$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa File: 1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa (raw, json) Hash identifier: bwNzN7RdZrAdgLfp1GzmJYry1/HIoMUSNw+wLR18E5g= Subject key identifier: 82:EE:C1:F6:41:B3:01:F4:DF:3B:A9:0E:F1:0F:C1:64:85:2F:88:49 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58108A69CCEF97BE64C3A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:08:a6:9c:ce:f9:7b:e6:4c:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5387b0bf-ad51-4566-bccc-ea3522419e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:06:1b:53:c3:98:6e:8a:2c:a1:88:2a:f0:2d: d0:35:df:85:02:89:35:f7:88:8a:cd:64:54:3b:d2: 1a:b7:49:47:b3:4a:0b:99:90:06:aa:36:1e:11:d3: 79:dd:59:50:ec:e8:09:fe:13:96:fa:dd:2a:76:b7: 8d:00:22:15:83:62:0c:7a:b4:ac:a3:1b:da:f2:a1: aa:ee:f3:3d:ab:c5:5c:5c:38:6f:cc:72:32:c8:a9: 79:d0:46:fc:90:1e:7e:94:9d:e7:de:dd:ed:65:f3: 87:a3:79:0f:72:cf:d9:34:93:b0:59:c5:e8:45:fc: ad:ea:4f:cc:b6:c0:5c:c9:47:3d:4e:c0:41:e9:7e: 86:33:29:32:64:90:ad:b0:1b:59:f4:93:84:d6:a2: 37:d2:42:ef:9a:ef:5a:3c:48:d3:c7:9e:8d:93:99: 5a:f0:6f:71:57:0f:30:90:1a:1c:7e:33:00:02:6f: d8:f8:aa:d1:96:6a:f8:4e:a0:e1:08:17:ff:ff:ae: 87:0c:8f:dd:7d:5b:da:66:5a:bc:c6:28:4b:cc:7d: b9:d5:d9:b7:78:cc:91:e7:8b:ad:df:3d:e9:12:80: cb:e5:8d:53:2e:01:ac:d0:97:62:b3:8f:33:9d:f7: c1:84:ee:6a:72:b7:55:55:a0:fd:dd:b5:bd:79:a6: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EE:C1:F6:41:B3:01:F4:DF:3B:A9:0E:F1:0F:C1:64:85:2F:88:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:3a:ab:13:95:00:1e:2d:55:e3:27:ee:fb:20:2d:ea:a2:af: 40:a0:62:d9:42:ec:57:0c:db:e9:bb:6f:d5:e5:99:3d:64:dd: 39:06:fb:a1:a0:5b:f8:eb:06:88:7c:fa:33:a0:a1:0a:f5:af: 4c:93:03:88:75:ee:5d:3b:75:bb:e9:00:8d:e2:9c:f7:fe:43: e8:ec:8b:85:07:91:45:06:59:70:6a:52:2b:4c:6d:5e:a4:78: 60:95:64:18:67:af:a7:15:d3:81:bc:ce:b8:e9:81:0a:c9:79: 05:19:2c:0a:e0:3d:56:13:d8:24:d7:85:5d:53:63:53:35:fc: 91:ee:d7:30:28:aa:b2:de:fb:c1:65:e7:e5:18:97:72:89:b3: f4:22:37:c1:b3:bb:9d:c0:20:16:9c:92:fe:a3:78:e9:f8:79: 83:59:dd:cd:41:a7:01:49:83:25:61:9d:7b:9e:75:38:4e:ac: d2:5b:7f:b3:64:5e:27:6c:f7:ce:74:d9:14:e9:b3:64:b9:98: 62:72:97:37:32:fc:b6:8a:57:1b:88:2c:60:2d:6c:9c:12:53: ca:08:7c:ba:ac:26:59:9d:93:55:f5:93:3b:a2:6d:dd:1c:19: 91:fb:34:6c:c5:0c:33:6a:4e:bb:5a:2d:7e:2d:24:2e:74:37: ec:e1:b7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQimnM75e+ZMOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTM4N2IwYmYtYWQ1MS00NTY2LWJjY2MtZWEzNTIyNDE5ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwYbU8OYboosoYgq8C3QNd+FAok194iKzWRU O9Iat0lHs0oLmZAGqjYeEdN53VlQ7OgJ/hOW+t0qdreNACIVg2IMerSsoxva8qGq 7vM9q8VcXDhvzHIyyKl50Eb8kB5+lJ3n3t3tZfOHo3kPcs/ZNJOwWcXoRfyt6k/M tsBcyUc9TsBB6X6GMykyZJCtsBtZ9JOE1qI30kLvmu9aPEjTx56Nk5la8G9xVw8w kBocfjMAAm/Y+KrRlmr4TqDhCBf//66HDI/dfVvaZlq8xihLzH251dm3eMyR54ut 3z3pEoDL5Y1TLgGs0Jdis48znffBhO5qcrdVVaD93bW9eabGFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILuwfZBswH03zupDvEPwWSFL4hJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWM2OWNhMGYtYjMwOS0z OTM1LWI2N2MtNzQ0M2JkNGVhYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANE6qxOVAB4tVeMn7vsgLeqir0CgYtlC7FcM2+m7b9XlmT1k3TkG+6Gg W/jrBoh8+jOgoQr1r0yTA4h17l07dbvpAI3inPf+Q+jsi4UHkUUGWXBqUitMbV6k eGCVZBhnr6cV04G8zrjpgQrJeQUZLArgPVYT2CTXhV1TY1M1/JHu1zAoqrLe+8Fl 5+UYl3KJs/QiN8Gzu53AIBackv6jeOn4eYNZ3c1BpwFJgyVhnXuedThOrNJbf7Nk Xids98502RTps2S5mGJylzcy/LaKVxuILGAtbJwSU8oIfLqsJlmdk1X1kzuibd0c GZH7NGzFDDNqTrtaLX4tJC50N+zhtxk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:38 2025 by rpki-client