$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d9df1a1-2d02-303b-931f-52fb364cee85.roa File: 8d9df1a1-2d02-303b-931f-52fb364cee85.roa (raw, json) Hash identifier: wFIIqcWr0vOdIQ3Xf5IoB/FcUBn+WKV+H7cqBiBFXFI= Subject key identifier: 40:3B:B8:D6:1C:C9:26:C5:EC:88:E2:64:2A:93:D6:56:FF:B1:10:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819AD68ECA598A1A525880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d9df1a1-2d02-303b-931f-52fb364cee85.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9a:d6:8e:ca:59:8a:1a:52:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ba2a5f1c-9bf1-4c43-a0fd-b9f0a85e74b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:93:70:00:c5:da:83:db:1a:98:9d:1f:d8:68: ca:bd:ef:9a:a4:42:02:f7:6b:e0:ed:57:ff:0d:64: 3e:9a:07:d5:99:ec:68:39:38:69:3e:5a:ac:71:f1: 69:bd:9c:d9:20:b2:4a:6b:03:0f:e9:42:11:c8:72: 9d:9a:ae:2f:8f:a7:7e:21:ed:21:98:54:41:18:be: fc:dc:59:2c:68:56:11:b2:e9:16:18:16:0f:c4:82: d5:a4:78:1b:0c:30:63:b7:0b:6b:82:13:f0:1d:d6: 93:10:9b:ad:bb:cd:aa:f3:05:36:11:59:4a:4a:45: dc:09:20:6a:40:d7:b4:e5:ac:a7:85:f9:f6:1c:e8: ff:6b:19:8d:52:28:9f:1c:b3:01:94:37:23:ea:72: c8:72:54:f9:aa:3e:37:7d:73:7e:98:dd:17:be:ff: 69:f6:39:9b:aa:b6:fb:c4:6a:76:2f:3c:63:63:21: 6c:60:93:62:1c:b4:cc:d8:4d:dd:5b:7e:2c:9e:45: be:58:3b:3d:b1:41:c9:60:84:6d:5f:e3:97:9f:4c: 8e:91:21:04:8f:66:cd:b4:c7:a6:20:6d:c9:a3:df: fe:a2:1e:7c:e9:67:7b:5f:a4:c9:4d:b9:3a:34:7c: db:4f:c4:fd:7a:a9:41:f1:a1:ce:ef:6f:1a:f0:01: dd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3B:B8:D6:1C:C9:26:C5:EC:88:E2:64:2A:93:D6:56:FF:B1:10:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d9df1a1-2d02-303b-931f-52fb364cee85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:bb:30:0f:34:d0:80:d1:fc:f8:33:d9:fa:28:8c:73:89:79: d4:73:3c:ac:46:e6:a6:a2:3f:b7:eb:c6:1d:98:8a:2d:f0:80: 7c:9a:aa:1b:dc:65:f3:0a:39:a5:b9:83:d6:67:3a:7c:bb:ab: 2c:08:7a:b0:dc:d0:63:ce:0b:c7:b8:00:a8:98:7d:f9:6b:2d: b8:7e:f0:3c:70:ef:69:b8:0e:5b:db:91:56:47:13:71:cc:71: 3a:cf:d6:56:90:f9:82:44:c2:21:5e:89:ae:7a:ed:e7:15:49: 2c:50:67:81:51:d1:e0:d9:9f:48:c4:4e:20:1a:c6:15:4d:5f: 17:26:14:f1:0d:a4:e5:42:de:c9:7f:6b:fe:df:be:c5:fe:65: b6:c8:09:4b:03:0a:62:32:09:e1:81:9b:14:5b:42:5d:fa:20: f4:a8:3d:68:a8:51:8e:97:63:d5:f7:40:ac:7b:52:38:31:78: 35:a0:c3:29:68:ed:4a:f4:ab:9d:f1:6e:6a:d8:e6:1c:cc:aa: 3e:01:7a:b3:ea:bd:8e:f2:93:e2:49:de:53:8c:4a:ba:d4:ef: 69:73:0c:c6:26:30:94:10:d0:87:63:d7:c1:e4:70:68:ed:c8: 88:97:bd:3a:92:b3:75:25:e5:aa:49:5f:ae:99:65:05:e2:f5: 81:2f:5b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZrWjspZihpSWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmEyYTVmMWMtOWJmMS00YzQzLWEwZmQtYjlmMGE4NWU3NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZNwAMXag9samJ0f2GjKve+apEIC92vg7Vf/ DWQ+mgfVmexoOThpPlqscfFpvZzZILJKawMP6UIRyHKdmq4vj6d+Ie0hmFRBGL78 3FksaFYRsukWGBYPxILVpHgbDDBjtwtrghPwHdaTEJutu82q8wU2EVlKSkXcCSBq QNe05aynhfn2HOj/axmNUiifHLMBlDcj6nLIclT5qj43fXN+mN0Xvv9p9jmbqrb7 xGp2LzxjYyFsYJNiHLTM2E3dW34snkW+WDs9sUHJYIRtX+OXn0yOkSEEj2bNtMem IG3Jo9/+oh586Wd7X6TJTbk6NHzbT8T9eqlB8aHO728a8AHdXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA7uNYcySbF7IjiZCqT1lb/sRBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGQ5ZGYxYTEtMmQwMi0z MDNiLTkzMWYtNTJmYjM2NGNlZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG7MA800IDR/Pgz2foojHOJedRzPKxG5qaiP7frxh2Yii3wgHyaqhvc ZfMKOaW5g9ZnOny7qywIerDc0GPOC8e4AKiYfflrLbh+8Dxw72m4DlvbkVZHE3HM cTrP1laQ+YJEwiFeia567ecVSSxQZ4FR0eDZn0jETiAaxhVNXxcmFPENpOVC3sl/ a/7fvsX+ZbbICUsDCmIyCeGBmxRbQl36IPSoPWioUY6XY9X3QKx7UjgxeDWgwylo 7Ur0q53xbmrY5hzMqj4BerPqvY7yk+JJ3lOMSrrU72lzDMYmMJQQ0Idj18HkcGjt yIiXvTqSs3Ul5apJX66ZZQXi9YEvW0k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:07 2025 by rpki-client