$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ad3932a-e45f-3def-b404-fb72dec54d40.roa File: 3ad3932a-e45f-3def-b404-fb72dec54d40.roa (raw, json) Hash identifier: OQKo5Rhj75ZlVHNnADJxdG4y/6yjBR6EElo+g1/t5As= Subject key identifier: 33:59:2B:D6:6E:CA:36:09:6C:07:B0:17:CE:4C:F8:AF:EE:50:90:B9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58197FE8711AA310AD3FA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ad3932a-e45f-3def-b404-fb72dec54d40.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:97:fe:87:11:aa:31:0a:d3:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2a19b508-17e0-4f73-b969-d4b0f4f188d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:df:18:4f:37:f6:28:6f:0c:c6:a3:e3:56:2e: fb:fc:6d:f2:dd:3f:89:39:da:45:0b:20:fe:1f:3e: 55:ab:1f:3a:97:43:70:90:c8:a4:ee:98:48:33:ea: 5c:73:09:ee:a3:f7:8a:87:8f:0c:f6:22:9a:bb:49: 7c:6d:61:42:3d:c2:23:3c:51:ab:b9:e1:95:ca:b8: 61:a9:40:e0:25:cf:c8:cb:15:e5:87:ac:3e:4a:a9: d7:01:24:e4:30:d7:d8:d6:0b:fd:96:79:4e:4e:0e: e7:47:47:1d:13:f6:71:26:b2:94:c4:87:b6:7e:d4: a8:00:e0:9d:52:e5:88:38:36:61:eb:bb:ad:dc:b2: 15:50:b7:53:b0:e6:7b:63:92:78:5e:35:6a:0b:8e: 7f:70:e3:20:55:ae:aa:6d:85:8e:05:26:7b:77:6a: 8d:b4:f3:dd:f1:ff:88:1b:b8:87:96:55:ba:a4:66: 64:88:ae:1d:b4:f8:54:10:13:38:13:0a:3c:16:b1: 89:16:7c:f1:6b:f0:bb:d0:45:bf:d5:a1:9d:46:5e: 70:f8:14:9d:15:1e:2b:7f:20:f1:14:a1:aa:4d:c6: ab:f5:22:f3:9b:32:a0:3a:1e:a2:0e:bd:c5:ae:4b: d2:84:90:de:1d:5f:8d:1e:85:c1:be:39:52:0f:8b: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:59:2B:D6:6E:CA:36:09:6C:07:B0:17:CE:4C:F8:AF:EE:50:90:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ad3932a-e45f-3def-b404-fb72dec54d40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:79:b6:be:5f:88:f3:13:ae:b0:3e:ee:4d:86:88:72:81:bf: 6a:83:e1:d5:b4:7f:ff:6c:53:f4:b5:0e:bb:d2:67:31:57:b0: 6a:73:cc:5c:3a:94:02:ee:c0:b4:7c:1c:14:2f:9d:b6:18:db: b9:d7:10:a7:df:e5:38:19:0c:5d:51:43:1d:6e:5f:b4:e0:9b: 4a:db:d6:1c:d3:8c:c6:e5:b5:db:09:7f:ef:0c:9d:87:05:da: a0:a3:68:de:f6:51:67:b2:0f:53:5c:95:8f:c8:66:6c:2f:51: 2e:47:c5:d8:19:7a:b1:45:7d:f9:cb:a7:ae:01:21:eb:7c:a0: 07:06:5e:f1:c8:d4:b2:71:fb:7d:fa:9d:e5:e2:b9:3a:35:68: be:63:32:6a:6e:48:72:0d:24:cf:ab:09:c6:ef:ff:f6:53:29: d2:6e:72:da:5b:23:73:80:94:d9:41:42:24:96:ff:cc:aa:38: aa:44:fd:d7:fc:3e:57:41:83:3f:46:11:c5:f3:75:ab:c3:6d: 61:d9:9e:6e:18:2d:48:5b:49:c3:2a:c6:09:2a:d7:b5:5c:2a: 81:8d:1f:65:d9:05:63:31:e5:7f:15:e8:85:12:c8:38:7a:74: 74:49:0f:47:74:fa:cb:09:a6:f6:67:ba:1f:b5:87:14:ee:03: df:39:73:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZf+hxGqMQrT+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmExOWI1MDgtMTdlMC00ZjczLWI5NjktZDRiMGY0ZjE4OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht8YTzf2KG8MxqPjVi77/G3y3T+JOdpFCyD+ Hz5Vqx86l0NwkMik7phIM+pccwnuo/eKh48M9iKau0l8bWFCPcIjPFGrueGVyrhh qUDgJc/IyxXlh6w+SqnXASTkMNfY1gv9lnlOTg7nR0cdE/ZxJrKUxIe2ftSoAOCd UuWIODZh67ut3LIVULdTsOZ7Y5J4XjVqC45/cOMgVa6qbYWOBSZ7d2qNtPPd8f+I G7iHllW6pGZkiK4dtPhUEBM4Ewo8FrGJFnzxa/C70EW/1aGdRl5w+BSdFR4rfyDx FKGqTcar9SLzmzKgOh6iDr3FrkvShJDeHV+NHoXBvjlSD4vKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNZK9ZuyjYJbAewF85M+K/uUJC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FkMzkzMmEtZTQ1Zi0z ZGVmLWI0MDQtZmI3MmRlYzU0ZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN5tr5fiPMTrrA+7k2GiHKBv2qD4dW0f/9sU/S1DrvSZzFXsGpzzFw6 lALuwLR8HBQvnbYY27nXEKff5TgZDF1RQx1uX7Tgm0rb1hzTjMbltdsJf+8MnYcF 2qCjaN72UWeyD1NclY/IZmwvUS5HxdgZerFFffnLp64BIet8oAcGXvHI1LJx+336 neXiuTo1aL5jMmpuSHINJM+rCcbv//ZTKdJuctpbI3OAlNlBQiSW/8yqOKpE/df8 PldBgz9GEcXzdavDbWHZnm4YLUhbScMqxgkq17VcKoGNH2XZBWMx5X8V6IUSyDh6 dHRJD0d0+ssJpvZnuh+1hxTuA985c6E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:49 2025 by rpki-client