$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d9a1459-6f17-3e6b-be1d-222682e9bb67.roa File: 6d9a1459-6f17-3e6b-be1d-222682e9bb67.roa (raw, json) Hash identifier: xnQbt2y98Sr/avajWndxx7nnr8WyRPEkoFT+m/TEha4= Subject key identifier: 50:44:82:55:CE:20:70:66:85:3A:1B:5E:21:77:85:27:20:C7:71:4D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819776F99BE5E169C15668 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d9a1459-6f17-3e6b-be1d-222682e9bb67.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:97:76:f9:9b:e5:e1:69:c1:56:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3d43d43d-d68f-4df3-b77d-cde63c7c65fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:90:44:dd:78:f1:a5:66:87:94:88:20:61: d4:ca:f0:46:88:bd:79:24:47:49:66:0f:08:43:04: ce:e4:0c:1c:53:d6:58:c0:4f:6e:c7:43:23:44:0d: 26:a9:66:36:a0:d6:5c:f8:cb:b7:6e:d0:5b:ea:51: c8:b1:ca:0c:d6:09:bc:de:e4:c9:e1:ca:61:e3:3d: 74:13:0a:63:f9:c1:22:6d:57:d7:76:df:0d:54:9f: 92:e5:04:1e:44:b1:c7:ad:a9:c3:e1:bc:c4:6c:9a: 60:0e:62:60:90:a3:76:1c:eb:8c:6e:93:ed:da:f1: 44:b9:19:0f:e6:28:9c:30:72:df:21:73:3a:a6:44: b8:db:0d:30:4a:90:68:9f:67:fa:9e:72:f3:f0:10: 02:7b:c0:2d:a0:8e:d2:9f:f2:36:55:03:f7:d0:66: 6f:f5:ec:42:08:53:c4:de:da:05:54:24:ea:a0:97: d8:fd:86:af:d4:b0:86:29:69:57:74:b5:26:1a:4e: 78:d3:04:e6:ff:17:e7:87:11:df:72:9c:1e:c8:8a: b9:b4:f9:80:9e:03:63:4a:44:ea:fd:2c:f0:7e:86: a1:d8:97:8c:19:78:a8:36:7b:4a:a7:50:f4:00:30: 90:30:92:14:7d:01:4f:fc:48:9a:2f:6a:16:d8:af: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:44:82:55:CE:20:70:66:85:3A:1B:5E:21:77:85:27:20:C7:71:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d9a1459-6f17-3e6b-be1d-222682e9bb67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f4:71:63:1d:d0:5d:20:03:69:3e:78:26:09:56:32:12:6f: 18:75:67:59:86:7f:de:3b:39:3e:f8:5c:39:00:8b:e7:44:cd: 30:87:54:fb:b4:ac:9c:3e:1d:5a:f0:fe:ac:72:c9:4b:5e:86: cd:64:c7:f3:62:dd:02:96:ec:8a:35:d5:07:c8:ec:cf:2c:2a: e7:4d:17:1e:71:65:42:cf:31:e3:20:db:e5:13:ec:97:ad:90: 2f:82:3a:9e:1c:d7:ac:e9:17:d2:60:6b:7d:3e:db:ad:49:b1: 10:c6:89:39:a7:0b:04:33:2b:be:54:7b:19:ba:8d:7b:2b:b9: ef:58:d1:15:71:72:38:6f:c0:bf:e8:cd:13:25:85:a2:27:c9: 94:75:94:c3:07:f5:29:22:18:dc:53:d6:fe:aa:91:48:24:b5: eb:c8:ca:81:07:0b:2d:49:10:dc:a5:5f:60:70:b9:e2:3b:98: ce:b7:ee:d5:21:d8:08:d7:bb:0a:32:36:18:ed:57:b1:0c:b4: 9c:75:b2:19:a7:9d:e4:4d:97:c8:1b:cd:2a:c7:86:ec:97:0f: 1d:25:fd:a4:e9:fa:13:ac:6c:7c:61:9f:0b:84:0c:2a:9c:11: 23:e7:1f:78:b5:8e:a4:25:ff:36:0c:e0:39:6f:fa:a3:48:96: f2:b8:25:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZd2+Zvl4WnBVmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2Q0M2Q0M2QtZDY4Zi00ZGYzLWI3N2QtY2RlNjNjN2M2NWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GaQRN148aVmh5SIIGHUyvBGiL15JEdJZg8I QwTO5AwcU9ZYwE9ux0MjRA0mqWY2oNZc+Mu3btBb6lHIscoM1gm83uTJ4cph4z10 Ewpj+cEibVfXdt8NVJ+S5QQeRLHHranD4bzEbJpgDmJgkKN2HOuMbpPt2vFEuRkP 5iicMHLfIXM6pkS42w0wSpBon2f6nnLz8BACe8AtoI7Sn/I2VQP30GZv9exCCFPE 3toFVCTqoJfY/Yav1LCGKWlXdLUmGk540wTm/xfnhxHfcpweyIq5tPmAngNjSkTq /Szwfoah2JeMGXioNntKp1D0ADCQMJIUfQFP/EiaL2oW2K/JnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBEglXOIHBmhTobXiF3hScgx3FNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmQ5YTE0NTktNmYxNy0z ZTZiLWJlMWQtMjIyNjgyZTliYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD0cWMd0F0gA2k+eCYJVjISbxh1Z1mGf947OT74XDkAi+dEzTCHVPu0 rJw+HVrw/qxyyUtehs1kx/Ni3QKW7Io11QfI7M8sKudNFx5xZULPMeMg2+UT7Jet kC+COp4c16zpF9Jga30+261JsRDGiTmnCwQzK75Uexm6jXsrue9Y0RVxcjhvwL/o zRMlhaInyZR1lMMH9SkiGNxT1v6qkUgktevIyoEHCy1JENylX2BwueI7mM637tUh 2AjXuwoyNhjtV7EMtJx1shmnneRNl8gbzSrHhuyXDx0l/aTp+hOsbHxhnwuEDCqc ESPnH3i1jqQl/zYM4Dlv+qNIlvK4JV8= -----END CERTIFICATE-----Generated at Fri Mar 14 08:05:06 2025 by rpki-client