$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa File: 29bb7170-7a90-39aa-ad83-71606197544b.roa (raw, json) Hash identifier: Sp6Y8Hjsib24AzEWQBPmvnIMxnvJvuenEDMzmH5bK80= Subject key identifier: 5F:87:A6:41:CF:FC:3A:01:9F:0A:0D:3F:7A:AE:64:59:80:A6:16:1E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62AC4E3FBFDD0E37E829F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 70.41.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:c4:e3:fb:fd:d0:e3:7e:82:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=b7c82a6a-0583-43d0-b146-bdd4bb06678f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:a6:a8:f1:33:44:83:d9:24:0f:3a:d5:3d: e2:68:33:81:dd:e8:ad:8f:dd:2c:4c:4f:1b:4c:c5: 78:f7:ab:4d:47:ab:db:35:56:47:ca:5d:1c:39:93: f3:7c:0e:4f:2a:a6:8d:1d:8f:c2:fe:f9:cb:44:3a: 8c:80:ee:63:d6:8a:07:2f:54:b6:ad:17:1e:0a:20: f3:45:39:99:97:21:b6:d5:c7:5c:45:93:24:8d:81: 34:16:36:bd:fb:85:80:fe:10:38:01:37:d3:39:7a: c4:3a:03:54:bd:51:03:c3:97:66:8f:c5:96:bd:d3: 7d:68:8b:65:ec:46:1c:64:99:fc:85:a3:37:eb:86: ed:ff:d9:ee:21:83:4d:95:60:80:76:eb:b8:13:70: 56:94:63:d5:19:a1:33:4a:db:67:8a:a5:63:7f:c7: 41:36:ed:24:48:57:49:17:e7:16:da:74:04:0e:1d: 5c:f6:e0:52:b9:a2:da:04:60:96:23:29:5e:51:97: 22:35:da:68:a6:10:87:dd:ca:78:f4:2a:c5:cf:92: b8:c5:e6:d4:ec:74:85:b9:e6:b0:8f:9f:ce:42:7e: 48:2c:91:5a:fa:61:78:0d:e8:e8:cc:f4:2f:5a:ef: 95:1d:e7:8c:f7:0b:e8:4d:6b:9e:89:4c:75:4e:2e: ca:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:87:A6:41:CF:FC:3A:01:9F:0A:0D:3F:7A:AE:64:59:80:A6:16:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f2:fd:b0:c6:4f:df:c4:55:e1:47:09:94:69:2e:6c:da:70: 95:d7:69:64:de:a3:f3:98:74:e5:50:50:2c:aa:7d:d1:f5:96: 1a:61:ca:98:e8:93:8a:66:89:c6:7f:e0:a0:ed:24:7b:b1:a2: fc:3c:cb:9c:f9:1c:b5:f6:ee:1b:b5:cc:15:c1:f9:f0:5e:93: d1:08:14:01:9f:c3:b8:ce:e8:f4:77:ab:2c:19:ba:7b:ec:ca: 8b:01:9e:32:19:38:a9:4a:9e:e6:ef:f2:d6:db:a1:3c:88:40: 74:23:79:e5:74:8c:c1:3a:bf:09:74:eb:43:b5:cf:2d:31:99: 6b:12:80:5f:15:d2:78:31:e7:ad:79:a7:bf:cc:3d:00:6f:eb: cd:09:c5:d7:18:d9:fa:b6:9f:e6:af:d6:e1:bb:80:60:e8:37: e6:84:90:4f:f1:4a:7e:17:1b:06:a6:6b:32:4e:b2:16:4f:19: bf:61:b2:aa:6b:86:d2:29:ce:ce:aa:28:67:b9:ff:a6:80:a0: 89:f7:04:82:f8:24:56:85:59:1a:c0:a6:00:d6:55:bb:4b:9c: e8:ba:53:8b:0d:32:52:03:f2:51:62:b6:d6:f6:1a:cf:25:b3: 20:eb:86:0d:a8:a7:3f:6d:e6:17:0d:95:65:5c:b2:f0:2c:fa: c7:8a:f6:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKsTj+/3Q436CnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YjdjODJhNmEtMDU4My00M2QwLWIxNDYtYmRkNGJiMDY2NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AGmqPEzRIPZJA861T3iaDOB3eitj90sTE8b TMV496tNR6vbNVZHyl0cOZPzfA5PKqaNHY/C/vnLRDqMgO5j1ooHL1S2rRceCiDz RTmZlyG21cdcRZMkjYE0Fja9+4WA/hA4ATfTOXrEOgNUvVEDw5dmj8WWvdN9aItl 7EYcZJn8haM364bt/9nuIYNNlWCAduu4E3BWlGPVGaEzSttniqVjf8dBNu0kSFdJ F+cW2nQEDh1c9uBSuaLaBGCWIyleUZciNdpophCH3cp49CrFz5K4xebU7HSFueaw j5/OQn5ILJFa+mF4DejozPQvWu+VHeeM9wvoTWueiUx1Ti7KyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+HpkHP/DoBnwoNP3quZFmAphYeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjliYjcxNzAtN2E5MC0z OWFhLWFkODMtNzE2MDYxOTc1NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDy/bDGT9/EVeFHCZRpLmzacJXXaWTeo/OYdOVQUCyqfdH1lhphypjo k4pmicZ/4KDtJHuxovw8y5z5HLX27hu1zBXB+fBek9EIFAGfw7jO6PR3qywZunvs yosBnjIZOKlKnubv8tbboTyIQHQjeeV0jME6vwl060O1zy0xmWsSgF8V0ngx5615 p7/MPQBv680JxdcY2fq2n+av1uG7gGDoN+aEkE/xSn4XGwamazJOshZPGb9hsqpr htIpzs6qKGe5/6aAoIn3BIL4JFaFWRrApgDWVbtLnOi6U4sNMlID8lFittb2Gs8l syDrhg2opz9t5hcNlWVcsvAs+seK9sQ= -----END CERTIFICATE-----Generated at Mon Nov 25 01:16:55 2024 by rpki-client on console-fra.rpki-client.org