$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3aac6ddf-25bc-3471-95d4-ced84ad90e3e.roa File: 3aac6ddf-25bc-3471-95d4-ced84ad90e3e.roa (raw, json) Hash identifier: Z4z5Ywouv2E+qUOZ9S4FdLN8X20OX0o0roTRLZ+x5Bc= Subject key identifier: 15:00:83:47:3C:B6:70:07:CE:98:9F:84:47:22:27:36:33:B4:39:8E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810711AE06A0B683D49A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3aac6ddf-25bc-3471-95d4-ced84ad90e3e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:07:11:ae:06:a0:b6:83:d4:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7fd50bdf-db99-43a4-86e9-47e79b054559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:ea:ff:c1:7c:ee:47:04:d1:9a:f8:71:fb: dc:9f:bb:f3:f7:08:d5:cc:04:e1:31:52:0e:fb:a7: 8d:96:9a:3e:39:08:94:6b:2d:b1:ac:96:47:a2:83: a6:dd:f5:ad:7a:1c:e6:d1:5b:f8:4c:84:13:81:d4: 89:c7:61:09:04:7e:6c:7c:b3:9c:47:58:eb:59:5c: 1f:6c:d8:b2:22:58:aa:20:8d:34:21:5b:fd:de:03: 4f:d8:78:b0:de:3d:52:da:ab:9b:a6:b9:0b:c2:f0: af:56:d3:e0:db:b7:2b:1a:17:0d:66:89:59:62:12: f5:3f:58:a9:63:36:b5:72:73:67:d1:fd:8c:aa:ec: 27:bc:79:a6:39:14:0b:ad:f8:94:1e:17:cd:0e:70: b0:00:f2:3b:ba:d0:b4:a5:29:42:aa:5c:22:c5:db: 1c:64:e9:77:e6:cf:2d:5c:f6:7b:d0:ea:f6:8b:88: d0:92:7c:4b:8d:a3:5e:c6:57:77:6e:76:f8:1e:ec: 7f:0a:4a:eb:8e:f8:ab:00:c1:dc:12:aa:4d:ce:47: 45:18:ad:6f:b1:8b:95:b5:f4:ae:3a:b3:82:b5:ff: fd:fe:9c:0c:bf:20:35:64:18:e9:68:f5:80:10:a7: c1:57:cf:bb:f2:ec:1d:18:a7:b2:6f:f8:20:9f:3d: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:00:83:47:3C:B6:70:07:CE:98:9F:84:47:22:27:36:33:B4:39:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3aac6ddf-25bc-3471-95d4-ced84ad90e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ac:b8:36:49:a5:7e:8f:fd:07:ba:10:d8:d1:29:64:66:10: 83:80:38:df:61:e5:89:8e:24:de:49:dd:6f:b2:77:e3:83:3e: 23:c3:5c:8e:19:4a:80:dc:30:5e:25:68:44:df:e3:c0:30:4b: 0f:96:30:b5:c3:e3:33:97:ef:ff:b9:32:94:6b:77:6b:86:f1: 55:95:17:29:f0:4e:7e:96:7a:52:3e:d9:6d:fb:7e:06:f9:e1: 16:aa:bc:8a:97:93:c5:81:24:6d:e1:10:4d:c1:c3:45:7f:b5: ec:0c:e5:e4:af:ee:7e:ff:e5:55:5c:ac:8c:7f:11:22:98:53: a1:62:0a:1e:1e:aa:c5:0c:c2:99:fe:09:70:ba:04:7f:6d:d1: df:8a:8d:ee:b7:67:4f:3c:05:6d:18:06:bb:f6:b9:f9:7f:2e: a5:6c:8d:b1:77:5c:4a:47:59:4d:fb:ff:05:27:2b:36:1f:f4: e8:81:11:77:d3:7b:76:95:6c:d4:78:c7:51:ef:2b:20:4f:5f: d0:55:fd:d8:68:8d:3b:9b:3a:22:52:aa:33:e2:9a:32:db:c7: 92:ce:86:47:70:e2:d5:b2:94:b0:5c:f5:93:56:60:3f:ec:57: 19:0c:b6:54:42:4e:97:05:e8:24:19:bc:6a:70:d4:2e:d6:b3: d4:95:00:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQcRrgagtoPUmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2ZkNTBiZGYtZGI5OS00M2E0LTg2ZTktNDdlNzliMDU0NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdHq/8F87kcE0Zr4cfvcn7vz9wjVzAThMVIO +6eNlpo+OQiUay2xrJZHooOm3fWtehzm0Vv4TIQTgdSJx2EJBH5sfLOcR1jrWVwf bNiyIliqII00IVv93gNP2Hiw3j1S2qubprkLwvCvVtPg27crGhcNZolZYhL1P1ip Yza1cnNn0f2MquwnvHmmORQLrfiUHhfNDnCwAPI7utC0pSlCqlwixdscZOl35s8t XPZ70Or2i4jQknxLjaNexld3bnb4Hux/CkrrjvirAMHcEqpNzkdFGK1vsYuVtfSu OrOCtf/9/pwMvyA1ZBjpaPWAEKfBV8+78uwdGKeyb/ggnz3MdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUAg0c8tnAHzpifhEciJzYztDmOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FhYzZkZGYtMjViYy0z NDcxLTk1ZDQtY2VkODRhZDkwZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKysuDZJpX6P/Qe6ENjRKWRmEIOAON9h5YmOJN5J3W+yd+ODPiPDXI4Z SoDcMF4laETf48AwSw+WMLXD4zOX7/+5MpRrd2uG8VWVFynwTn6WelI+2W37fgb5 4RaqvIqXk8WBJG3hEE3Bw0V/tewM5eSv7n7/5VVcrIx/ESKYU6FiCh4eqsUMwpn+ CXC6BH9t0d+Kje63Z088BW0YBrv2ufl/LqVsjbF3XEpHWU37/wUnKzYf9OiBEXfT e3aVbNR4x1HvKyBPX9BV/dhojTubOiJSqjPimjLbx5LOhkdw4tWylLBc9ZNWYD/s VxkMtlRCTpcF6CQZvGpw1C7Ws9SVAMc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:21 2025 by rpki-client