: 85:86:b1:f6:82:6b:d2:e2:d8:e6:35:63:15:e9:77:b2:8e:9b: 72:11:cf:0c:63:04:e0:84:49:05:68:15:f4:06:64:9c:21:f7: 04:80:d3:56:ca:87:f0:f4:cc:d4:1e:93:cd:76:a6:44:34:cc: 58:4f:e4:9f:3a:e5:8e:05:81:fd:69:49:25:4b:63:3c:9f:e9: c1:8d:5d:6f:df:73:9b:ab:f8:47:b0:41:f1:0c:61:f0:fc:95: 18:3d:bb:f8:c2:d2:d9:25:a2:20:0a:de:09:19:be:0d:1f:2d: 60:75:7a:8b:34:d1:ce:f0:17:86:37:6c:6f:46:b3:fd:ef:f7: 19:d3:41:97:4f:9b:8a:9b:6e:9c:d4:cd:4d:af:ed:41:a1:85: bd:e7:aa:f1:03:e8:0b:b8:4a:12:e5:68:3b:7d:a2:28:7d:d8: 58:80:d0:14:5b:1c:de:9f:01:8d:d2:ba:76:d5:16:33:20:7c: 77:3d:2e:c8:11:77:b9:35:a3:14:1c:01:b3:40:9a:5f:34:64: 67:6f:06:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rbx72DbgE13BuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZjBkZjQzMzYtZjg3Yy00ODU5LTk4NGYtNTZiOTJjNzNiZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxiAoOBQtlQ+ELgXlyD6tFKPeGhXtz045Ami jXJT/rLgeLaVFR1ocQjH1Ak+eue2Lhw8Yk9Lf2uNgI5IhYG3tuR4crp8UxDUMNQD Pfm6UkkySy6npV08xKIekTLoNUOIC51uLgZ+gqiEz0bUaPuxJnXBHjn2y8SICXW1 Dzgw0ZhHYiloC/qnDnhV+mjmzuJkipxrCG5gRLEI7tGovk5e6BYAJH2Mw5J4WCmY oMxeHkuqpDqvlGM9m2vc4IzqgYjb6JI5VGqWmBVbs3PUdJfTPSfEYiV+5Iu0zKS4 ciB+V/2cA7lqtXBgvDJJNVpZARddEcK+dGMpKuYQ2pBG6Ow8rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMDzZGCKODslsELA/fyh1hxsgLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTNjNmQyMDItYzEwMi0z YWQ3LTg2ZmMtNDg4OTIwNzRlYmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY1/CDpXg3LQnXGv6I17xWt5oRKuzmnWyzOaj/M8YOF9zS0KjylSQn7 5UCbiNee59fWNacq5IWGsfaCa9Li2OY1YxXpd7KOm3IRzwxjBOCESQVoFfQGZJwh 9wSA01bKh/D0zNQek812pkQ0zFhP5J865Y4Fgf1pSSVLYzyf6cGNXW/fc5ur+Eew QfEMYfD8lRg9u/jC0tkloiAK3gkZvg0fLWB1eos00c7wF4Y3bG9Gs/3v9xnTQZdP m4qbbpzUzU2v7UGhhb3nqvED6Au4ShLlaDt9oih92FiA0BRbHN6fAY3SunbVFjMg fHc9LsgRd7k1oxQcAbNAml80ZGdvBhM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:10 2025 by rpki-client