$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/47b8e7ea-ff0d-356a-9825-f895d605769d.roa File: 47b8e7ea-ff0d-356a-9825-f895d605769d.roa (raw, json) Hash identifier: uLdtigqMrMfFYtf1oZIIbWt5XRfBs8LuDZ3ZT2u0fDs= Subject key identifier: C6:D7:5A:62:8A:65:11:62:F5:99:95:F9:E9:3E:F7:FB:64:68:0D:28 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581994564B2E503164CF620 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/47b8e7ea-ff0d-356a-9825-f895d605769d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:99:45:64:b2:e5:03:16:4c:f6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=09960867-9bef-403f-be10-e9dc1c935735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cb:3a:6a:b9:de:11:ec:db:67:dc:90:32:bb: 77:67:11:15:d4:af:b7:db:8c:36:b6:d6:3a:8c:5e: fe:3e:22:16:62:6a:88:fa:e1:ca:6d:16:68:28:c0: 90:d6:4b:73:6c:d6:a6:d8:e9:1d:32:e8:bd:d3:35: 46:5e:37:b1:88:44:42:d7:f5:1d:8b:1f:93:12:79: 6b:cb:39:77:0d:f8:ef:7a:4e:c0:6a:cf:50:a9:e0: 4e:a1:18:e7:a6:b9:77:17:56:7c:ea:04:b0:7f:42: 89:4c:0b:7e:8c:9c:10:6f:cd:49:36:00:b0:e1:36: 0b:d0:78:bb:44:aa:b1:2a:9b:a7:bf:17:57:f4:c5: 39:3c:67:fd:8c:9a:23:62:5a:e1:da:4a:83:5e:98: 6c:63:c0:56:cd:5b:43:5e:7f:08:02:93:19:0d:80: 2b:11:53:b0:57:8f:a1:8e:35:02:9b:ec:15:fe:eb: a7:91:d2:7d:b6:1c:28:a4:18:c0:ba:96:00:03:4a: 59:f4:ae:34:4f:65:27:e1:89:ee:6d:87:c0:9c:79: 13:ec:84:e0:df:82:8c:63:8d:4e:73:a9:1c:6c:2f: 88:43:10:f0:51:eb:e1:39:95:05:c5:a4:e8:93:35: 44:ce:fc:aa:21:d1:2d:77:0a:6d:c8:64:7a:3f:02: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D7:5A:62:8A:65:11:62:F5:99:95:F9:E9:3E:F7:FB:64:68:0D:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/47b8e7ea-ff0d-356a-9825-f895d605769d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c8:cf:64:d8:eb:48:62:e9:54:f3:b5:bc:f3:62:a2:c7:c5: dd:c4:ac:cf:ca:e6:8e:f8:53:0a:9a:8d:a4:e8:61:a6:18:04: eb:8f:d7:67:a5:fb:8c:8f:76:94:a9:b0:01:0d:50:40:a7:87: 9b:19:35:ed:e9:47:7b:61:e8:0e:11:c2:87:9c:8b:d4:f6:59: 85:eb:27:96:9f:36:cc:52:73:68:cb:95:f8:49:b3:45:4a:df: a7:e3:ef:35:69:2c:10:e0:a1:98:37:14:7b:99:03:7e:fe:8f: ef:4e:e1:2b:3c:a8:82:30:6b:0d:8f:8d:a4:52:e0:1e:21:12: 4f:a4:73:c6:24:52:41:e7:e4:90:83:2b:aa:67:b0:e8:d2:05: 0e:61:ce:1a:75:36:fd:16:dd:31:6b:be:3f:74:c8:c1:1c:77: 4a:4c:91:fa:bd:8d:e9:50:b6:94:17:31:f0:cc:ae:ce:32:2b: f4:48:2c:7f:7b:a3:87:77:70:7e:9f:40:24:39:7f:b4:7e:2b: 68:f3:38:ec:2c:be:95:1c:89:d5:5e:54:df:dd:ee:64:6d:90: 9c:44:64:2b:3a:11:e2:e7:6a:53:12:b0:59:ab:46:4a:ec:0e: dd:e4:96:2b:52:6d:da:75:e5:62:dd:1c:ca:b7:ad:7e:ba:bd: 20:52:7b:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZlFZLLlAxZM9iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDk5NjA4NjctOWJlZi00MDNmLWJlMTAtZTlkYzFjOTM1NzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMs6arneEezbZ9yQMrt3ZxEV1K+324w2ttY6 jF7+PiIWYmqI+uHKbRZoKMCQ1ktzbNam2OkdMui90zVGXjexiERC1/Udix+TEnlr yzl3Dfjvek7Aas9QqeBOoRjnprl3F1Z86gSwf0KJTAt+jJwQb81JNgCw4TYL0Hi7 RKqxKpunvxdX9MU5PGf9jJojYlrh2kqDXphsY8BWzVtDXn8IApMZDYArEVOwV4+h jjUCm+wV/uunkdJ9thwopBjAupYAA0pZ9K40T2Un4YnubYfAnHkT7ITg34KMY41O c6kcbC+IQxDwUevhOZUFxaTokzVEzvyqIdEtdwptyGR6PwKpMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbXWmKKZRFi9ZmV+ek+9/tkaA0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDdiOGU3ZWEtZmYwZC0z NTZhLTk4MjUtZjg5NWQ2MDU3NjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzIz2TY60hi6VTztbzzYqLHxd3ErM/K5o74UwqajaToYaYYBOuP12el +4yPdpSpsAENUECnh5sZNe3pR3th6A4Rwoeci9T2WYXrJ5afNsxSc2jLlfhJs0VK 36fj7zVpLBDgoZg3FHuZA37+j+9O4Ss8qIIwaw2PjaRS4B4hEk+kc8YkUkHn5JCD K6pnsOjSBQ5hzhp1Nv0W3TFrvj90yMEcd0pMkfq9jelQtpQXMfDMrs4yK/RILH97 o4d3cH6fQCQ5f7R+K2jzOOwsvpUcidVeVN/d7mRtkJxEZCs6EeLnalMSsFmrRkrs Dt3klitSbdp15WLdHMq3rX66vSBSe/0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:55 2025 by rpki-client