$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48a3fbc8-8482-3535-8cc6-b9ac51da7ec5.roa File: 48a3fbc8-8482-3535-8cc6-b9ac51da7ec5.roa (raw, json) Hash identifier: vR7jAc5oXH6i7770Frk8omYZxRb5XXYWYkkMp9Mfj1w= Subject key identifier: 7D:CB:6D:79:EA:A2:10:0F:B0:1A:08:00:D5:4B:66:2C:CF:3C:E0:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819BCF6072F3E796A42FC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48a3fbc8-8482-3535-8cc6-b9ac51da7ec5.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9b:cf:60:72:f3:e7:96:a4:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e41244ff-ebf6-40d2-81c6-85883c4ab341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:c7:0c:6e:1b:d2:bb:4d:c4:7f:38:d5:d7: 2d:b3:67:e3:c7:0e:0d:03:a1:ad:61:7d:b0:89:e5: 55:dd:0c:32:24:fb:c8:74:f6:3e:cf:78:53:ba:97: f6:06:da:a1:47:d9:9a:3a:11:ff:37:74:a0:0c:c5: ac:a4:43:59:e9:62:a9:fb:66:d5:2b:90:67:22:18: f3:8d:5c:47:4e:5c:c1:92:f8:2b:60:43:f4:89:13: 77:d0:c1:b4:e0:2d:f4:bd:0f:3a:d5:f5:20:9e:7f: f5:b1:70:0b:d8:b4:29:00:0e:59:84:7a:0a:c8:68: d2:13:cc:49:d2:6b:95:bb:f7:09:bc:4d:02:cc:14: 7a:ca:5e:ac:a1:4e:06:1d:55:26:7e:b7:91:f1:e7: 47:0d:b3:11:bd:57:b5:c1:be:1d:54:80:51:4e:44: c4:74:4c:88:db:c4:e3:06:46:2a:bf:a8:66:af:6a: 36:ba:42:58:ec:b5:28:f9:0a:07:98:30:e6:ac:f0: 5b:d2:7d:2f:b6:5c:ac:7d:9a:4b:4e:20:d2:25:cd: 5c:9e:c9:d8:7d:6b:1d:68:c9:49:fa:3a:27:6a:8e: 7e:a7:7e:eb:69:07:7c:41:bf:5a:bd:de:cf:2b:5b: b7:2f:af:60:17:b4:54:15:13:2b:c0:9f:d7:ae:74: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CB:6D:79:EA:A2:10:0F:B0:1A:08:00:D5:4B:66:2C:CF:3C:E0:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48a3fbc8-8482-3535-8cc6-b9ac51da7ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:eb:68:69:7a:65:14:06:6a:c0:10:2e:de:1f:11:d4:cd:93: 02:2c:ce:fe:ac:b9:ff:f9:ce:39:b2:7d:ed:40:8e:8a:31:45: 46:3b:90:f5:dc:58:71:6e:8d:5d:4c:56:88:89:07:88:df:1e: bc:bd:71:05:e8:fb:03:c5:62:ed:b1:a3:1c:08:fd:b9:c6:a4: 39:66:88:ac:9e:2e:2f:91:ef:bd:90:72:84:7e:97:7d:cf:7b: 79:23:69:0e:55:90:14:12:e9:d3:73:e2:11:4f:dd:c4:fb:1a: ab:bb:0b:41:f0:41:c8:ea:6e:df:72:d6:e1:c5:7f:1b:98:7c: 85:c2:a1:84:18:c1:36:89:77:26:65:be:0e:d2:ab:df:0d:e4: 7a:d5:98:21:18:30:59:ad:13:fd:b9:be:2c:3e:e8:8e:20:ed: 92:2a:31:e3:fe:d3:72:c1:b7:fc:3b:ec:ff:3d:0e:35:d9:c3: 3b:b4:dc:9d:29:5a:08:0f:41:91:61:41:b8:6e:09:10:fe:61: c2:00:41:76:a1:ab:12:7f:1e:cb:ae:de:3e:f2:f8:fa:6e:38: 8b:16:a0:c9:84:15:50:c4:7a:56:40:1b:79:de:ba:be:ad:6c: c3:b9:53:54:26:89:a2:f1:ee:4b:b9:07:f3:65:b2:38:b6:09: 4a:0b:db:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZvPYHLz55akL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTQxMjQ0ZmYtZWJmNi00MGQyLTgxYzYtODU4ODNjNGFiMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuPHDG4b0rtNxH841dcts2fjxw4NA6GtYX2w ieVV3QwyJPvIdPY+z3hTupf2BtqhR9maOhH/N3SgDMWspENZ6WKp+2bVK5BnIhjz jVxHTlzBkvgrYEP0iRN30MG04C30vQ861fUgnn/1sXAL2LQpAA5ZhHoKyGjSE8xJ 0muVu/cJvE0CzBR6yl6soU4GHVUmfreR8edHDbMRvVe1wb4dVIBRTkTEdEyI28Tj BkYqv6hmr2o2ukJY7LUo+QoHmDDmrPBb0n0vtlysfZpLTiDSJc1cnsnYfWsdaMlJ +jonao5+p37raQd8Qb9avd7PK1u3L69gF7RUFRMrwJ/XrnQ4WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3LbXnqohAPsBoIANVLZizPPOD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDhhM2ZiYzgtODQ4Mi0z NTM1LThjYzYtYjlhYzUxZGE3ZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLraGl6ZRQGasAQLt4fEdTNkwIszv6suf/5zjmyfe1AjooxRUY7kPXc WHFujV1MVoiJB4jfHry9cQXo+wPFYu2xoxwI/bnGpDlmiKyeLi+R772QcoR+l33P e3kjaQ5VkBQS6dNz4hFP3cT7Gqu7C0HwQcjqbt9y1uHFfxuYfIXCoYQYwTaJdyZl vg7Sq98N5HrVmCEYMFmtE/25viw+6I4g7ZIqMeP+03LBt/w77P89DjXZwzu03J0p WggPQZFhQbhuCRD+YcIAQXahqxJ/Hsuu3j7y+PpuOIsWoMmEFVDEelZAG3neur6t bMO5U1QmiaLx7ku5B/Nlsji2CUoL2+0= -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:09 2025 by rpki-client