$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6be0a41d-a08f-3bba-bbdc-3a763ed96ac6.roa File: 6be0a41d-a08f-3bba-bbdc-3a763ed96ac6.roa (raw, json) Hash identifier: V/hqFs8ZWBXDqTRG+fMt6CWT08r9f8EafsaFgz0DZec= Subject key identifier: D9:8D:72:88:75:A2:EA:24:97:A9:AD:6C:06:99:86:CD:5E:BF:38:55 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58198D8FB152E3FDDE80120 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6be0a41d-a08f-3bba-bbdc-3a763ed96ac6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:98:d8:fb:15:2e:3f:dd:e8:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=34d1cda2-aee6-43c3-915e-334369c68d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:e7:da:bb:d9:d6:b1:0b:a0:54:56:73:67: ec:ad:8b:5e:9e:bf:ca:82:2e:53:40:42:8f:7e:a7: 7b:eb:6a:47:08:4d:4c:db:45:74:ba:b4:23:d5:c0: 21:83:c6:0a:95:2f:fc:6c:37:1d:94:33:28:43:57: 7c:18:8a:ae:75:ee:3e:21:a5:64:d9:23:63:e8:4a: c6:43:6d:3c:66:32:a6:9e:11:ca:18:4a:af:aa:90: 74:3c:e1:ed:24:74:80:3b:a0:dc:70:81:91:b7:62: ab:ac:76:83:a5:12:03:5d:ad:0f:96:01:28:aa:31: 54:5b:d8:b9:d8:fc:24:29:a8:dd:2a:62:ba:33:07: 9e:d1:d8:5b:0d:0d:6a:76:6b:7d:fb:09:bd:f1:9b: 2d:11:13:4e:60:f3:cf:12:b1:b9:bb:54:22:7e:8c: b1:dc:de:f3:f0:e1:0b:c4:db:fc:1d:31:51:4d:96: ec:4e:b6:b3:ba:48:94:72:8e:b6:99:9e:d7:4f:a3: eb:b7:b9:16:30:b6:4c:6b:24:1a:af:02:47:45:0d: ea:a1:e6:e5:6f:42:d2:10:a8:4c:5e:ce:59:31:9e: 79:8c:49:80:19:92:76:4f:d4:10:0a:5e:fe:09:98: 91:43:4c:3f:d4:d8:ab:24:2d:2b:c9:62:87:47:6d: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:8D:72:88:75:A2:EA:24:97:A9:AD:6C:06:99:86:CD:5E:BF:38:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6be0a41d-a08f-3bba-bbdc-3a763ed96ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d3:32:f9:dc:5f:2f:96:b7:aa:b7:4b:58:ec:c5:ab:15:1d: fa:55:de:fd:01:e4:54:9e:22:2b:bd:4f:3e:d8:73:29:d1:e9: 5d:68:b3:01:eb:57:1f:e7:10:9d:dd:47:1d:dc:90:cc:a4:b3: 67:63:87:ef:af:34:ad:b0:2e:a7:4f:54:06:c7:a6:48:9c:6d: b9:70:87:ef:43:8e:8c:38:68:a9:e8:32:fb:4a:d2:33:bc:bc: dc:68:96:cd:04:51:fc:bc:f5:a1:3a:73:b6:8e:b7:03:eb:63: 3c:da:1b:5f:bc:f3:16:d5:37:34:22:30:3e:e8:cb:a0:de:e3: 22:03:78:f6:5a:45:42:7c:17:58:3f:8a:bb:7b:19:f0:95:8f: 2f:a3:bd:82:9c:26:9f:e5:09:fd:30:1a:63:30:9a:10:26:00: 15:1a:37:cb:4a:6f:69:8c:04:30:cb:b7:83:58:9f:3b:45:8d: 41:2b:71:84:cf:6f:74:16:ce:cb:76:e6:88:c8:ea:75:28:00: f5:ec:76:38:c5:f5:a2:05:e2:e9:a3:1c:78:31:ff:74:c6:e5: 32:cf:7f:ef:47:66:a8:49:2d:39:43:f4:8e:36:dd:60:1a:77: ab:e2:1f:fb:4b:ac:93:57:54:1f:7d:e6:23:37:b0:b4:78:45: 9e:5a:24:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZjY+xUuP93oASAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzRkMWNkYTItYWVlNi00M2MzLTkxNWUtMzM0MzY5YzY4ZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUnn2rvZ1rELoFRWc2fsrYtenr/Kgi5TQEKP fqd762pHCE1M20V0urQj1cAhg8YKlS/8bDcdlDMoQ1d8GIqude4+IaVk2SNj6ErG Q208ZjKmnhHKGEqvqpB0POHtJHSAO6DccIGRt2KrrHaDpRIDXa0PlgEoqjFUW9i5 2PwkKajdKmK6Mwee0dhbDQ1qdmt9+wm98ZstERNOYPPPErG5u1Qifoyx3N7z8OEL xNv8HTFRTZbsTrazukiUco62mZ7XT6Prt7kWMLZMayQarwJHRQ3qoeblb0LSEKhM Xs5ZMZ55jEmAGZJ2T9QQCl7+CZiRQ0w/1NirJC0ryWKHR22ZGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmNcoh1ouokl6mtbAaZhs1evzhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmJlMGE0MWQtYTA4Zi0z YmJhLWJiZGMtM2E3NjNlZDk2YWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTTMvncXy+Wt6q3S1jsxasVHfpV3v0B5FSeIiu9Tz7YcynR6V1oswHr Vx/nEJ3dRx3ckMyks2djh++vNK2wLqdPVAbHpkicbblwh+9Djow4aKnoMvtK0jO8 vNxols0EUfy89aE6c7aOtwPrYzzaG1+88xbVNzQiMD7oy6De4yIDePZaRUJ8F1g/ irt7GfCVjy+jvYKcJp/lCf0wGmMwmhAmABUaN8tKb2mMBDDLt4NYnztFjUErcYTP b3QWzst25ojI6nUoAPXsdjjF9aIF4umjHHgx/3TG5TLPf+9HZqhJLTlD9I423WAa d6viH/tLrJNXVB995iM3sLR4RZ5aJGA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:03 2025 by rpki-client