$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e1e5ef9-8b00-3a33-80fb-d4c3b56ea956.roa File: 1e1e5ef9-8b00-3a33-80fb-d4c3b56ea956.roa (raw, json) Hash identifier: MwytLtx/cmM/sT8DRlUM2Ci36hY1lbTtSyNr/nmsqE4= Subject key identifier: 3B:EF:1D:33:C2:12:E3:35:C8:CA:EE:11:C7:C3:19:51:21:71:4B:C5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819889489663712912D740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e1e5ef9-8b00-3a33-80fb-d4c3b56ea956.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:98:89:48:96:63:71:29:12:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=156ad505-f5db-4c3d-addc-06f4d8ed9ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:f9:b2:d4:02:78:ce:7c:9c:ce:90:b5:6f: 6b:00:9f:8c:72:f5:2b:f3:e5:8f:ff:17:7c:bf:e2: d0:b2:f2:88:35:c9:98:ce:30:65:45:15:b5:2f:65: e1:34:a3:75:50:2a:8f:58:e0:6c:45:61:af:25:85: 6f:20:8d:05:8e:7f:19:3e:15:53:ea:c4:a6:f2:ea: f7:f8:7f:a4:70:88:6b:22:4f:07:c6:1c:99:7c:21: 0f:48:6c:ed:2e:49:8a:ac:a6:45:93:e8:b3:60:1d: cf:ea:95:0f:c7:af:b8:83:8a:8f:08:ef:7f:d9:68: cd:e3:c6:4d:f9:ee:21:ba:bf:36:02:db:35:b7:ae: 21:a5:57:ad:59:19:7d:f1:80:0f:0e:87:da:58:a3: 1e:fa:95:95:52:75:c7:dd:27:4e:26:eb:f1:f8:27: 16:13:8d:c5:e4:a0:db:b4:10:74:cf:d6:36:61:9a: 7c:6d:0a:ce:9b:c2:a1:84:48:2a:47:1a:54:cd:e9: f5:2c:fa:95:c5:70:a1:10:10:47:1f:ee:59:db:63: 3c:45:04:01:f4:2b:64:95:49:52:10:a5:c0:a8:cd: 84:01:5d:eb:af:b1:28:7d:d4:03:c6:af:b0:49:59: c8:c3:7a:9a:00:e6:54:75:4f:2b:7b:d9:eb:76:5d: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EF:1D:33:C2:12:E3:35:C8:CA:EE:11:C7:C3:19:51:21:71:4B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e1e5ef9-8b00-3a33-80fb-d4c3b56ea956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:32:5d:04:59:3d:57:d0:2e:79:5e:6f:8a:a3:e5:a1:06:3f: 3b:9c:18:b1:3c:52:61:ad:8b:b8:65:01:62:7d:d1:4a:5e:cc: 0d:f1:c9:67:38:46:2d:cb:c5:f7:67:1a:91:d7:86:89:c0:ac: dd:e4:39:50:74:89:e4:a6:05:53:98:0d:9f:8f:24:be:36:15: 8a:1a:4b:04:fd:d3:c1:e9:04:9a:ed:de:ec:ba:ea:1f:d1:7d: 59:ed:e0:ba:c1:9a:2f:a5:4a:f9:1b:34:8e:0b:d9:26:c4:52: b5:d0:fd:18:a5:54:1b:78:6c:81:13:d8:74:ce:a4:a7:5e:9f: 75:a4:00:33:de:9f:a3:b7:f7:8f:72:3f:ec:3c:cb:88:c0:b2: ba:7d:ce:6d:c1:1d:27:3a:c4:54:47:4b:2a:dd:2f:ad:04:f0: 50:c1:a6:72:ee:69:11:58:86:f8:c5:1e:af:d6:45:40:dd:2b: 7a:fa:49:9a:18:1b:12:45:06:53:08:15:89:af:19:7a:aa:e5: 34:e3:66:22:64:b3:7c:be:78:16:df:44:b8:11:c6:1d:3f:b0: 96:5a:97:64:6b:68:fd:b4:86:cb:51:68:82:56:11:00:5a:20: 07:b1:e9:23:7b:29:c4:f3:d6:e9:95:66:78:b8:8d:3f:f8:1f: b4:47:20:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZiJSJZjcSkS10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTU2YWQ1MDUtZjVkYi00YzNkLWFkZGMtMDZmNGQ4ZWQ5ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOn5stQCeM58nM6QtW9rAJ+McvUr8+WP/xd8 v+LQsvKINcmYzjBlRRW1L2XhNKN1UCqPWOBsRWGvJYVvII0Fjn8ZPhVT6sSm8ur3 +H+kcIhrIk8HxhyZfCEPSGztLkmKrKZFk+izYB3P6pUPx6+4g4qPCO9/2WjN48ZN +e4hur82Ats1t64hpVetWRl98YAPDofaWKMe+pWVUnXH3SdOJuvx+CcWE43F5KDb tBB0z9Y2YZp8bQrOm8KhhEgqRxpUzen1LPqVxXChEBBHH+5Z22M8RQQB9CtklUlS EKXAqM2EAV3rr7EofdQDxq+wSVnIw3qaAOZUdU8re9nrdl3KQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvvHTPCEuM1yMruEcfDGVEhcUvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWUxZTVlZjktOGIwMC0z YTMzLTgwZmItZDRjM2I1NmVhOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiliMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUyXQRZPVfQLnleb4qj5aEGPzucGLE8UmGti7hlAWJ90UpezA3xyWc4 Ri3LxfdnGpHXhonArN3kOVB0ieSmBVOYDZ+PJL42FYoaSwT908HpBJrt3uy66h/R fVnt4LrBmi+lSvkbNI4L2SbEUrXQ/RilVBt4bIET2HTOpKden3WkADPen6O3949y P+w8y4jAsrp9zm3BHSc6xFRHSyrdL60E8FDBpnLuaRFYhvjFHq/WRUDdK3r6SZoY GxJFBlMIFYmvGXqq5TTjZiJks3y+eBbfRLgRxh0/sJZal2RraP20hstRaIJWEQBa IAex6SN7KcTz1umVZni4jT/4H7RHIB4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:29 2025 by rpki-client