$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80c010bb-2166-377b-9466-8e2e80c70132.roa File: 80c010bb-2166-377b-9466-8e2e80c70132.roa (raw, json) Hash identifier: ucGvSly+q9RbXrEk3xkLeB8flBisPx3epPMMOdRf8+0= Subject key identifier: 14:21:6E:B7:D1:0A:E4:A0:CE:7A:2C:57:72:56:52:0D:18:D7:8E:4B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581086C1670E1E03842FA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80c010bb-2166-377b-9466-8e2e80c70132.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:08:6c:16:70:e1:e0:38:42:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7bf67bb0-d2f8-4a60-88fe-180f363a2e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:00:9c:20:96:37:3d:58:81:83:9b:e2:40:23: a2:3e:b0:15:51:db:18:92:8d:c4:f4:cc:0e:84:36: 5e:4f:7c:e8:90:9b:ce:2b:f3:3a:6a:de:f6:51:e0: 24:d8:78:13:0c:f5:40:36:44:f4:7e:e5:cc:f3:47: 2a:82:d7:bd:73:70:dd:bf:6f:76:95:cc:38:5e:c6: 94:a3:64:fa:f9:62:a6:50:c0:21:61:13:aa:c4:bf: c2:aa:65:06:a3:41:a8:74:ea:3f:ed:f5:5c:d6:bb: 09:84:2a:05:08:b3:d8:74:aa:1d:26:cd:3c:e0:4b: 27:39:ee:e3:0e:a5:1c:af:b2:04:e4:1f:bb:82:40: 2a:10:9d:49:3e:5c:f1:45:97:16:16:5a:16:4d:6f: 42:66:97:db:05:2f:53:cc:c4:3e:15:93:eb:3e:52: 45:e7:75:90:e8:81:54:d1:ce:55:4b:ca:73:f6:d4: 7a:a4:40:5e:04:e6:5a:00:85:3c:a6:dd:12:fb:82: 18:59:46:e2:8c:34:7e:43:d7:38:c4:3a:1a:e9:2e: d9:20:3d:6b:00:6a:c4:48:0d:5e:b1:6f:90:c0:70: 68:66:89:2c:75:f5:2a:97:e3:ae:af:51:94:9f:0a: 80:dc:6b:08:ba:2d:61:c2:9f:31:5d:85:b1:d6:a2: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:21:6E:B7:D1:0A:E4:A0:CE:7A:2C:57:72:56:52:0D:18:D7:8E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80c010bb-2166-377b-9466-8e2e80c70132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:b0:d7:12:d3:c7:31:7f:f5:7e:45:6e:38:e0:f6:60:e2:dc: d7:e5:f7:25:25:17:2d:40:df:a6:bd:94:e2:66:ae:6b:1b:8b: 09:1d:a3:33:74:6c:d2:5e:ac:5c:30:1d:d1:8a:8e:a3:52:3a: d0:26:1c:41:9b:c5:f6:35:fc:59:07:ef:3b:2b:4f:25:ad:96: 2d:a3:5a:8b:4f:c8:9b:af:3c:31:2c:66:27:6c:83:14:98:39: 31:45:5b:be:8d:54:2f:1f:48:c4:7d:28:94:6f:f5:97:fe:8d: 77:37:76:94:e0:8c:1e:20:45:02:99:ae:7b:38:46:e8:63:d6: 5f:2f:25:33:84:bc:bd:17:db:3a:8d:4c:ee:b6:d1:6a:ab:9d: cd:9e:a9:89:58:4e:9c:ac:67:65:72:e9:60:3a:47:cb:01:51: 03:52:eb:5c:47:c4:d7:80:8b:ff:77:bb:72:33:6e:9a:d9:d0: 8d:f2:40:2d:2e:71:4e:dd:ba:0c:f3:ca:da:33:1a:86:46:f5: 28:25:99:82:8f:ab:10:00:90:ab:65:5d:b3:f8:41:3e:b3:42: ac:68:80:4c:2c:60:47:65:01:c9:8b:e5:a0:d9:81:fb:f9:f5: dd:0a:e1:6b:8c:84:35:f3:51:25:c3:a6:8b:d9:25:18:e6:41: e5:63:c4:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQhsFnDh4DhC+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2JmNjdiYjAtZDJmOC00YTYwLTg4ZmUtMTgwZjM2M2EyZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnACcIJY3PViBg5viQCOiPrAVUdsYko3E9MwO hDZeT3zokJvOK/M6at72UeAk2HgTDPVANkT0fuXM80cqgte9c3Ddv292lcw4XsaU o2T6+WKmUMAhYROqxL/CqmUGo0GodOo/7fVc1rsJhCoFCLPYdKodJs084EsnOe7j DqUcr7IE5B+7gkAqEJ1JPlzxRZcWFloWTW9CZpfbBS9TzMQ+FZPrPlJF53WQ6IFU 0c5VS8pz9tR6pEBeBOZaAIU8pt0S+4IYWUbijDR+Q9c4xDoa6S7ZID1rAGrESA1e sW+QwHBoZoksdfUql+Our1GUnwqA3GsIui1hwp8xXYWx1qL6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQhbrfRCuSgznosV3JWUg0Y145LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODBjMDEwYmItMjE2Ni0z NzdiLTk0NjYtOGUyZTgwYzcwMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALew1xLTxzF/9X5Fbjjg9mDi3Nfl9yUlFy1A36a9lOJmrmsbiwkdozN0 bNJerFwwHdGKjqNSOtAmHEGbxfY1/FkH7zsrTyWtli2jWotPyJuvPDEsZidsgxSY OTFFW76NVC8fSMR9KJRv9Zf+jXc3dpTgjB4gRQKZrns4Ruhj1l8vJTOEvL0X2zqN TO620Wqrnc2eqYlYTpysZ2Vy6WA6R8sBUQNS61xHxNeAi/93u3IzbprZ0I3yQC0u cU7dugzzytozGoZG9SglmYKPqxAAkKtlXbP4QT6zQqxogEwsYEdlAcmL5aDZgfv5 9d0K4WuMhDXzUSXDpovZJRjmQeVjxLE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:54 2025 by rpki-client