$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25f360e8-e2e4-30f6-b2c3-97b5fc7aaa65.roa File: 25f360e8-e2e4-30f6-b2c3-97b5fc7aaa65.roa (raw, json) Hash identifier: /AeUysVTmTtRRViRIMFMLVS74Vxu/UuzLG2iqH/szdY= Subject key identifier: 6A:CD:A3:C2:84:0C:2E:16:33:52:0B:11:CE:56:CC:F0:25:A0:D2:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848774119F51D0261929906D2E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25f360e8-e2e4-30f6-b2c3-97b5fc7aaa65.roa Signing time: Tue 07 Jan 2025 13:19:15 +0000 ROA not before: Tue 07 Jan 2025 13:19:15 +0000 ROA not after: Mon 07 Apr 2025 12:19:15 +0000 asID: 7155 IP address blocks: 70.41.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:41:19:f5:1d:02:61:92:99:06:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jan 7 13:19:15 2025 GMT Not After : Apr 7 12:19:15 2025 GMT Subject: CN=365d2763-e96e-4249-83f1-0ef37b6234ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dc:a6:fc:71:1b:f6:45:3a:41:2c:66:09:82: 7e:c4:35:53:8f:c9:96:44:1e:1e:c6:4c:f7:8f:ab: 60:27:ed:e6:18:87:81:f8:cb:97:ed:06:3f:da:2e: 4f:3e:b1:0b:17:7e:00:fc:89:b7:c6:fe:58:05:27: 83:12:90:f6:51:e8:90:b3:00:6c:fc:a7:61:c2:f0: d0:7f:f5:90:bd:81:42:33:28:0e:f1:5d:df:02:3b: 98:e0:f7:fe:8d:0e:22:db:7e:38:ca:10:e1:fe:98: 10:3a:fb:98:98:e9:ef:38:89:98:37:6c:a1:35:fa: 1f:9f:0d:a5:4d:71:d6:25:41:51:5f:b6:9c:81:8a: 63:0e:33:50:6b:23:ea:22:1a:34:ef:26:00:7a:a9: ef:9a:b7:76:0a:7e:a2:4f:ce:65:97:08:b3:41:f0: 3d:59:8e:b6:c1:b3:c7:99:be:64:7e:17:35:4c:46: 60:5c:88:be:d5:2d:c6:c7:69:8c:a7:a9:2b:c1:a0: 32:f4:bc:77:c6:08:4c:40:be:05:7c:1c:2e:84:ab: d2:5d:31:f9:9e:8b:f3:9e:db:61:e7:76:3b:e5:8e: f8:62:1a:63:e6:ed:e4:db:be:3a:5f:e0:30:be:94: 3d:ab:84:c1:c0:9b:30:b3:2f:10:aa:34:1c:f9:b4: 4e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CD:A3:C2:84:0C:2E:16:33:52:0B:11:CE:56:CC:F0:25:A0:D2:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25f360e8-e2e4-30f6-b2c3-97b5fc7aaa65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:01:c9:aa:48:35:46:85:0b:47:c7:91:f4:e3:56:aa:fe:8a: 03:bd:2f:bd:16:9a:f0:3c:9c:9b:eb:b3:d2:98:d6:ab:1c:e5: 55:30:f1:06:e0:f7:9e:97:de:a1:28:98:bb:77:c8:da:84:e8: f0:8b:4d:12:50:57:ca:8c:17:1e:ed:8b:3d:51:4c:ee:08:6a: 10:95:30:82:7e:9f:79:91:a9:14:1b:1e:0e:7d:b8:5d:ae:1a: 11:50:c6:4c:a2:8a:e3:93:0c:5f:aa:1c:3f:4f:08:06:44:3c: f1:86:6e:e3:d9:89:ef:b2:77:9a:bf:25:77:42:ca:6d:0e:53: 4a:35:e3:18:61:40:d5:e3:05:84:d6:a0:4a:6f:7f:55:bd:e1: 94:f5:e5:b0:f4:b3:c3:83:c9:19:1a:bb:90:d8:7b:40:21:76: 87:2a:b1:c4:ba:00:90:e0:e2:6f:7b:98:cd:0e:9a:c5:2e:39: 84:ff:b3:4c:cc:ac:3f:28:f6:61:b6:e1:f7:e7:ce:fd:b8:3d: 1c:5c:e5:37:a9:ba:f3:89:ec:34:37:75:ee:9e:1d:c6:a9:57: e9:b9:bc:03:ac:44:df:f6:69:c6:5a:80:f5:68:96:65:3d:2f: 64:d4:a2:5c:02:33:61:26:d9:6b:a7:24:a1:b0:29:d4:66:25: 26:05:71:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3QRn1HQJhkpkG0uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDEwNzEzMTkxNVoXDTI1MDQwNzEyMTkxNVowLzEtMCsGA1UEAxMk MzY1ZDI3NjMtZTk2ZS00MjQ5LTgzZjEtMGVmMzdiNjIzNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ym/HEb9kU6QSxmCYJ+xDVTj8mWRB4exkz3 j6tgJ+3mGIeB+MuX7QY/2i5PPrELF34A/Im3xv5YBSeDEpD2UeiQswBs/KdhwvDQ f/WQvYFCMygO8V3fAjuY4Pf+jQ4i2344yhDh/pgQOvuYmOnvOImYN2yhNfofnw2l TXHWJUFRX7acgYpjDjNQayPqIho07yYAeqnvmrd2Cn6iT85llwizQfA9WY62wbPH mb5kfhc1TEZgXIi+1S3Gx2mMp6krwaAy9Lx3xghMQL4FfBwuhKvSXTH5novzntth 53Y75Y74Yhpj5u3k2746X+AwvpQ9q4TBwJswsy8QqjQc+bRONwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrNo8KEDC4WM1ILEc5WzPAloNLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjVmMzYwZTgtZTJlNC0z MGY2LWIyYzMtOTdiNWZjN2FhYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRinYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAByapINUaFC0fHkfTjVqr+igO9L70WmvA8nJvrs9KY1qsc5VUw8Qbg 956X3qEomLt3yNqE6PCLTRJQV8qMFx7tiz1RTO4IahCVMIJ+n3mRqRQbHg59uF2u GhFQxkyiiuOTDF+qHD9PCAZEPPGGbuPZie+yd5q/JXdCym0OU0o14xhhQNXjBYTW oEpvf1W94ZT15bD0s8ODyRkau5DYe0AhdocqscS6AJDg4m97mM0OmsUuOYT/s0zM rD8o9mG24ffnzv24PRxc5TepuvOJ7DQ3de6eHcapV+m5vAOsRN/2acZagPVolmU9 L2TUolwCM2Em2WunJKGwKdRmJSYFcXg= -----END CERTIFICATE-----Generated at Wed Feb 19 20:33:23 2025 by rpki-client