$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/62dd9458-1b9f-3449-8feb-260d96174918.roa File: 62dd9458-1b9f-3449-8feb-260d96174918.roa (raw, json) Hash identifier: 5hUCP2M5uN95Roxta2Qm+dsWHdbLyawJv2lxM5mWMag= Subject key identifier: B1:F0:22:42:E8:39:59:D3:05:E6:E4:D1:26:D3:28:99:12:B6:8D:D9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810312BCD1E21D814D6380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/62dd9458-1b9f-3449-8feb-260d96174918.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:03:12:bc:d1:e2:1d:81:4d:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d8b12137-cbb8-4129-b3ac-a7cf4096cf23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:67:8b:e7:48:33:eb:42:5f:8f:65:2f:8b:84: 74:f1:ba:92:b2:78:99:d3:96:a5:5c:b2:1a:4c:cb: 39:eb:62:6f:96:8b:fe:c3:c7:7c:35:5e:0c:59:52: db:4f:5d:5e:15:59:d7:2e:39:66:6b:af:d4:b4:e6: 79:61:ca:45:c7:84:3e:dd:aa:19:f4:a2:8a:42:91: 78:b9:1d:5e:de:79:9f:b7:99:a9:5f:81:c9:77:09: 79:e8:f1:04:3f:20:16:25:7f:89:b6:82:d3:cb:8e: 68:77:bb:25:0f:50:68:ae:0f:e6:f4:bc:0d:92:20: 7c:54:b3:a1:7f:9d:08:74:68:7f:9e:87:d2:31:0a: aa:e3:0c:03:aa:f9:3d:f5:c3:ac:99:29:e1:83:9d: f8:41:99:37:8b:0c:08:47:3e:3c:9c:e2:1d:2b:44: 48:e8:07:f4:10:1e:7e:9b:47:5e:40:34:2c:48:80: 58:6b:25:31:ad:15:33:5c:16:3d:3f:be:23:ae:b8: 4b:c3:57:aa:48:24:b2:22:63:57:ce:ce:a1:f3:70: b2:28:8d:a3:80:3e:4e:ab:c0:87:1d:9d:c0:fc:73: af:8c:fc:26:6f:b1:93:92:02:f2:58:66:e1:40:6f: 53:59:a5:62:97:c4:6d:97:e5:dc:9d:e4:8e:43:0f: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F0:22:42:E8:39:59:D3:05:E6:E4:D1:26:D3:28:99:12:B6:8D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/62dd9458-1b9f-3449-8feb-260d96174918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2d:90:0f:7d:9f:48:29:06:46:30:ef:d2:b8:79:61:25:d5: 0c:87:5f:b3:75:2e:f4:82:85:80:71:b9:e4:d5:79:9a:8e:b0: 77:d6:dc:59:6d:a2:8d:08:15:82:e6:7d:22:5e:5e:6d:d9:bc: 40:c9:c3:7e:96:78:b4:0e:cd:56:ba:03:02:51:6f:2a:a8:45: 47:b1:14:b7:b0:50:7d:40:8c:15:d3:4d:5a:9f:49:45:0f:1a: 96:9d:92:20:59:08:77:a6:e9:d5:85:1f:0b:c6:81:b2:4c:6c: a8:39:d3:95:55:f2:38:35:a7:82:57:37:6b:5c:79:c8:4e:a8: 99:7b:52:07:ac:e9:28:7d:86:c1:49:b0:7a:13:09:f1:dc:b4: cf:7d:4a:71:16:10:34:c0:3e:92:83:12:55:79:a8:9e:cd:e2: cf:79:d0:97:a5:41:cf:d8:43:da:b9:ab:99:61:cf:75:4b:8f: 8c:de:a3:1f:31:66:e2:0c:ce:5b:5f:4b:13:29:81:3b:19:87: c9:ee:be:60:e9:bc:03:2e:72:e5:e3:e3:b0:03:18:d0:27:60: 56:91:47:c5:07:6f:a6:e7:8a:c3:93:9c:34:e6:14:b1:cd:db: 36:6d:1b:d9:ab:cb:8c:b3:cb:9a:53:0c:40:a6:df:58:cd:77: 6e:c4:5c:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQMSvNHiHYFNY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDhiMTIxMzctY2JiOC00MTI5LWIzYWMtYTdjZjQwOTZjZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGeL50gz60Jfj2Uvi4R08bqSsniZ05alXLIa TMs562Jvlov+w8d8NV4MWVLbT11eFVnXLjlma6/UtOZ5YcpFx4Q+3aoZ9KKKQpF4 uR1e3nmft5mpX4HJdwl56PEEPyAWJX+JtoLTy45od7slD1Borg/m9LwNkiB8VLOh f50IdGh/nofSMQqq4wwDqvk99cOsmSnhg534QZk3iwwIRz48nOIdK0RI6Af0EB5+ m0deQDQsSIBYayUxrRUzXBY9P74jrrhLw1eqSCSyImNXzs6h83CyKI2jgD5Oq8CH HZ3A/HOvjPwmb7GTkgLyWGbhQG9TWaVil8Rtl+XcneSOQw8njwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHwIkLoOVnTBebk0SbTKJkSto3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjJkZDk0NTgtMWI5Zi0z NDQ5LThmZWItMjYwZDk2MTc0OTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAtkA99n0gpBkYw79K4eWEl1QyHX7N1LvSChYBxueTVeZqOsHfW3Flt oo0IFYLmfSJeXm3ZvEDJw36WeLQOzVa6AwJRbyqoRUexFLewUH1AjBXTTVqfSUUP GpadkiBZCHem6dWFHwvGgbJMbKg505VV8jg1p4JXN2tcechOqJl7Uges6Sh9hsFJ sHoTCfHctM99SnEWEDTAPpKDElV5qJ7N4s950JelQc/YQ9q5q5lhz3VLj4zeox8x ZuIMzltfSxMpgTsZh8nuvmDpvAMucuXj47ADGNAnYFaRR8UHb6bnisOTnDTmFLHN 2zZtG9mry4yzy5pTDECm31jNd27EXAM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:35 2025 by rpki-client