$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25029d37-43ee-3276-a7b3-9d35698102a8.roa File: 25029d37-43ee-3276-a7b3-9d35698102a8.roa (raw, json) Hash identifier: GkN71BY2wZASEY+mhdEurS9ZIv1u2fTTGD73zLEu+9k= Subject key identifier: 7C:32:80:5C:CB:84:ED:E6:54:87:9F:56:03:83:97:0F:7F:45:42:3B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810A92DC0DB441C1D9D300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25029d37-43ee-3276-a7b3-9d35698102a8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0a:92:dc:0d:b4:41:c1:d9:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f140b783-1b3f-4d03-acfb-1d98090c4efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:e7:9a:85:55:77:3d:6f:b5:e4:0a:0b:bb: 26:d5:7a:ac:25:40:0d:77:33:d3:84:d4:c4:c7:90: 48:c2:36:c9:8c:84:16:c4:f1:90:85:55:d5:42:03: e7:4f:97:48:74:08:a7:08:79:89:aa:86:50:b5:eb: e2:f2:91:e6:aa:c2:75:4e:bd:b1:08:54:9e:99:eb: 6f:89:9a:24:86:99:e7:14:b8:eb:fd:e5:66:75:db: 2d:f2:63:74:50:d8:da:79:90:fc:dc:6d:29:b6:59: 07:34:c9:0d:1d:eb:5f:14:e5:af:c8:fb:2f:02:fb: 6e:de:35:f6:84:70:ea:bc:f7:24:7f:fe:d2:9c:55: 3e:c0:5a:c8:21:df:63:52:e0:39:e9:bf:6f:38:72: f9:5d:a0:e4:b7:9c:cc:98:62:e6:bc:86:cd:ad:5d: 71:76:52:a5:dd:2d:17:c8:d8:fd:0f:fe:8c:76:0b: 9c:fd:57:2a:29:59:68:e0:25:d3:80:73:78:7d:63: 41:d7:3f:53:8f:70:e7:ec:8a:94:e0:68:e3:b7:b6: 8e:27:b6:30:79:27:5c:3c:4f:e8:4b:c5:10:39:27: 80:25:38:d4:97:2f:51:9b:92:d0:83:31:89:f4:13: 69:cc:b7:ed:c8:f8:d4:01:57:93:bb:d3:a6:0d:e3: 04:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:32:80:5C:CB:84:ED:E6:54:87:9F:56:03:83:97:0F:7F:45:42:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25029d37-43ee-3276-a7b3-9d35698102a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e4:ee:c7:0c:a5:10:b9:b7:18:59:ec:6a:38:c8:66:9a:10: dc:14:03:be:b6:71:96:d0:9c:7a:6e:a0:07:fb:f2:a9:65:b6: e4:cb:82:54:df:59:06:b3:07:f2:eb:53:6a:44:1c:57:5d:1d: 0f:97:c7:89:b0:c6:1b:c9:a7:c3:bf:ee:89:db:cf:fc:15:bd: 2b:e8:74:ba:83:fa:fd:50:85:4f:4d:79:9e:62:0b:d5:29:1c: 2b:ba:fb:11:c8:24:bb:eb:87:7a:6a:bc:0d:72:5a:fa:ca:dd: 5f:50:38:a8:44:ea:fe:3a:d6:9a:bd:6b:39:94:88:7b:48:e2: a3:3c:b6:bc:b7:e2:9f:54:22:4f:7b:32:79:5d:4d:ea:39:e4: b1:ab:c8:53:1d:49:b9:d4:95:13:95:cb:a8:9b:61:20:70:b3: e6:9f:7c:fa:36:1e:22:8b:92:36:36:57:8f:4b:06:18:8f:1e: a7:8a:fd:e6:08:52:cc:75:10:fc:00:4c:66:e0:7c:6e:24:9b: 81:4e:e5:b6:a3:5d:1d:cc:20:53:fd:89:67:48:fa:02:4c:fb: 4e:31:39:ea:2c:d6:45:98:dc:a1:c2:33:fa:af:84:2a:21:f5: 19:f6:0e:16:d8:d9:c9:79:29:b0:62:aa:a0:5e:06:01:5a:7e: 22:ce:af:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQqS3A20QcHZ0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjE0MGI3ODMtMWIzZi00ZDAzLWFjZmItMWQ5ODA5MGM0ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPPnmoVVdz1vteQKC7sm1XqsJUANdzPThNTE x5BIwjbJjIQWxPGQhVXVQgPnT5dIdAinCHmJqoZQtevi8pHmqsJ1Tr2xCFSemetv iZokhpnnFLjr/eVmddst8mN0UNjaeZD83G0ptlkHNMkNHetfFOWvyPsvAvtu3jX2 hHDqvPckf/7SnFU+wFrIId9jUuA56b9vOHL5XaDkt5zMmGLmvIbNrV1xdlKl3S0X yNj9D/6Mdguc/VcqKVlo4CXTgHN4fWNB1z9Tj3Dn7IqU4Gjjt7aOJ7YweSdcPE/o S8UQOSeAJTjUly9Rm5LQgzGJ9BNpzLftyPjUAVeTu9OmDeMEiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwygFzLhO3mVIefVgODlw9/RUI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjUwMjlkMzctNDNlZS0z Mjc2LWE3YjMtOWQzNTY5ODEwMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXk7scMpRC5txhZ7Go4yGaaENwUA762cZbQnHpuoAf78qlltuTLglTf WQazB/LrU2pEHFddHQ+Xx4mwxhvJp8O/7onbz/wVvSvodLqD+v1QhU9NeZ5iC9Up HCu6+xHIJLvrh3pqvA1yWvrK3V9QOKhE6v461pq9azmUiHtI4qM8try34p9UIk97 MnldTeo55LGryFMdSbnUlROVy6ibYSBws+affPo2HiKLkjY2V49LBhiPHqeK/eYI Usx1EPwATGbgfG4km4FO5bajXR3MIFP9iWdI+gJM+04xOeos1kWY3KHCM/qvhCoh 9Rn2DhbY2cl5KbBiqqBeBgFafiLOr1Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:27 2025 by rpki-client