$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cc49e4e-a81c-3a63-853b-5f42995f9e7a.roa File: 8cc49e4e-a81c-3a63-853b-5f42995f9e7a.roa (raw, json) Hash identifier: gM8Ortpe9uVAaSpxIp34PF8G/2mIsJDdRQEH/4H7AGE= Subject key identifier: FE:44:C6:55:9A:3C:1F:F9:44:C1:F7:42:F8:65:D0:5C:D8:C8:55:88 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58103D5568D9BB7711E2780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cc49e4e-a81c-3a63-853b-5f42995f9e7a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:03:d5:56:8d:9b:b7:71:1e:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e7b7243c-dfae-4a48-8e0c-dd450e5e812e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:58:1f:fc:08:6c:66:7b:2c:b0:da:5b:94: bd:f4:54:a1:8e:db:f3:96:b9:53:a3:14:81:42:68: bb:15:59:1e:ce:b3:10:c4:38:4c:c6:5f:92:df:3d: 69:e0:ee:78:ac:71:f2:f7:b5:5e:8d:05:c2:9c:bd: 6a:1e:67:19:ea:b2:ac:2a:84:95:dc:42:e3:19:50: 73:3e:ed:36:ab:0f:8e:fd:c5:d2:5b:1c:5c:48:83: 24:2e:5a:4a:2f:4f:21:4d:02:9d:bb:a6:d4:78:f6: d1:b9:c4:c7:71:ae:6f:71:12:70:f2:87:d2:90:f9: bd:ac:c7:97:47:02:58:f5:25:71:97:cd:5d:dc:0d: 65:44:96:9b:ee:60:08:6e:41:6b:1f:da:90:03:40: 7a:5f:fd:3b:60:97:b1:a8:ce:7a:61:d8:17:15:7a: 49:19:36:83:fc:fa:41:33:87:c9:69:72:36:fa:43: fb:0b:dc:f7:83:63:7b:13:c8:51:1d:2f:74:64:13: c7:31:19:81:63:e3:ed:41:f0:04:1a:5a:88:94:80: 28:a3:39:77:de:62:59:38:b1:5e:38:de:ca:3f:1f: d7:f2:54:a5:f0:65:f1:08:ac:31:a1:d5:e9:92:26: a3:a7:fa:d0:96:a2:8b:bd:e2:50:97:48:64:67:75: 6e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:44:C6:55:9A:3C:1F:F9:44:C1:F7:42:F8:65:D0:5C:D8:C8:55:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cc49e4e-a81c-3a63-853b-5f42995f9e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c3:c2:ad:ee:14:61:d7:a9:61:83:47:76:df:be:41:f7:b5: 7c:1b:a9:4b:48:99:c5:97:2d:c1:9c:0b:e6:db:4c:e5:71:fa: 12:56:6b:9c:fd:d0:d4:52:fa:76:d6:93:b5:1a:01:68:56:d4: 1f:d7:8a:31:4d:24:8d:7e:88:fd:62:f7:37:50:51:16:be:4b: 1a:e8:8e:f6:d5:c4:a7:b5:f4:a1:54:0a:bf:02:57:ae:33:d5: 24:45:d9:cd:36:68:d7:34:30:4a:92:bc:0e:f9:18:24:6d:47: af:e5:89:15:45:97:eb:5a:26:02:c2:22:43:88:50:5a:44:78: de:0e:5e:52:a8:3b:ac:2a:81:80:94:58:14:33:98:80:48:47: 12:fd:58:8f:be:f7:04:75:94:f7:c7:38:83:e5:1e:d3:b4:4b: 3a:61:a4:5b:72:2e:88:90:a3:40:b3:5c:3f:e7:36:31:31:ec: 16:af:2e:c1:a6:e8:cd:d2:31:31:76:86:33:09:68:a8:8e:c9: d1:af:54:b5:16:ce:a0:3f:52:bf:3b:0d:b9:60:db:97:58:d9: cd:76:17:50:23:bf:a1:32:8f:74:f2:90:0f:9b:3d:fc:c8:ea: 1c:79:15:19:31:75:e2:56:31:aa:c5:6d:28:55:7f:c1:ae:cc: d2:0a:13:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQPVVo2bt3EeJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTdiNzI0M2MtZGZhZS00YTQ4LThlMGMtZGQ0NTBlNWU4MTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZlYH/wIbGZ7LLDaW5S99FShjtvzlrlToxSB Qmi7FVkezrMQxDhMxl+S3z1p4O54rHHy97VejQXCnL1qHmcZ6rKsKoSV3ELjGVBz Pu02qw+O/cXSWxxcSIMkLlpKL08hTQKdu6bUePbRucTHca5vcRJw8ofSkPm9rMeX RwJY9SVxl81d3A1lRJab7mAIbkFrH9qQA0B6X/07YJexqM56YdgXFXpJGTaD/PpB M4fJaXI2+kP7C9z3g2N7E8hRHS90ZBPHMRmBY+PtQfAEGlqIlIAoozl33mJZOLFe ON7KPx/X8lSl8GXxCKwxodXpkiajp/rQlqKLveJQl0hkZ3Vu5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5ExlWaPB/5RMH3Qvhl0FzYyFWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGNjNDllNGUtYTgxYy0z YTYzLTg1M2ItNWY0Mjk5NWY5ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATDwq3uFGHXqWGDR3bfvkH3tXwbqUtImcWXLcGcC+bbTOVx+hJWa5z9 0NRS+nbWk7UaAWhW1B/XijFNJI1+iP1i9zdQURa+SxrojvbVxKe19KFUCr8CV64z 1SRF2c02aNc0MEqSvA75GCRtR6/liRVFl+taJgLCIkOIUFpEeN4OXlKoO6wqgYCU WBQzmIBIRxL9WI++9wR1lPfHOIPlHtO0SzphpFtyLoiQo0CzXD/nNjEx7BavLsGm 6M3SMTF2hjMJaKiOydGvVLUWzqA/Ur87Dblg25dY2c12F1Ajv6Eyj3TykA+bPfzI 6hx5FRkxdeJWMarFbShVf8GuzNIKE9Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:17 2025 by rpki-client