$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa File: 8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa (raw, json) Hash identifier: F+ecLdMVpE35Vg4RcEA6ZHdR4bv5RokIkQ3A6AdBP3I= Subject key identifier: 10:51:E4:BC:6B:55:39:C5:BB:D7:49:F1:FD:80:F0:B6:7E:D3:C0:59 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58199C447425735A54CF280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:99:c4:47:42:57:35:a5:4c:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=40da14f5-583a-4969-93c8-c1e8aafebed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:89:38:d6:ad:11:ea:16:2a:a3:47:70:d5: 79:4b:98:4b:b3:44:34:ca:57:51:45:dc:fe:a4:d6: bb:9c:8f:12:f5:9a:ae:b6:be:b4:67:98:ac:3a:b2: cf:f6:03:bf:1b:66:34:fc:06:0e:fc:98:93:9a:c1: b5:a7:87:fb:ad:46:5a:92:9c:50:d7:55:56:3c:7a: c4:9a:0f:ab:5b:80:17:64:10:7d:4c:d6:3c:24:4c: 8a:5b:1e:a3:5b:df:24:e4:2c:e5:f9:0e:6d:e7:b8: b0:79:ac:eb:86:33:c5:c5:7d:84:45:8c:3a:86:e2: a0:1d:e5:48:1c:b1:92:1b:6f:d8:a5:a2:3e:79:69: 5c:93:63:ee:78:cd:29:b6:56:4e:8a:77:eb:63:16: 93:7f:a5:29:3c:fb:ce:a1:10:1c:9e:ec:a0:ef:8f: 8f:60:08:b9:c5:bb:ab:58:fe:41:fe:7e:a2:ce:48: 4d:2a:0f:58:ef:99:b4:b6:8c:b0:a7:39:7d:01:1a: 8d:1b:6c:c8:15:56:59:8c:4f:2c:90:16:b0:d5:06: 63:c1:5c:7e:90:41:d4:36:47:8d:31:d5:f6:8d:60: 55:c6:4d:68:94:e8:ad:45:7a:df:08:9f:2c:82:12: c0:b4:d2:45:07:7b:65:86:27:e6:1f:27:a4:c8:e9: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:51:E4:BC:6B:55:39:C5:BB:D7:49:F1:FD:80:F0:B6:7E:D3:C0:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:aa:15:3b:fe:15:17:50:ae:32:2a:47:8e:94:07:b3:93:b4: b4:6f:3c:69:e7:e3:65:23:24:cd:e8:48:68:44:6f:1a:94:2c: da:ff:24:94:68:c3:f9:aa:14:73:2a:99:31:dc:c2:20:be:be: 88:cd:10:f2:8b:d0:c5:be:7c:40:96:43:42:29:23:59:b1:58: fa:46:83:38:f3:46:6d:83:87:5d:d5:06:ba:ea:6f:9b:68:84: ae:48:4e:a5:a7:4a:50:96:43:2f:ac:4f:1c:62:49:ed:b2:21: c4:26:bd:16:ed:a3:0f:92:59:23:a6:76:a9:c2:2c:48:ff:81: ae:66:7c:3f:ff:b1:07:15:6a:a5:a1:d7:ab:e0:76:16:60:80: 24:51:75:03:b2:76:20:b7:d3:fd:40:45:5b:13:5c:48:cd:db: eb:d5:3a:c0:ac:1e:b9:7b:87:9c:d0:ec:86:ec:3b:f0:76:75: ab:9b:b6:1a:0f:c2:f2:33:42:68:9a:3f:8a:66:b8:b9:22:08: 21:d2:81:c7:72:a6:f5:0f:e0:f6:33:4e:b2:cf:32:3c:28:cd: 29:47:ca:b1:80:bd:df:2e:07:f9:a6:79:0f:aa:5d:b1:7a:6b: 9c:10:93:bc:0a:9f:55:63:a5:66:ac:7b:9d:85:2f:74:85:44: 50:70:0a:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZnER0JXNaVM8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDBkYTE0ZjUtNTgzYS00OTY5LTkzYzgtYzFlOGFhZmViZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfaJONatEeoWKqNHcNV5S5hLs0Q0yldRRdz+ pNa7nI8S9Zqutr60Z5isOrLP9gO/G2Y0/AYO/JiTmsG1p4f7rUZakpxQ11VWPHrE mg+rW4AXZBB9TNY8JEyKWx6jW98k5Czl+Q5t57iweazrhjPFxX2ERYw6huKgHeVI HLGSG2/YpaI+eWlck2PueM0ptlZOinfrYxaTf6UpPPvOoRAcnuyg74+PYAi5xbur WP5B/n6izkhNKg9Y75m0toywpzl9ARqNG2zIFVZZjE8skBaw1QZjwVx+kEHUNkeN MdX2jWBVxk1olOitRXrfCJ8sghLAtNJFB3tlhifmHyekyOlnjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBR5LxrVTnFu9dJ8f2A8LZ+08BZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGExZWFjZTItN2FkNC0z ZDJlLWFjMjgtNDBjNTFlNDkyMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCqFTv+FRdQrjIqR46UB7OTtLRvPGnn42UjJM3oSGhEbxqULNr/JJRo w/mqFHMqmTHcwiC+vojNEPKL0MW+fECWQ0IpI1mxWPpGgzjzRm2Dh13VBrrqb5to hK5ITqWnSlCWQy+sTxxiSe2yIcQmvRbtow+SWSOmdqnCLEj/ga5mfD//sQcVaqWh 16vgdhZggCRRdQOydiC30/1ARVsTXEjN2+vVOsCsHrl7h5zQ7IbsO/B2daubthoP wvIzQmiaP4pmuLkiCCHSgcdypvUP4PYzTrLPMjwozSlHyrGAvd8uB/mmeQ+qXbF6 a5wQk7wKn1VjpWase52FL3SFRFBwCr4= -----END CERTIFICATE-----Generated at Sat Apr 12 00:17:28 2025 by rpki-client