$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35ec969e-0f38-3d66-be5d-c772df73a733.roa File: 35ec969e-0f38-3d66-be5d-c772df73a733.roa (raw, json) Hash identifier: 0eeytn80MwT9kvsAYmpX9TIP3OEnrFaWlNB/k/MQ6ic= Subject key identifier: 74:85:42:C6:44:C8:61:4C:FB:3B:93:DF:17:65:DD:C7:F5:FB:6C:B2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DEF9F82C4E9266A300380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35ec969e-0f38-3d66-be5d-c772df73a733.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 40306 IP address blocks: 70.41.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:ef:9f:82:c4:e9:26:6a:30:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=7d6cb9b7-29cd-4414-8489-fa679ba28c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:02:bc:95:67:c4:a0:62:4b:77:fd:c1:63: 09:23:3f:54:27:4f:f2:18:0b:3b:eb:bc:5a:24:6f: ec:5e:2c:de:56:9e:5c:f1:bc:e0:76:9f:45:5d:83: c6:f0:5e:90:f0:fa:b1:d3:db:d9:88:7e:93:48:b8: 41:49:44:5c:a3:26:fe:4c:61:21:61:d9:07:6a:a4: 02:b2:70:51:96:b3:47:71:94:69:0a:c2:d1:0b:74: d7:8c:ab:b2:51:33:28:43:1f:6d:54:c3:e4:7b:e4: dd:4c:6c:df:05:b6:f5:bf:a0:61:13:73:c1:ec:b9: 7a:53:14:fa:17:3b:d9:53:b2:a6:c4:e5:60:f5:b6: f3:f3:e6:23:5e:4b:a4:d1:91:65:a6:36:be:fd:1a: 27:28:23:cd:85:4d:d6:92:39:1b:aa:60:73:69:e7: 81:7a:fd:83:69:bf:97:fb:46:99:61:76:91:1c:03: 5b:ce:ce:2b:53:c8:5b:4e:65:35:c7:15:2f:71:19: b5:49:d4:1f:4b:83:6f:41:a8:ad:99:64:bb:62:04: 10:e6:4a:2e:dc:5c:3a:1c:e2:14:1d:7c:b6:42:5d: 33:57:05:8d:77:64:db:58:32:8b:28:f4:c5:16:79: 89:7a:58:40:69:ec:b7:b7:e7:e9:9e:c0:b9:8d:5d: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:85:42:C6:44:C8:61:4C:FB:3B:93:DF:17:65:DD:C7:F5:FB:6C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35ec969e-0f38-3d66-be5d-c772df73a733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:47:a8:40:4a:bc:bf:91:d3:2a:3f:be:7b:78:d4:45:d6:72: 3b:4f:cb:ff:44:7a:87:73:d4:d0:fe:e5:7c:ca:7e:ad:16:51: 0e:51:27:1f:96:21:ab:74:d8:c0:6a:ec:bd:76:95:ea:94:24: 5f:e4:32:db:ec:1b:86:49:53:c2:c9:03:d1:11:87:15:cd:d4: fd:fa:80:37:cd:e5:f9:9e:8c:06:8d:3c:9c:1f:b2:a3:10:54: 80:c2:e5:38:d0:30:d5:35:e3:cd:0b:02:40:39:15:87:5c:67: 40:72:29:24:1a:a3:af:27:56:f9:eb:60:9c:7c:25:7c:5c:c0: d4:32:57:5b:d7:12:65:7c:93:c1:7a:86:38:aa:8a:a8:97:ed: 5d:51:b9:3d:89:47:d7:d7:dc:a3:dd:80:a4:bb:b7:bb:47:16: 4d:0a:2c:74:7c:ff:6b:bb:3f:8d:36:c8:d0:0c:7c:f6:e1:4c: 08:78:4a:b9:83:a6:3f:dd:bc:44:42:21:a2:fb:07:79:7e:4a: b2:ef:d1:d4:fa:8d:7f:1b:64:7e:40:74:2b:73:69:31:12:5a: 61:e4:17:54:a6:8a:52:93:a1:af:3c:30:96:f1:48:6b:e7:e2: 1d:41:28:c0:ba:8e:93:c9:1a:23:50:78:91:8b:18:91:89:de: cf:4e:c0:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPe+fgsTpJmowA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk N2Q2Y2I5YjctMjljZC00NDE0LTg0ODktZmE2NzliYTI4YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmoCvJVnxKBiS3f9wWMJIz9UJ0/yGAs767xa JG/sXizeVp5c8bzgdp9FXYPG8F6Q8Pqx09vZiH6TSLhBSURcoyb+TGEhYdkHaqQC snBRlrNHcZRpCsLRC3TXjKuyUTMoQx9tVMPke+TdTGzfBbb1v6BhE3PB7Ll6UxT6 FzvZU7KmxOVg9bbz8+YjXkuk0ZFlpja+/RonKCPNhU3WkjkbqmBzaeeBev2Dab+X +0aZYXaRHANbzs4rU8hbTmU1xxUvcRm1SdQfS4NvQaitmWS7YgQQ5kou3Fw6HOIU HXy2Ql0zVwWNd2TbWDKLKPTFFnmJelhAaey3t+fpnsC5jV3fywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSFQsZEyGFM+zuT3xdl3cf1+2yyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzVlYzk2OWUtMGYzOC0z ZDY2LWJlNWQtYzc3MmRmNzNhNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRHqEBKvL+R0yo/vnt41EXWcjtPy/9Eeodz1ND+5XzKfq0WUQ5RJx+W Iat02MBq7L12leqUJF/kMtvsG4ZJU8LJA9ERhxXN1P36gDfN5fmejAaNPJwfsqMQ VIDC5TjQMNU1480LAkA5FYdcZ0ByKSQao68nVvnrYJx8JXxcwNQyV1vXEmV8k8F6 hjiqiqiX7V1RuT2JR9fX3KPdgKS7t7tHFk0KLHR8/2u7P402yNAMfPbhTAh4SrmD pj/dvERCIaL7B3l+SrLv0dT6jX8bZH5AdCtzaTESWmHkF1SmilKToa88MJbxSGvn 4h1BKMC6jpPJGiNQeJGLGJGJ3s9OwE0= -----END CERTIFICATE-----Generated at Sun Apr 28 15:54:02 2024 by rpki-client on console-fra.rpki-client.org