$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa File: 39487b0b-22aa-390d-96e4-c72ab53e1c06.roa (raw, json) Hash identifier: o7Efm4yXWu2p1PcLLkmkl98H4uUtt3p5/CmbXY6jqO0= Subject key identifier: F2:12:20:5D:82:5F:A6:1B:34:7B:E6:F5:6C:F7:0D:70:C7:79:BB:77 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819BA48C347D3012498BE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9b:a4:8c:34:7d:30:12:49:8b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=509c8c3a-68aa-46ed-8213-087ad192c662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:76:eb:ab:70:25:1b:d2:29:8c:30:f6:2f:55: 57:8a:1c:1b:e7:c2:01:43:1d:1f:22:d1:2f:0d:ab: 57:c5:cb:9d:2b:12:85:6d:52:bd:51:6c:c1:31:14: 6b:a7:52:48:86:66:52:e8:48:e4:69:0d:79:55:fb: c1:00:01:3f:d4:c2:2b:63:ff:d0:ea:b7:e4:c5:0d: ec:00:15:39:d3:3f:e2:58:71:2a:f3:f0:c4:65:44: de:36:e1:53:44:63:9f:07:07:a1:9d:f6:fd:cc:08: 94:42:f8:06:63:38:20:09:fe:c3:b2:32:4e:39:98: c0:2b:5c:1d:e9:92:b4:c8:13:4d:99:1b:75:5c:3b: 5a:74:2f:53:03:c3:b9:fb:63:fc:8b:71:fc:02:df: 1b:bc:ec:98:ec:fb:87:be:cc:c7:a1:35:b2:be:e7: be:8e:0d:83:93:0b:e1:8c:d4:ff:d9:66:e9:55:e7: d4:cd:f3:e7:57:7b:16:e6:d2:2c:ae:15:80:14:27: 7c:88:1f:9e:49:3c:ba:1d:42:da:4f:cd:cd:42:ba: c2:8e:e6:06:7d:f1:41:3b:a1:37:1a:5b:a4:3e:ff: 42:93:fa:9b:ff:b3:f9:93:6b:45:f9:36:1f:02:4e: 19:4c:ac:ce:80:1f:c4:af:34:b2:2d:83:b1:0b:5a: ae:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:20:5D:82:5F:A6:1B:34:7B:E6:F5:6C:F7:0D:70:C7:79:BB:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:42:ff:1d:dc:24:05:8f:2a:ae:f2:cc:db:e4:11:d1:a4:47: ac:b9:b4:b8:02:aa:6e:f6:f6:15:50:8a:f3:2e:e7:45:58:ca: d8:aa:2a:72:5b:09:9a:12:d7:d8:b0:2b:a1:b1:bb:4c:61:bc: e1:b6:4d:0c:0b:47:2c:23:d2:10:3b:06:4a:ef:50:2d:06:3a: fe:09:c1:0c:99:2e:c1:9d:d0:d0:83:8b:67:de:41:1e:97:c9: b7:dc:57:a6:77:3b:93:f0:12:c9:b8:e6:de:9e:18:4a:46:7f: 82:7a:f6:c9:ae:c6:32:ab:e9:20:cb:62:34:35:2f:1d:49:da: 17:1e:4c:12:42:07:af:13:5a:43:7a:3d:e3:5f:30:b1:bb:d1: 6a:96:a3:3a:c2:c0:7a:bd:3b:f2:fb:6f:57:9d:4c:3b:6f:f2: 8d:1f:23:33:1d:be:b9:e3:38:a0:fc:b6:06:b9:3a:9e:f6:d5: b2:6a:5e:62:ad:31:03:4e:47:5a:dc:0a:6c:25:15:4d:58:21: c6:ae:5d:09:79:2e:d6:57:ba:61:20:c8:65:ef:ee:29:db:2e: d7:56:2e:23:8a:7d:f2:d1:1a:f0:e9:bc:5b:ee:3a:67:19:fd: d3:bb:71:3b:40:b0:76:ae:17:f9:4a:09:19:07:df:d1:57:a9: 07:d0:2c:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZukjDR9MBJJi+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTA5YzhjM2EtNjhhYS00NmVkLTgyMTMtMDg3YWQxOTJjNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnbrq3AlG9IpjDD2L1VXihwb58IBQx0fItEv DatXxcudKxKFbVK9UWzBMRRrp1JIhmZS6EjkaQ15VfvBAAE/1MIrY//Q6rfkxQ3s ABU50z/iWHEq8/DEZUTeNuFTRGOfBwehnfb9zAiUQvgGYzggCf7DsjJOOZjAK1wd 6ZK0yBNNmRt1XDtadC9TA8O5+2P8i3H8At8bvOyY7PuHvszHoTWyvue+jg2Dkwvh jNT/2WbpVefUzfPnV3sW5tIsrhWAFCd8iB+eSTy6HULaT83NQrrCjuYGffFBO6E3 GlukPv9Ck/qb/7P5k2tF+TYfAk4ZTKzOgB/ErzSyLYOxC1qucQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPISIF2CX6YbNHvm9Wz3DXDHebt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzk0ODdiMGItMjJhYS0z OTBkLTk2ZTQtYzcyYWI1M2UxYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpC/x3cJAWPKq7yzNvkEdGkR6y5tLgCqm729hVQivMu50VYytiqKnJb CZoS19iwK6Gxu0xhvOG2TQwLRywj0hA7BkrvUC0GOv4JwQyZLsGd0NCDi2feQR6X ybfcV6Z3O5PwEsm45t6eGEpGf4J69smuxjKr6SDLYjQ1Lx1J2hceTBJCB68TWkN6 PeNfMLG70WqWozrCwHq9O/L7b1edTDtv8o0fIzMdvrnjOKD8tga5Op721bJqXmKt MQNOR1rcCmwlFU1YIcauXQl5LtZXumEgyGXv7inbLtdWLiOKffLRGvDpvFvuOmcZ /dO7cTtAsHauF/lKCRkH39FXqQfQLFI= -----END CERTIFICATE-----Generated at Sat Apr 12 00:06:23 2025 by rpki-client