$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f2475e9-3da6-3450-a13b-396573faefd4.roa File: 2f2475e9-3da6-3450-a13b-396573faefd4.roa (raw, json) Hash identifier: 8BCfKA9fMhfTE/GDFQI6vLkyPAz/QtBDD8JeMFszwFM= Subject key identifier: 38:8F:78:7E:FC:E4:5E:B5:DB:0C:46:C0:EC:93:0C:4C:F8:0A:5B:B8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A36F968DF2F4CFB2BAB30 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f2475e9-3da6-3450-a13b-396573faefd4.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 70.41.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:36:f9:68:df:2f:4c:fb:2b:ab:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=7e48427d-952e-4e9a-8c8a-5321e38faeee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:6a:3d:98:f0:bc:e2:98:f0:96:42:a6:51: e9:78:76:65:ec:b8:71:28:e7:dc:60:4a:76:a9:4f: 48:2f:31:df:58:69:0b:00:e0:f7:88:62:d6:43:05: 6b:fe:c3:95:6b:03:9d:4b:2d:94:5b:d9:36:62:74: 2d:f5:f8:88:1c:0f:3d:dd:79:98:d1:96:4a:ba:0c: 57:56:1a:86:aa:0c:e0:0f:fd:c8:bb:00:18:93:cf: 13:5a:07:dd:5e:22:b1:9d:71:07:9f:b7:84:7c:ab: e0:a4:f3:0b:28:d9:cb:a3:33:91:f7:05:2d:65:30: 1e:aa:ba:25:bd:b8:b8:40:62:8d:10:55:9e:39:86: a6:b6:3d:a9:ed:ec:b6:37:ad:73:ad:a3:4b:51:4b: 1d:38:21:28:1d:5a:0e:a3:3c:45:e5:f9:82:15:72: 9c:91:4a:0d:d0:37:c8:f1:cc:8d:bc:b2:1c:6e:42: 8e:3f:5b:3b:80:a6:66:d3:52:b8:0c:9f:1d:3a:9b: 49:4e:00:5d:e3:ce:0a:49:d8:31:43:c1:77:39:4f: 29:eb:1e:88:32:58:09:ae:32:27:32:04:84:bd:47: d8:19:7b:26:e3:1f:21:da:5e:92:6e:7e:dc:a4:ff: 56:ad:60:e3:7e:cc:3a:50:dc:a3:42:ab:34:90:e7: 41:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8F:78:7E:FC:E4:5E:B5:DB:0C:46:C0:EC:93:0C:4C:F8:0A:5B:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f2475e9-3da6-3450-a13b-396573faefd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:cf:79:48:62:ab:27:92:88:da:aa:77:11:7e:85:80:54:33: 36:e1:8c:38:50:6e:0b:37:25:6e:0e:78:8f:94:4b:69:b6:8a: e3:ac:ef:2f:b6:45:00:a6:d4:e6:30:3b:dc:94:ef:d6:96:2e: ad:bb:45:25:12:51:24:2a:98:f6:5c:58:08:f6:23:77:bb:30: 94:3e:73:0d:71:b7:1d:78:d0:09:ed:ec:51:46:b3:ca:a8:16: cf:57:95:09:46:13:5f:b9:40:7a:41:7d:57:b8:78:09:ae:ae: 21:91:70:b2:78:a3:1c:9a:02:6f:f0:31:9a:75:ef:64:0d:3f: c1:84:10:41:01:95:ae:a9:1e:5f:fd:74:30:77:65:6b:86:9d: c6:c3:bc:5d:2b:ce:20:f4:cb:b1:9d:bf:9e:50:15:70:24:93: 08:b1:54:74:a1:bf:b2:c5:77:c7:9f:f9:43:90:34:9d:8a:76: 9a:39:3a:96:f7:70:c4:2b:cc:da:dc:50:1b:e6:10:99:f4:87: 9e:66:4c:8d:5e:e5:95:4d:8e:e2:85:b7:52:1b:91:63:4d:32: f8:9d:11:76:3a:67:e8:95:a2:2d:5f:86:4c:c2:02:a5:86:ca: ae:d4:c6:2c:80:62:83:ed:92:1a:5d:89:ff:65:5b:ce:27:01: 1f:2c:65:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKjb5aN8vTPsrqzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk N2U0ODQyN2QtOTUyZS00ZTlhLThjOGEtNTMyMWUzOGZhZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5lqPZjwvOKY8JZCplHpeHZl7LhxKOfcYEp2 qU9ILzHfWGkLAOD3iGLWQwVr/sOVawOdSy2UW9k2YnQt9fiIHA893XmY0ZZKugxX VhqGqgzgD/3IuwAYk88TWgfdXiKxnXEHn7eEfKvgpPMLKNnLozOR9wUtZTAeqrol vbi4QGKNEFWeOYamtj2p7ey2N61zraNLUUsdOCEoHVoOozxF5fmCFXKckUoN0DfI 8cyNvLIcbkKOP1s7gKZm01K4DJ8dOptJTgBd484KSdgxQ8F3OU8p6x6IMlgJrjIn MgSEvUfYGXsm4x8h2l6Sbn7cpP9WrWDjfsw6UNyjQqs0kOdBnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiPeH785F612wxGwOyTDEz4Clu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmYyNDc1ZTktM2RhNi0z NDUwLWExM2ItMzk2NTczZmFlZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiljMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANTPeUhiqyeSiNqqdxF+hYBUMzbhjDhQbgs3JW4OeI+US2m2iuOs7y+2 RQCm1OYwO9yU79aWLq27RSUSUSQqmPZcWAj2I3e7MJQ+cw1xtx140Ant7FFGs8qo Fs9XlQlGE1+5QHpBfVe4eAmuriGRcLJ4oxyaAm/wMZp172QNP8GEEEEBla6pHl/9 dDB3ZWuGncbDvF0rziD0y7Gdv55QFXAkkwixVHShv7LFd8ef+UOQNJ2Kdpo5Opb3 cMQrzNrcUBvmEJn0h55mTI1e5ZVNjuKFt1IbkWNNMvidEXY6Z+iVoi1fhkzCAqWG yq7UxiyAYoPtkhpdif9lW84nAR8sZdk= -----END CERTIFICATE-----Generated at Mon Nov 25 03:01:16 2024 by rpki-client on console-fra.rpki-client.org