$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/901bb8de-1705-3f73-8abb-e833c7a2f81c.roa File: 901bb8de-1705-3f73-8abb-e833c7a2f81c.roa (raw, json) Hash identifier: CP043wdtxswhp7aoSzwBDnQCfV6nMK47pG3BnILTr6w= Subject key identifier: 31:5D:5E:36:E6:B0:EA:41:78:DA:29:C7:6B:5E:82:4A:7E:73:BF:A4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453DFD56B4A82ACF2FE2FD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/901bb8de-1705-3f73-8abb-e833c7a2f81c.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 70.41.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:fd:56:b4:a8:2a:cf:2f:e2:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=257abc29-8265-4ea6-bc29-2ec36a8a0b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:91:12:a4:84:d6:21:f3:78:0d:a8:a5:f9:61: 4d:ea:d8:4b:22:19:3a:58:cc:cb:90:fb:80:7b:8d: 88:99:9b:31:7a:45:c2:88:f0:e1:73:60:a0:2b:dc: c1:18:d7:95:66:e0:95:77:ad:e7:c2:9f:23:a5:9e: bf:43:1d:b1:36:cf:ac:65:b9:98:c4:3c:0c:32:83: 6d:f9:d9:ef:55:79:b4:0d:8e:b1:70:42:b6:59:b1: 10:e9:e3:8b:44:9e:14:4f:8e:4b:94:26:ea:b5:ed: ca:ad:63:32:f1:78:55:f3:63:b1:8c:ae:db:91:af: e0:28:4a:2a:46:19:5d:79:83:7d:01:c4:cf:6a:d9: eb:e2:da:db:4f:6a:63:be:37:ee:60:6b:3f:11:7c: bf:28:3d:bc:79:8c:00:ac:3e:e7:e6:6f:c6:20:14: d8:c5:b5:5e:ff:90:3d:d4:e5:15:2c:3b:e4:52:21: 8e:56:03:51:21:f4:5b:f3:52:f3:49:fb:af:7c:dd: 87:42:5a:a1:67:a5:82:65:1a:d4:31:b2:1d:e3:8d: 2c:00:89:d8:82:0a:53:3a:18:96:96:d3:55:2c:4e: 19:bd:ce:ba:55:fc:71:0e:c9:de:88:9b:2d:9b:b2: 94:4b:3b:59:a5:f5:30:3c:90:1d:82:12:9d:cc:0a: f9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5D:5E:36:E6:B0:EA:41:78:DA:29:C7:6B:5E:82:4A:7E:73:BF:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/901bb8de-1705-3f73-8abb-e833c7a2f81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:78:3b:9b:a6:7f:7c:6e:5c:5a:03:26:7d:c2:12:3e:55:fa: a4:27:58:65:27:f0:c4:92:04:dd:a3:d6:80:83:1b:63:48:cb: 0c:02:0f:d7:8d:f4:f7:6a:5b:e7:55:83:d0:14:4d:62:37:d6: 8e:d2:48:77:64:5c:23:9d:be:9b:38:1e:c2:38:e5:a0:ea:12: ae:73:58:a2:18:c7:f3:e7:bc:f0:6b:3e:96:c3:c2:ff:8c:59: 62:1a:eb:d4:d4:cc:5f:4b:0c:08:8a:60:e9:fe:b2:3e:8b:04: b7:87:fb:0d:96:5e:70:00:63:66:2f:c3:a4:f2:5a:73:55:96: 6a:b1:9f:35:9c:b4:57:bb:a0:6d:da:4a:03:ec:04:3c:3a:76: f7:fc:ed:06:5c:48:24:c6:e4:00:8d:98:07:52:71:c3:44:09: 5c:8f:c1:61:03:60:53:d4:c0:ed:06:f9:b0:7e:cc:3f:d8:ed: 10:f9:00:d5:c0:65:48:1b:74:43:eb:20:45:76:0f:93:fd:7a: 82:7f:93:f2:1f:fd:21:6b:8f:8a:ad:28:20:6f:5b:40:7d:fc: dd:6f:54:cd:27:ad:f2:f2:63:85:3c:d7:f4:69:b4:f6:14:24: 36:15:67:ae:e1:a4:a9:45:17:13:82:c4:b8:89:c2:2a:33:d2: 7b:37:26:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPf1WtKgqzy/i/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MjU3YWJjMjktODI2NS00ZWE2LWJjMjktMmVjMzZhOGEwYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipESpITWIfN4Dail+WFN6thLIhk6WMzLkPuA e42ImZsxekXCiPDhc2CgK9zBGNeVZuCVd63nwp8jpZ6/Qx2xNs+sZbmYxDwMMoNt +dnvVXm0DY6xcEK2WbEQ6eOLRJ4UT45LlCbqte3KrWMy8XhV82OxjK7bka/gKEoq RhldeYN9AcTPatnr4trbT2pjvjfuYGs/EXy/KD28eYwArD7n5m/GIBTYxbVe/5A9 1OUVLDvkUiGOVgNRIfRb81LzSfuvfN2HQlqhZ6WCZRrUMbId440sAInYggpTOhiW ltNVLE4Zvc66VfxxDsneiJstm7KUSztZpfUwPJAdghKdzAr5PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFdXjbmsOpBeNopx2tegkp+c7+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTAxYmI4ZGUtMTcwNS0z ZjczLThhYmItZTgzM2M3YTJmODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARin9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd4O5umf3xuXFoDJn3CEj5V+qQnWGUn8MSSBN2j1oCDG2NIywwCD9eN 9PdqW+dVg9AUTWI31o7SSHdkXCOdvps4HsI45aDqEq5zWKIYx/PnvPBrPpbDwv+M WWIa69TUzF9LDAiKYOn+sj6LBLeH+w2WXnAAY2Yvw6TyWnNVlmqxnzWctFe7oG3a SgPsBDw6dvf87QZcSCTG5ACNmAdSccNECVyPwWEDYFPUwO0G+bB+zD/Y7RD5ANXA ZUgbdEPrIEV2D5P9eoJ/k/If/SFrj4qtKCBvW0B9/N1vVM0nrfLyY4U81/RptPYU JDYVZ67hpKlFFxOCxLiJwioz0ns3Jq4= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:40 2024 by rpki-client on console-ams.rpki-client.org