$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f504332-53f7-383e-a90d-50204e1c8037.roa File: 7f504332-53f7-383e-a90d-50204e1c8037.roa (raw, json) Hash identifier: 8guGehGaySa/Pls1lIPezYzvsjNcJ4y2PYRAEo9NO6E= Subject key identifier: BE:76:AE:2E:12:6D:02:94:74:FE:0B:BC:0D:FD:59:66:7B:2C:9F:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58102DAE4E8692B2F3D4700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f504332-53f7-383e-a90d-50204e1c8037.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:02:da:e4:e8:69:2b:2f:3d:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cd55bf65-9ebd-473a-98c4-976da6961db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:da:90:a0:a4:bc:28:8b:3d:8a:99:c8:23:39: 1d:25:4a:28:0c:af:66:8c:45:48:8c:0a:8c:d0:4d: 64:45:19:48:c3:b3:dd:dc:ae:12:86:64:86:24:f4: 97:86:84:3d:e7:0e:bd:1e:42:8a:42:e8:d8:ba:46: 20:fe:d6:fd:02:a6:f2:6e:f9:7f:9e:50:6a:c3:43: 9f:fa:f5:d1:01:11:d0:2d:14:78:96:1b:0f:b7:e5: fa:ce:f1:6b:14:6a:82:1b:92:b8:23:d1:38:07:68: be:70:67:1d:25:e1:eb:08:af:7f:ca:69:5c:b6:bc: 87:c1:4f:89:0c:9f:f8:21:4b:e9:85:5e:47:e9:cf: 60:56:2b:8d:d1:db:b5:90:3f:fd:ed:ab:01:76:82: a0:7b:72:94:8b:4b:e1:cb:c4:cd:53:b5:ec:77:af: 31:8c:df:aa:ba:1c:1a:1a:0b:f9:4b:41:2e:a1:04: be:3c:aa:56:ba:b8:92:cb:a3:bb:d5:ae:3a:37:c6: fb:8c:df:5d:b8:e5:ae:c6:6f:b9:6f:ba:b7:c5:68: 3e:3d:55:d0:8f:83:f6:12:25:3f:80:db:84:0b:42: 10:1c:d3:ab:d9:ca:2c:71:64:d2:7c:b5:9c:ca:ee: 8b:55:6f:be:ac:a8:b2:3c:d9:5f:dd:68:09:e5:1c: 00:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:76:AE:2E:12:6D:02:94:74:FE:0B:BC:0D:FD:59:66:7B:2C:9F:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f504332-53f7-383e-a90d-50204e1c8037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:01:31:b1:20:63:0d:50:13:a6:da:3b:8b:e4:06:57:dd:5d: 41:5c:c5:3a:93:5e:2e:bf:aa:81:8d:9b:cb:0d:c9:6c:b1:9a: c0:ed:f6:fa:9c:7d:dc:93:ad:6e:33:0c:d4:57:2e:2f:42:f3: 56:b7:f2:d5:55:21:24:b2:8a:08:02:ea:a9:51:29:5b:bc:6e: a6:4c:c0:11:0e:af:2b:a3:68:cd:b7:47:1b:e2:05:26:74:2a: b3:eb:9c:d6:ba:a1:39:23:3d:7b:a4:e8:cc:d3:b3:01:49:d7: 8d:f5:1a:9f:57:62:8d:1b:42:99:21:98:06:55:fa:1f:40:31: 3e:0a:6e:dc:51:82:a4:b8:04:28:13:45:4b:2f:76:cf:ee:59: 57:fa:6a:95:9d:b8:92:04:58:b1:9a:9d:63:53:c6:83:73:0e: 0b:83:55:01:30:ef:ca:2d:9e:d7:a9:8f:21:0e:46:fb:a2:fd: 63:29:e2:72:cb:07:3c:ee:c0:34:95:44:a9:be:06:6a:62:29: fe:6d:64:ae:de:4b:87:23:d7:ed:f3:c3:30:21:a3:80:64:ec: 58:cc:2f:8e:7a:81:eb:b4:d6:c8:47:45:0c:0e:ed:97:5b:45: af:d4:8f:af:61:a7:1a:55:de:87:f6:df:44:73:ba:e0:6a:18: 30:a0:44:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQLa5OhpKy89RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2Q1NWJmNjUtOWViZC00NzNhLTk4YzQtOTc2ZGE2OTYxZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdqQoKS8KIs9ipnIIzkdJUooDK9mjEVIjAqM 0E1kRRlIw7Pd3K4ShmSGJPSXhoQ95w69HkKKQujYukYg/tb9Aqbybvl/nlBqw0Of +vXRARHQLRR4lhsPt+X6zvFrFGqCG5K4I9E4B2i+cGcdJeHrCK9/ymlctryHwU+J DJ/4IUvphV5H6c9gViuN0du1kD/97asBdoKge3KUi0vhy8TNU7Xsd68xjN+quhwa Ggv5S0EuoQS+PKpWuriSy6O71a46N8b7jN9duOWuxm+5b7q3xWg+PVXQj4P2EiU/ gNuEC0IQHNOr2coscWTSfLWcyu6LVW++rKiyPNlf3WgJ5RwA0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL52ri4SbQKUdP4LvA39WWZ7LJ+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2Y1MDQzMzItNTNmNy0z ODNlLWE5MGQtNTAyMDRlMWM4MDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkBMbEgYw1QE6baO4vkBlfdXUFcxTqTXi6/qoGNm8sNyWyxmsDt9vqc fdyTrW4zDNRXLi9C81a38tVVISSyiggC6qlRKVu8bqZMwBEOryujaM23RxviBSZ0 KrPrnNa6oTkjPXuk6MzTswFJ1431Gp9XYo0bQpkhmAZV+h9AMT4KbtxRgqS4BCgT RUsvds/uWVf6apWduJIEWLGanWNTxoNzDguDVQEw78otntepjyEORvui/WMp4nLL BzzuwDSVRKm+BmpiKf5tZK7eS4cj1+3zwzAho4Bk7FjML456geu01shHRQwO7Zdb Ra/Uj69hpxpV3of230RzuuBqGDCgRME= -----END CERTIFICATE-----Generated at Sat Apr 12 00:21:55 2025 by rpki-client