$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa File: 83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa (raw, json) Hash identifier: nbGF82jE6XrBEzQJJZSKyaue7gul66pXtNiuwMxEYyE= Subject key identifier: 65:37:84:26:FE:37:16:C4:24:4D:96:9B:6C:4E:0F:9C:5B:53:FC:9B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58191455C9A73B05907D000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 70.41.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:91:45:5c:9a:73:b0:59:07:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d5b0fc1a-ead3-4827-b26a-35d9d22035de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:60:2f:be:8a:8e:05:2a:13:d7:40:e7:97:25: 4f:18:bf:d9:17:88:27:fe:a9:52:c5:2d:aa:4b:91: 0c:9f:6a:4c:21:78:a4:5f:c8:6f:41:28:d8:59:08: 55:2a:0e:04:89:68:81:2d:34:e1:c9:bf:ee:4a:67: 41:c3:c6:7f:fc:cb:26:06:b6:05:80:83:01:b5:b4: 3a:56:cf:a8:ce:9f:98:b6:42:c9:d4:4a:14:a2:a5: 92:6b:bf:0a:e0:48:ee:72:87:f4:71:bf:cb:ce:dd: 19:81:63:00:38:bf:9b:71:e7:13:2f:23:07:98:a2: aa:de:cb:39:67:f3:d2:d0:88:b1:1a:7f:9b:1d:74: c0:a4:c0:0e:3e:b5:84:93:52:ce:71:02:d7:6b:e9: 85:e1:fa:fc:25:0e:5f:cc:d6:71:0b:ab:ab:2d:a2: aa:02:8b:d5:55:af:ed:c0:c8:27:9d:78:41:b8:ca: 2e:aa:64:56:d1:1b:69:5a:e5:75:56:d4:92:81:88: 6c:34:b0:ff:1d:d3:59:43:2a:23:ce:83:ea:86:17: 2d:94:86:d2:d8:0b:21:5e:77:4d:bd:db:00:f6:ca: ee:8e:c7:06:a7:e7:08:4c:6e:04:b4:e6:39:df:ba: 34:3d:67:ca:58:8c:6a:7e:30:63:0e:ca:93:cf:b4: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:37:84:26:FE:37:16:C4:24:4D:96:9B:6C:4E:0F:9C:5B:53:FC:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:5f:fa:62:dc:2a:80:87:73:a8:54:f9:a8:4b:a0:27:41:b4: 63:dd:a2:59:95:ae:fe:d6:ea:ad:e5:a5:f8:c2:3b:d0:4d:40: 41:1f:1d:64:8e:ac:a6:08:42:8c:ba:6a:16:9b:d9:d8:63:a3: 33:5b:fd:af:00:f3:2b:53:98:50:19:19:93:4e:ce:28:0c:94: f2:b4:a1:f3:38:96:21:a0:3d:96:cb:e8:f8:27:9f:fe:42:93: b4:68:cf:ab:0e:03:fb:fd:b5:6d:ea:ff:37:df:7e:80:21:47: 24:9f:bf:15:28:96:fb:76:f0:dc:54:02:e6:3c:5f:df:0c:e6: 22:cb:ce:d1:ef:2f:e7:bf:34:06:fd:fd:09:5c:2e:37:31:d4: c1:9a:49:4d:ff:29:f1:68:b9:74:8d:27:48:d1:d9:5b:50:da: d3:c5:42:e4:94:e7:23:27:e7:d0:e4:46:ae:28:d6:f9:f0:3b: 1b:a9:0d:8a:fc:2d:f2:0d:79:4f:d2:85:4a:37:04:ed:54:77: 31:a6:7b:44:80:95:f5:0c:4c:54:88:64:8b:b4:98:87:f7:4e: 74:56:06:aa:11:2a:5c:2e:6e:72:22:99:5c:59:29:52:44:d2: fd:ee:e9:83:56:a7:2f:08:08:c9:27:8f:76:9f:9d:b9:10:1a: b4:7c:c1:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZFFXJpzsFkH0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDViMGZjMWEtZWFkMy00ODI3LWIyNmEtMzVkOWQyMjAzNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2AvvoqOBSoT10DnlyVPGL/ZF4gn/qlSxS2q S5EMn2pMIXikX8hvQSjYWQhVKg4EiWiBLTThyb/uSmdBw8Z//MsmBrYFgIMBtbQ6 Vs+ozp+YtkLJ1EoUoqWSa78K4Ejucof0cb/Lzt0ZgWMAOL+bcecTLyMHmKKq3ss5 Z/PS0IixGn+bHXTApMAOPrWEk1LOcQLXa+mF4fr8JQ5fzNZxC6urLaKqAovVVa/t wMgnnXhBuMouqmRW0RtpWuV1VtSSgYhsNLD/HdNZQyojzoPqhhctlIbS2AshXndN vdsA9srujscGp+cITG4EtOY537o0PWfKWIxqfjBjDsqTz7TMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU3hCb+NxbEJE2Wm2xOD5xbU/ybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODNlMGYxNWMtMmRkMy0z MzQ0LWI3MjQtNDQ4N2U2YTdkNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZf+mLcKoCHc6hU+ahLoCdBtGPdolmVrv7W6q3lpfjCO9BNQEEfHWSO rKYIQoy6ahab2dhjozNb/a8A8ytTmFAZGZNOzigMlPK0ofM4liGgPZbL6Pgnn/5C k7Roz6sOA/v9tW3q/zfffoAhRySfvxUolvt28NxUAuY8X98M5iLLztHvL+e/NAb9 /QlcLjcx1MGaSU3/KfFouXSNJ0jR2VtQ2tPFQuSU5yMn59DkRq4o1vnwOxupDYr8 LfINeU/ShUo3BO1UdzGme0SAlfUMTFSIZIu0mIf3TnRWBqoRKlwubnIimVxZKVJE 0v3u6YNWpy8ICMknj3afnbkQGrR8weM= -----END CERTIFICATE-----Generated at Fri Mar 14 09:28:30 2025 by rpki-client