$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa File: 22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa (raw, json) Hash identifier: 4pCh3tipXANSWWQpHxdzID8q+CJPMqxEWk/OPuzYwyM= Subject key identifier: 11:6B:F1:51:A1:87:AB:D1:97:F0:92:8C:AB:A6:3D:30:82:93:42:2F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581028E78961E066BE82200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:02:8e:78:96:1e:06:6b:e8:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=425c221a-7377-445e-860b-b2e1a032f24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:9c:9c:b6:0f:04:36:b0:9f:fe:03:b7:f7: 70:e1:e8:41:20:e4:f6:b8:54:3e:f3:92:b7:38:90: 76:54:6d:67:48:03:71:78:a5:87:cc:c7:de:f7:ee: 36:55:6c:6a:1a:54:4e:3d:bf:d3:1b:7d:2f:dc:06: 65:6c:bf:df:44:4a:0c:89:9c:8e:93:5f:4f:bf:ed: bc:8b:7c:a5:2d:fd:75:47:99:2a:9e:3b:0d:8a:10: a9:97:66:a8:15:5f:75:5e:27:ea:ad:98:04:6c:ad: 8e:fc:0d:9b:07:f8:2c:45:23:c8:dd:81:5e:f2:2b: a6:1e:45:ca:36:a2:01:2e:e8:54:bb:96:93:b6:7e: 67:5b:a9:f7:8c:8f:78:5d:20:1f:80:3c:d4:45:2c: 30:cf:a1:6b:1b:86:c0:7f:1d:fc:00:02:1a:0b:df: 43:27:f7:d7:f3:53:9e:80:bd:92:71:25:5e:5f:48: 5f:f0:b3:e8:e7:da:c3:67:f2:c6:15:51:e3:02:ac: 19:93:b5:ee:90:76:7a:9c:91:44:3e:ec:12:91:6f: bc:e9:fd:70:69:b7:00:93:93:de:82:9b:e9:16:28: 71:6b:63:8d:47:0c:3f:91:fc:98:b7:39:15:2c:b8: 5e:38:ba:58:59:d0:4e:15:3c:31:7b:f3:0a:db:11: b0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6B:F1:51:A1:87:AB:D1:97:F0:92:8C:AB:A6:3D:30:82:93:42:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:aa:d5:0c:ba:ee:56:db:57:0b:0d:3f:f1:9a:38:89:4b:da: cc:73:7e:02:85:45:1f:58:5a:0e:2c:a3:3b:9c:df:89:95:6a: a1:7a:a1:2c:49:f4:25:cf:00:e6:cf:e4:4e:88:46:a8:e1:42: 6a:03:c2:56:70:03:a5:ec:5a:e9:d4:ac:01:dc:fd:49:22:9f: 9a:51:4c:1c:ea:e1:ee:bf:42:66:80:62:92:e4:1e:51:30:0a: cb:cc:38:b3:f7:9f:3d:80:55:e4:e5:4e:9c:34:bd:14:b4:89: 27:a0:13:09:c2:de:3f:1a:34:c2:79:3f:72:71:5d:6a:77:64: a1:af:71:2f:09:61:cf:d6:a2:8d:e2:06:2b:44:66:58:c8:9f: b4:e6:b3:41:90:e6:de:f2:3f:c1:dd:3f:13:fd:62:04:2d:9c: 46:ea:7b:81:3a:cf:57:ff:2d:8e:a8:38:c8:56:5e:69:31:d5: a2:c9:8d:26:15:46:f5:51:7b:c7:99:19:aa:b3:cf:0b:1d:39: c1:36:6c:8b:d7:e0:0d:69:7c:97:80:d7:8b:44:22:63:ba:87: fa:87:69:bf:0d:ae:83:7f:81:ed:22:d9:95:cc:69:a2:91:03: 3f:ca:6f:4f:51:4c:e9:80:7f:9c:17:d3:56:d3:4a:46:48:70: 9f:f9:34:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQKOeJYeBmvoIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDI1YzIyMWEtNzM3Ny00NDVlLTg2MGItYjJlMWEwMzJmMjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq+cnLYPBDawn/4Dt/dw4ehBIOT2uFQ+85K3 OJB2VG1nSANxeKWHzMfe9+42VWxqGlROPb/TG30v3AZlbL/fREoMiZyOk19Pv+28 i3ylLf11R5kqnjsNihCpl2aoFV91XifqrZgEbK2O/A2bB/gsRSPI3YFe8iumHkXK NqIBLuhUu5aTtn5nW6n3jI94XSAfgDzURSwwz6FrG4bAfx38AAIaC99DJ/fX81Oe gL2ScSVeX0hf8LPo59rDZ/LGFVHjAqwZk7XukHZ6nJFEPuwSkW+86f1wabcAk5Pe gpvpFihxa2ONRww/kfyYtzkVLLheOLpYWdBOFTwxe/MK2xGwSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFr8VGhh6vRl/CSjKumPTCCk0IvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjI4NThmZGQtNGMzOC0z ZGM0LWE2OTUtZjlkODBjZjc4NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2q1Qy67lbbVwsNP/GaOIlL2sxzfgKFRR9YWg4sozuc34mVaqF6oSxJ 9CXPAObP5E6IRqjhQmoDwlZwA6XsWunUrAHc/Ukin5pRTBzq4e6/QmaAYpLkHlEw CsvMOLP3nz2AVeTlTpw0vRS0iSegEwnC3j8aNMJ5P3JxXWp3ZKGvcS8JYc/Woo3i BitEZljIn7Tms0GQ5t7yP8HdPxP9YgQtnEbqe4E6z1f/LY6oOMhWXmkx1aLJjSYV RvVRe8eZGaqzzwsdOcE2bIvX4A1pfJeA14tEImO6h/qHab8NroN/ge0i2ZXMaaKR Az/Kb09RTOmAf5wX01bTSkZIcJ/5NJo= -----END CERTIFICATE-----Generated at Fri Mar 14 13:37:37 2025 by rpki-client