$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fdec0a0-6846-3321-aff9-f69e4f736345.roa File: 1fdec0a0-6846-3321-aff9-f69e4f736345.roa (raw, json) Hash identifier: gfPWiRjCID+IjHFO8+QcR5rybJgua2JcXCaRIfpz55g= Subject key identifier: 24:BC:F2:38:31:54:F7:6E:58:4A:D0:9C:FB:2B:E3:91:70:0A:36:C4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D70FBAF3B6605AB445AD0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fdec0a0-6846-3321-aff9-f69e4f736345.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 40306 IP address blocks: 70.41.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:70:fb:af:3b:66:05:ab:44:5a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=b57a40c2-8f52-4ef9-8b9f-6437ce171899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:4d:44:aa:af:87:58:ab:d4:13:c5:ac:21: 63:16:da:70:33:a2:cc:7d:04:c6:0d:32:a8:02:be: c8:3a:2e:76:df:99:ca:b1:98:df:b0:f8:df:fa:1e: 6b:c9:51:b7:bd:10:b1:e6:e3:f8:ee:f0:6b:71:84: 58:4c:f4:08:10:2c:e5:5b:76:84:b9:c8:49:bd:17: 08:af:4b:8e:76:2a:99:06:87:58:e6:37:1f:c5:58: 05:55:9a:29:54:23:45:2b:4d:4e:5d:cc:a8:bb:27: b4:0b:16:89:1a:45:70:7c:79:df:49:eb:4f:98:a6: 48:84:3a:6a:9e:27:67:1b:a7:3d:89:23:bb:14:1d: e4:11:b6:95:d9:96:74:81:ff:2e:d5:6a:de:cb:ba: 4e:c8:31:87:42:68:bc:0d:96:06:eb:b7:68:76:5d: 70:12:d6:b0:99:85:b7:8d:ae:61:f7:eb:f6:3e:28: 8b:3d:a0:e0:ee:be:5b:16:ab:81:4c:37:75:69:80: 56:3e:40:b3:ba:d4:ea:82:61:2c:84:0c:c5:e9:3e: 63:e1:80:2c:0f:aa:1d:24:77:30:56:ce:21:a8:7d: 02:c7:d2:72:80:b9:ad:2c:e8:8e:9c:22:3f:07:56: d4:08:e9:62:fa:61:4e:0e:3b:dc:09:0b:86:d6:09: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BC:F2:38:31:54:F7:6E:58:4A:D0:9C:FB:2B:E3:91:70:0A:36:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1fdec0a0-6846-3321-aff9-f69e4f736345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e2:47:3f:bb:b6:f1:46:64:b9:14:14:6a:6c:ad:0d:29:ff: be:0e:06:4c:9a:bd:d2:46:e1:0e:c1:9f:3e:5e:20:60:15:0d: a5:94:5b:57:06:ce:85:99:50:de:3b:00:61:ca:70:62:88:dd: 13:18:34:e0:71:6a:62:bc:da:d1:2f:f2:6e:79:4d:5f:6e:38: 75:83:a0:54:93:ae:ba:fa:22:62:39:2e:61:52:0a:c1:b4:b6: d9:1e:0f:cb:d9:fc:c2:19:d2:31:ad:10:10:ea:1f:3a:d9:8e: 59:31:6c:ff:3a:21:00:ed:a9:37:b6:07:51:8c:0a:02:8f:3d: af:6f:76:6c:84:6b:a6:b8:db:96:69:e6:8f:d8:cd:07:35:2a: 78:c8:57:03:0b:3e:1b:f7:87:51:8b:30:f5:48:91:c7:ae:0e: 99:1a:89:aa:9e:ff:2b:49:88:02:85:ca:09:15:c6:90:67:d5: aa:cf:48:52:52:11:a5:41:25:8f:ac:55:57:06:21:6e:76:d2: 6d:3f:01:be:ee:86:4d:6c:e7:79:17:a9:8a:1a:0c:1d:20:2b: 77:75:35:d8:b9:92:60:fc:6f:9d:85:e7:e8:bb:c4:57:53:c1: fa:6c:0d:61:3b:9c:22:50:d9:98:ae:bd:68:ec:72:64:99:89: b9:95:4e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPXD7rztmBatEWtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YjU3YTQwYzItOGY1Mi00ZWY5LThiOWYtNjQzN2NlMTcxODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5VNRKqvh1ir1BPFrCFjFtpwM6LMfQTGDTKo Ar7IOi5235nKsZjfsPjf+h5ryVG3vRCx5uP47vBrcYRYTPQIECzlW3aEuchJvRcI r0uOdiqZBodY5jcfxVgFVZopVCNFK01OXcyouye0CxaJGkVwfHnfSetPmKZIhDpq nidnG6c9iSO7FB3kEbaV2ZZ0gf8u1Wrey7pOyDGHQmi8DZYG67dodl1wEtawmYW3 ja5h9+v2PiiLPaDg7r5bFquBTDd1aYBWPkCzutTqgmEshAzF6T5j4YAsD6odJHcw Vs4hqH0Cx9JygLmtLOiOnCI/B1bUCOli+mFODjvcCQuG1gkbqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS88jgxVPduWErQnPsr45FwCjbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWZkZWMwYTAtNjg0Ni0z MzIxLWFmZjktZjY5ZTRmNzM2MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbiRz+7tvFGZLkUFGpsrQ0p/74OBkyavdJG4Q7Bnz5eIGAVDaWUW1cG zoWZUN47AGHKcGKI3RMYNOBxamK82tEv8m55TV9uOHWDoFSTrrr6ImI5LmFSCsG0 ttkeD8vZ/MIZ0jGtEBDqHzrZjlkxbP86IQDtqTe2B1GMCgKPPa9vdmyEa6a425Zp 5o/YzQc1KnjIVwMLPhv3h1GLMPVIkceuDpkaiaqe/ytJiAKFygkVxpBn1arPSFJS EaVBJY+sVVcGIW520m0/Ab7uhk1s53kXqYoaDB0gK3d1Ndi5kmD8b52F5+i7xFdT wfpsDWE7nCJQ2ZiuvWjscmSZibmVTg4= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:32 2024 by rpki-client on console-ams.rpki-client.org