$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b36feb-81a2-301d-ab71-63f1aa4e93df.roa File: 41b36feb-81a2-301d-ab71-63f1aa4e93df.roa (raw, json) Hash identifier: 38chekkwsYcdBO16P8+acWss3wsYGpwWOS9uu/RXJSE= Subject key identifier: 8A:49:C7:69:11:20:A1:18:62:75:96:83:B4:4B:99:F8:9C:05:56:24 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819AF830004558C00BFF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b36feb-81a2-301d-ab71-63f1aa4e93df.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9a:f8:30:00:45:58:c0:0b:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a3b8b089-73a8-4d4e-b554-07720ab21e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a0:24:9c:3a:d9:3d:66:cc:31:93:fc:27:71: e2:c0:37:ba:fb:35:ba:55:64:0b:a6:84:1f:36:ae: de:0a:b6:cd:3b:5b:21:f5:e5:bd:ba:6d:36:90:22: 1c:58:20:78:6b:5e:84:5f:10:da:6b:b2:35:07:56: c8:00:43:56:f5:ee:83:c6:e5:35:d8:41:97:4d:35: 4f:00:c1:15:d1:ff:dc:02:67:87:c5:90:f2:8f:4e: 0c:5a:26:36:75:e7:21:df:e3:de:82:03:33:a0:86: 7a:fe:2b:33:5a:16:16:89:59:e5:34:31:0e:5e:ea: 52:9e:99:16:8d:93:ce:72:79:aa:fa:57:0a:ff:e2: 9e:8f:51:63:71:c0:9f:17:71:8e:59:72:8e:67:65: 91:d3:0a:6f:ad:d8:d1:7d:51:c0:5f:e3:8e:39:4d: 7b:62:bd:21:49:9e:a9:c2:d1:e6:4c:72:34:cf:35: 34:e6:e0:2d:0e:34:0b:b4:11:c5:33:bd:8c:36:e0: 97:2d:5b:2e:70:59:0f:a3:e2:5d:76:0f:be:52:38: 1d:40:66:b4:fa:8b:3d:b7:6d:f1:37:5c:33:70:31: ac:1b:12:53:f1:46:cc:83:6f:0c:24:3c:4d:70:b4: 88:7b:8f:f9:13:8a:29:15:ad:d1:d9:bf:96:5a:6b: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:49:C7:69:11:20:A1:18:62:75:96:83:B4:4B:99:F8:9C:05:56:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41b36feb-81a2-301d-ab71-63f1aa4e93df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c4:04:30:4c:9c:99:ba:d5:01:3c:36:fd:9a:c2:c6:60:79: 07:25:ee:ec:4d:08:10:a6:37:27:0d:bb:dc:bf:f1:39:a8:be: 30:a3:49:7f:f7:f3:d9:62:b7:2c:01:6d:c6:67:ec:44:59:22: 97:3b:1e:7a:2c:de:b4:15:fa:4e:16:c9:4d:31:31:88:03:53: 0b:f1:1a:2b:93:3f:56:4e:5d:8b:70:55:a7:e0:83:94:c5:9c: 7e:77:a0:a4:f7:37:0e:02:5c:53:7f:f1:20:d6:3e:35:50:59: bf:1b:1b:99:0c:c8:51:88:94:d8:18:6c:52:5b:79:a6:a5:44: 53:15:5d:10:e6:04:0e:5d:b6:62:9f:92:b6:33:5d:69:eb:b1: 3a:85:ba:f8:3c:33:b2:9b:a6:a3:de:47:cf:11:b8:90:9e:df: a7:63:f7:3c:48:08:e4:3f:24:a4:43:58:44:ab:92:df:c5:ea: 25:85:30:90:e5:a1:5b:c2:72:ad:30:d8:99:72:c6:8e:80:6c: 9d:cc:b9:6e:d2:aa:11:e9:02:02:ab:dd:65:3b:22:50:54:7b: 1d:7b:ff:88:6e:fc:fc:62:9c:72:0a:40:b4:e0:0a:53:0c:e6: 7e:23:77:9a:61:28:97:96:28:55:6f:79:86:e1:94:04:f4:83: 23:24:3f:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZr4MABFWMAL/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTNiOGIwODktNzNhOC00ZDRlLWI1NTQtMDc3MjBhYjIxZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qAknDrZPWbMMZP8J3HiwDe6+zW6VWQLpoQf Nq7eCrbNO1sh9eW9um02kCIcWCB4a16EXxDaa7I1B1bIAENW9e6DxuU12EGXTTVP AMEV0f/cAmeHxZDyj04MWiY2dech3+PeggMzoIZ6/iszWhYWiVnlNDEOXupSnpkW jZPOcnmq+lcK/+Kej1FjccCfF3GOWXKOZ2WR0wpvrdjRfVHAX+OOOU17Yr0hSZ6p wtHmTHI0zzU05uAtDjQLtBHFM72MNuCXLVsucFkPo+Jddg++UjgdQGa0+os9t23x N1wzcDGsGxJT8UbMg28MJDxNcLSIe4/5E4opFa3R2b+WWmvePwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpJx2kRIKEYYnWWg7RLmficBVYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDFiMzZmZWItODFhMi0z MDFkLWFiNzEtNjNmMWFhNGU5M2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/EBDBMnJm61QE8Nv2awsZgeQcl7uxNCBCmNycNu9y/8TmovjCjSX/3 89litywBbcZn7ERZIpc7Hnos3rQV+k4WyU0xMYgDUwvxGiuTP1ZOXYtwVafgg5TF nH53oKT3Nw4CXFN/8SDWPjVQWb8bG5kMyFGIlNgYbFJbeaalRFMVXRDmBA5dtmKf krYzXWnrsTqFuvg8M7KbpqPeR88RuJCe36dj9zxICOQ/JKRDWESrkt/F6iWFMJDl oVvCcq0w2Jlyxo6AbJ3MuW7SqhHpAgKr3WU7IlBUex17/4hu/PxinHIKQLTgClMM 5n4jd5phKJeWKFVveYbhlAT0gyMkPz4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:55 2025 by rpki-client