$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/901bb8de-1705-3f73-8abb-e833c7a2f81c.roa File: 901bb8de-1705-3f73-8abb-e833c7a2f81c.roa (raw, json) Hash identifier: lChbHCY6yQPiY0yejkDPXV7R4qK848neRupOsPMx6NM= Subject key identifier: FC:37:E6:DD:3D:5F:0C:6A:DC:AA:AA:8C:EE:0F:59:56:19:0D:5B:48 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819C7CDA136221C2CB8DA0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/901bb8de-1705-3f73-8abb-e833c7a2f81c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9c:7c:da:13:62:21:c2:cb:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=19f2649b-fadc-4aea-97ac-2d567f6d7080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:20:68:a7:df:1b:dd:7a:c5:09:b5:cb:70: 0d:df:fc:eb:d7:4b:7b:b7:4e:f6:26:34:a2:3a:16: 2a:2c:68:d8:a7:57:2d:1c:11:26:93:a1:65:9c:9a: ae:32:c6:4c:1d:fe:f5:9c:61:ff:9c:61:6d:f8:9a: e0:0a:0e:d0:81:16:a9:1d:44:ad:24:a4:74:18:f7: 56:e7:ff:87:19:4f:d6:1e:86:6b:de:12:52:00:7c: ee:02:81:e4:ff:5f:77:27:39:fc:65:9a:89:85:6f: e7:82:22:c4:99:aa:5b:18:0f:b8:43:8a:fa:85:12: ee:e1:57:65:16:0d:32:73:d0:c4:84:67:da:34:82: 17:65:aa:82:68:36:f4:e4:58:ef:f7:01:cc:c4:d0: 58:2c:7b:aa:d3:38:fc:38:93:b8:bd:d8:8d:99:7c: bd:ef:e6:54:a1:1f:7c:01:ce:06:42:2e:d8:5c:7d: 55:64:ff:be:b5:6b:ef:89:9b:42:99:b5:4b:ec:c5: c9:ee:5e:d7:a7:50:d0:6b:e5:59:b5:d9:a0:c9:a7: 0f:cc:e6:58:10:c5:c9:62:06:4a:2f:ab:de:c4:49: 29:19:c7:f2:0e:bf:e0:33:91:2e:be:41:15:5e:1d: 24:65:fe:ba:1b:34:c7:a2:e3:0b:32:05:db:71:c9: b6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:37:E6:DD:3D:5F:0C:6A:DC:AA:AA:8C:EE:0F:59:56:19:0D:5B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/901bb8de-1705-3f73-8abb-e833c7a2f81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a9:a1:9f:cb:f3:74:df:f1:78:da:5f:0e:e9:4b:cd:2c:04: 26:9b:33:f6:f7:52:fb:e3:61:4c:21:50:29:d2:f2:0c:d4:4b: 13:e4:57:6f:52:7e:bd:f8:87:b4:e3:cb:30:3a:16:92:f3:d8: ce:62:2c:34:d7:e2:20:1a:d1:bf:36:16:0c:24:c6:c3:94:10: 34:9a:86:f1:1a:27:b2:e8:68:a7:ed:38:c1:73:66:b0:12:9d: 0c:55:4a:18:ac:cf:32:ff:b4:88:4c:88:53:71:1d:f0:a1:c3: f7:1e:51:74:56:39:ef:59:64:ad:2b:4b:33:12:ff:9c:e5:0a: 1a:32:0f:bc:ee:6b:70:60:cf:b4:c4:59:a2:13:42:ac:27:98: 95:87:8b:e8:98:09:fb:06:11:b9:89:26:98:88:a9:84:2e:80: ee:03:5d:ef:19:07:b0:08:67:ae:8b:0b:3b:78:35:24:f0:dd: 75:ff:0a:6f:23:79:46:43:33:df:81:0f:21:39:f3:a4:85:4b: 90:09:6d:6a:09:19:53:cb:2b:8d:c9:44:0b:e2:21:cf:63:79: e1:c3:a8:79:d8:7f:b8:bc:fe:1d:1e:af:9d:0a:d2:20:17:e1: eb:06:a8:60:a9:ea:86:7e:48:73:5e:c2:b1:e3:01:77:3b:6d: a2:ed:05:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZx82hNiIcLLjaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTlmMjY0OWItZmFkYy00YWVhLTk3YWMtMmQ1NjdmNmQ3MDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSkgaKffG916xQm1y3AN3/zr10t7t072JjSi OhYqLGjYp1ctHBEmk6FlnJquMsZMHf71nGH/nGFt+JrgCg7QgRapHUStJKR0GPdW 5/+HGU/WHoZr3hJSAHzuAoHk/193Jzn8ZZqJhW/ngiLEmapbGA+4Q4r6hRLu4Vdl Fg0yc9DEhGfaNIIXZaqCaDb05Fjv9wHMxNBYLHuq0zj8OJO4vdiNmXy97+ZUoR98 Ac4GQi7YXH1VZP++tWvviZtCmbVL7MXJ7l7Xp1DQa+VZtdmgyacPzOZYEMXJYgZK L6vexEkpGcfyDr/gM5EuvkEVXh0kZf66GzTHouMLMgXbccm2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPw35t09Xwxq3KqqjO4PWVYZDVtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTAxYmI4ZGUtMTcwNS0z ZjczLThhYmItZTgzM2M3YTJmODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARin9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+poZ/L83Tf8XjaXw7pS80sBCabM/b3UvvjYUwhUCnS8gzUSxPkV29S fr34h7TjyzA6FpLz2M5iLDTX4iAa0b82FgwkxsOUEDSahvEaJ7LoaKftOMFzZrAS nQxVShiszzL/tIhMiFNxHfChw/ceUXRWOe9ZZK0rSzMS/5zlChoyD7zua3Bgz7TE WaITQqwnmJWHi+iYCfsGEbmJJpiIqYQugO4DXe8ZB7AIZ66LCzt4NSTw3XX/Cm8j eUZDM9+BDyE586SFS5AJbWoJGVPLK43JRAviIc9jeeHDqHnYf7i8/h0er50K0iAX 4esGqGCp6oZ+SHNewrHjAXc7baLtBTE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:08 2025 by rpki-client