$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa File: 3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa (raw, json) Hash identifier: AhkWEx9BanInFZZ+sosjRqABOUE3RWA7nNPaVVec8Lg= Subject key identifier: DD:02:69:C3:09:D6:09:91:15:21:92:C4:6C:40:0F:59:90:74:1C:57 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58190738C31C2EC461009A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 70.41.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:90:73:8c:31:c2:ec:46:10:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=919a5721-7d1e-43e0-ac83-a4b84df1e34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:01:3e:ce:98:1d:1f:11:c1:6c:6c:13:ce: 2a:82:74:ab:a6:4c:dc:94:83:d9:8e:12:ef:32:9d: c8:14:f1:92:5b:10:f8:ea:dc:b3:81:9e:cd:ee:e7: 3d:fc:7e:7d:c3:de:1b:29:83:69:2e:00:33:86:d9: 23:6c:15:1b:4e:95:32:80:f3:a5:83:5f:a1:71:fa: eb:5f:ac:9a:ab:42:ab:c3:99:99:67:a1:9d:1b:1a: 76:e8:d6:cf:00:53:e6:26:57:c1:29:73:24:66:d7: 27:26:1a:02:c9:22:df:61:b4:f3:dd:c7:67:d0:7f: 30:66:0d:3a:3b:a9:28:fb:60:85:6f:b4:4e:29:62: b7:13:69:b5:e4:bf:0a:0b:15:c4:a6:f6:8d:33:ba: ad:9e:11:a1:13:05:ee:77:e6:bf:fe:bb:ad:45:55: d5:fa:3a:fa:a5:02:a3:ca:3b:bf:c9:d2:1f:aa:6d: 04:b5:f5:f4:65:10:93:41:f0:dc:9d:a1:61:ce:6c: c8:95:10:3c:39:8e:33:12:d9:51:3e:9c:8b:d9:c0: 81:9f:2b:8f:92:7a:1e:15:0f:ca:4a:58:8a:be:a8: 26:6d:4b:0f:3e:75:a7:8a:4c:71:5d:89:e2:b6:73: f9:83:aa:38:1f:f4:f6:e7:8f:d9:9c:31:29:f7:c6: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:02:69:C3:09:D6:09:91:15:21:92:C4:6C:40:0F:59:90:74:1C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:11:93:c4:48:93:90:46:40:3d:84:54:3f:2d:49:44:b2:7e: 4d:e6:d6:f7:5e:fb:c7:6e:15:1c:81:e1:02:a4:d8:e6:b6:b4: 70:d3:6a:5e:91:84:39:40:b3:97:20:01:f0:75:9f:df:78:71: 09:a6:25:6b:18:9f:f6:f7:f6:b7:d7:8f:d1:19:92:ad:40:13: 27:90:04:e4:82:82:6d:ac:f7:a1:25:8b:ee:11:29:1b:bc:53: 1f:fa:cb:70:48:03:3e:79:23:f8:11:26:67:7e:fc:87:7a:b4: fd:3e:e3:45:b5:07:c5:16:f8:a2:7e:c4:e4:74:94:23:9c:45: 75:f2:3b:7b:7a:5d:60:f0:93:03:0d:07:9f:9a:cb:51:69:2a: 37:b2:35:5c:2b:00:d8:46:17:92:d3:34:87:cf:ad:1b:8b:a7: e1:3a:a1:99:d0:cc:fb:d6:ba:d0:db:c8:ce:3e:19:e0:be:33: fd:e9:cb:0a:30:1c:a8:4b:f7:11:87:b3:d1:26:05:41:ac:96: 19:fb:a5:56:05:4c:5a:ee:e0:0b:8c:57:3c:4f:10:5c:c1:59: 4c:52:c0:b9:2b:01:97:76:2d:dc:cc:b8:cc:07:07:b5:82:9d: 48:ad:35:f2:a5:8b:f5:de:c0:52:48:3d:ff:1f:85:bd:0a:b3: 96:30:9b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZBzjDHC7EYQCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTE5YTU3MjEtN2QxZS00M2UwLWFjODMtYTRiODRkZjFlMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX0BPs6YHR8RwWxsE84qgnSrpkzclIPZjhLv Mp3IFPGSWxD46tyzgZ7N7uc9/H59w94bKYNpLgAzhtkjbBUbTpUygPOlg1+hcfrr X6yaq0Krw5mZZ6GdGxp26NbPAFPmJlfBKXMkZtcnJhoCySLfYbTz3cdn0H8wZg06 O6ko+2CFb7ROKWK3E2m15L8KCxXEpvaNM7qtnhGhEwXud+a//rutRVXV+jr6pQKj yju/ydIfqm0EtfX0ZRCTQfDcnaFhzmzIlRA8OY4zEtlRPpyL2cCBnyuPknoeFQ/K SliKvqgmbUsPPnWnikxxXYnitnP5g6o4H/T254/ZnDEp98YHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0CacMJ1gmRFSGSxGxAD1mQdBxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzgxMGU3YjItZDkyYS0z NjBmLTgyMWEtYWNhOGNhMTJmNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRikwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0Rk8RIk5BGQD2EVD8tSUSyfk3m1vde+8duFRyB4QKk2Oa2tHDTal6R hDlAs5cgAfB1n994cQmmJWsYn/b39rfXj9EZkq1AEyeQBOSCgm2s96Eli+4RKRu8 Ux/6y3BIAz55I/gRJmd+/Id6tP0+40W1B8UW+KJ+xOR0lCOcRXXyO3t6XWDwkwMN B5+ay1FpKjeyNVwrANhGF5LTNIfPrRuLp+E6oZnQzPvWutDbyM4+GeC+M/3pywow HKhL9xGHs9EmBUGslhn7pVYFTFru4AuMVzxPEFzBWUxSwLkrAZd2LdzMuMwHB7WC nUitNfKli/XewFJIPf8fhb0Ks5Ywm0c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:03 2025 by rpki-client