$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32805458-b91a-306d-8dc2-a293398e5ef3.roa File: 32805458-b91a-306d-8dc2-a293398e5ef3.roa (raw, json) Hash identifier: fsRyDWKq6s/TilVRFLgcxWmdAXhM8MZ2IN/h5T666uc= Subject key identifier: 81:93:C7:6D:35:C5:AB:FD:3E:E3:DF:5F:41:A0:88:E7:C5:9D:FD:0C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58109D522892AA286858700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32805458-b91a-306d-8dc2-a293398e5ef3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:09:d5:22:89:2a:a2:86:85:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=077b62b7-6a5f-4d96-b457-69ac6a800267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:24:3a:fc:14:e1:a8:04:9b:82:00:5c:bc:12: 89:60:d5:79:08:24:f9:d3:83:d4:fb:87:5b:ab:0c: 41:66:cd:4e:96:4f:bc:27:fb:a2:c7:5e:0c:33:02: 04:ae:6b:b1:f3:30:b8:cc:b1:ce:7b:ed:4e:53:a4: e2:b1:ea:3a:4d:ed:7b:7d:06:d8:7e:17:5f:67:fe: e8:b5:11:5a:7a:59:b5:c3:62:22:a3:c8:4c:ab:2f: 0a:a8:c6:57:fd:af:6b:51:f3:66:d8:73:85:f3:72: bd:8c:06:4c:51:cf:92:f3:a3:97:36:6f:57:cc:ce: 21:fd:0f:00:89:4d:43:83:e7:37:4b:ac:56:de:e2: 73:47:b7:84:a8:73:1b:d7:20:6c:74:70:8d:71:11: 62:2a:ba:b8:8b:1f:1a:62:fa:f3:69:f1:f9:7a:85: 17:37:41:12:b0:43:db:6a:19:ae:16:6c:8b:5f:0d: ed:fc:06:dc:0b:89:a9:e2:94:37:7d:c5:b2:1d:7b: 9c:c1:ef:bb:4d:8f:7e:55:ef:4a:3b:32:f7:bf:63: 95:e9:f1:b4:2f:47:bd:ff:30:84:9d:e1:66:20:16: ab:55:8a:42:77:47:40:a9:ad:a0:6f:29:92:fa:bb: e6:93:16:53:fd:7f:be:ee:19:01:f8:68:10:f3:d2: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:93:C7:6D:35:C5:AB:FD:3E:E3:DF:5F:41:A0:88:E7:C5:9D:FD:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32805458-b91a-306d-8dc2-a293398e5ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:50:a0:3e:32:2a:74:e8:aa:96:51:78:5d:7b:a6:93:6c:29: f8:03:92:c1:59:46:cb:6e:1b:c2:5a:22:01:e2:4d:d7:da:9d: 24:8d:0d:fc:3b:c5:25:ec:5e:b0:c0:3a:a4:d9:29:d2:3c:c1: 6d:f6:6e:6c:cf:e4:18:79:90:6f:38:c6:a1:b9:f5:39:ba:7a: 6e:4e:58:54:75:4b:b3:2c:68:d9:6c:da:f4:8e:ff:f1:cb:50: d9:d5:f1:ea:e2:9f:d6:0b:98:de:4e:ed:24:03:ff:a8:92:72: c8:d4:e0:05:e8:4b:3b:dc:dd:04:70:15:5a:25:ba:7b:e0:87: d7:50:2b:34:3a:9f:b6:e9:4f:b8:32:3f:ea:fe:20:45:af:db: 6d:d2:7a:fb:3e:1f:67:56:86:a3:47:af:ea:f4:a0:a7:10:df: 8c:ff:05:38:d2:c1:a0:a1:76:d8:39:8c:16:f1:a2:11:80:3d: 21:42:72:9a:3f:b1:5f:3f:c3:b2:a0:cf:f1:af:aa:7d:06:95: 50:b4:86:7b:3e:74:ee:1a:d2:4c:23:c5:1d:ef:67:fa:9f:c2: db:7a:cd:4f:0b:ba:fa:2c:1b:4f:13:6a:d9:33:9d:c9:78:84: 1e:ac:de:26:98:6e:e6:86:c0:f1:35:78:36:b2:14:fc:5a:52: b6:c8:12:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQnVIokqooaFhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDc3YjYyYjctNmE1Zi00ZDk2LWI0NTctNjlhYzZhODAwMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiQ6/BThqASbggBcvBKJYNV5CCT504PU+4db qwxBZs1Olk+8J/uix14MMwIErmux8zC4zLHOe+1OU6Tiseo6Te17fQbYfhdfZ/7o tRFaelm1w2Iio8hMqy8KqMZX/a9rUfNm2HOF83K9jAZMUc+S86OXNm9XzM4h/Q8A iU1Dg+c3S6xW3uJzR7eEqHMb1yBsdHCNcRFiKrq4ix8aYvrzafH5eoUXN0ESsEPb ahmuFmyLXw3t/AbcC4mp4pQ3fcWyHXucwe+7TY9+Ve9KOzL3v2OV6fG0L0e9/zCE neFmIBarVYpCd0dAqa2gbymS+rvmkxZT/X++7hkB+GgQ89LI2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGTx201xav9PuPfX0GgiOfFnf0MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzI4MDU0NTgtYjkxYS0z MDZkLThkYzItYTI5MzM5OGU1ZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElQoD4yKnToqpZReF17ppNsKfgDksFZRstuG8JaIgHiTdfanSSNDfw7 xSXsXrDAOqTZKdI8wW32bmzP5Bh5kG84xqG59Tm6em5OWFR1S7MsaNls2vSO//HL UNnV8erin9YLmN5O7SQD/6iScsjU4AXoSzvc3QRwFVolunvgh9dQKzQ6n7bpT7gy P+r+IEWv223Sevs+H2dWhqNHr+r0oKcQ34z/BTjSwaChdtg5jBbxohGAPSFCcpo/ sV8/w7Kgz/Gvqn0GlVC0hns+dO4a0kwjxR3vZ/qfwtt6zU8LuvosG08Tatkzncl4 hB6s3iaYbuaGwPE1eDayFPxaUrbIEuA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:25 2025 by rpki-client