$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/936fa4c3-1957-37f6-8e85-0c16e33783a6.roa File: 936fa4c3-1957-37f6-8e85-0c16e33783a6.roa (raw, json) Hash identifier: Nncy8HvXKWphN4U7lFc1sDfrV8nxjLsKbgGM7/ilfdo= Subject key identifier: E4:B0:AC:17:69:F9:CE:FF:BF:FB:7C:C8:DE:06:BE:E9:73:86:2B:3B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810ACAB5C50A4BBD3C6380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/936fa4c3-1957-37f6-8e85-0c16e33783a6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0a:ca:b5:c5:0a:4b:bd:3c:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=43c0efed-ee5c-4bf1-b3d6-3b493183e560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:5a:24:84:4d:31:d3:c2:08:35:df:48:a5: 3a:a4:95:b6:dd:d5:37:0c:f4:14:16:06:f1:b9:e9: 5d:4e:f8:ea:fb:18:96:8a:6b:96:07:20:5f:ef:b9: 22:06:bc:d0:1a:2b:26:b6:7b:ec:d1:ee:e0:5d:45: 36:d2:da:1a:9c:da:e8:25:41:29:f3:1c:7f:1f:01: c4:94:ef:ae:29:84:ee:0a:dd:7d:40:d2:26:f9:44: ed:74:24:a3:2a:d4:66:da:58:03:43:82:3f:be:c0: e0:af:67:bb:56:06:f1:ab:a0:ac:bd:59:a0:18:b5: f8:69:a4:49:b0:fd:a1:46:30:e2:a1:9f:77:2a:56: 9d:0d:1a:83:60:2f:6d:a3:fb:13:bf:66:65:1e:4c: 15:d2:96:1a:cc:6b:60:7d:ca:6b:5e:32:9b:a3:d6: ef:60:3f:3e:e0:4a:37:0c:94:46:e5:80:6a:c3:46: 54:e6:f7:ad:45:f8:58:38:18:36:06:f1:c1:71:85: 83:8a:0f:b6:e6:17:33:3e:60:b4:09:27:89:07:6d: 57:52:b7:a8:84:b2:83:0c:a8:34:d5:95:34:2c:10: ca:57:83:53:ee:03:2f:4e:04:89:dd:0e:9b:b3:23: 36:e3:b9:7c:b2:4b:a9:df:3c:36:5c:20:83:9d:d5: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B0:AC:17:69:F9:CE:FF:BF:FB:7C:C8:DE:06:BE:E9:73:86:2B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/936fa4c3-1957-37f6-8e85-0c16e33783a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:29:0f:49:08:b3:90:1e:72:c1:f3:21:75:56:b1:c8:3c:60: 22:dd:2a:60:df:7a:79:12:7e:00:9d:00:14:5b:8b:c6:f2:e8: 9c:5f:db:7e:b7:e2:2f:5c:3b:f1:c3:ed:5d:12:1e:a6:0b:fb: 58:00:df:7f:9c:7c:3d:7f:e4:eb:54:4a:7d:8e:5b:d0:5a:76: 88:c5:59:d5:7e:00:10:29:9f:a0:64:90:8f:2f:89:60:08:ad: 34:a3:5a:08:05:c4:7f:04:b4:17:d9:35:92:43:9c:ac:12:bd: 6a:33:a9:4a:56:d2:49:b0:1a:31:d1:3c:74:3d:69:25:46:51: 66:34:e1:03:c2:99:20:9e:5c:df:ba:5d:c4:22:91:67:88:ba: bd:f8:97:94:c4:1e:54:25:2f:9d:53:82:46:e1:e4:ee:57:ac: 97:fa:8b:df:7e:7f:e2:e3:72:bc:c3:72:9c:ed:89:b8:d2:3e: 01:df:38:8f:60:f4:66:87:e6:9f:46:d5:94:ed:c5:07:e3:17: 04:9f:e7:57:db:e2:9c:af:c7:3c:09:50:b0:86:e1:73:ab:33: 85:3c:d5:0a:35:f8:ba:e0:06:c1:a3:d7:08:92:f0:03:2f:95: 82:c6:d4:f1:c7:d8:fb:0d:25:3f:8a:29:48:d4:01:13:5d:04: 83:3c:72:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQrKtcUKS708Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDNjMGVmZWQtZWU1Yy00YmYxLWIzZDYtM2I0OTMxODNlNTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnixaJIRNMdPCCDXfSKU6pJW23dU3DPQUFgbx ueldTvjq+xiWimuWByBf77kiBrzQGismtnvs0e7gXUU20toanNroJUEp8xx/HwHE lO+uKYTuCt19QNIm+UTtdCSjKtRm2lgDQ4I/vsDgr2e7Vgbxq6CsvVmgGLX4aaRJ sP2hRjDioZ93KladDRqDYC9to/sTv2ZlHkwV0pYazGtgfcprXjKbo9bvYD8+4Eo3 DJRG5YBqw0ZU5vetRfhYOBg2BvHBcYWDig+25hczPmC0CSeJB21XUreohLKDDKg0 1ZU0LBDKV4NT7gMvTgSJ3Q6bsyM247l8skup3zw2XCCDndUMgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSwrBdp+c7/v/t8yN4Gvulzhis7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTM2ZmE0YzMtMTk1Ny0z N2Y2LThlODUtMGMxNmUzMzc4M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYpD0kIs5AecsHzIXVWscg8YCLdKmDfenkSfgCdABRbi8by6Jxf2363 4i9cO/HD7V0SHqYL+1gA33+cfD1/5OtUSn2OW9BadojFWdV+ABApn6BkkI8viWAI rTSjWggFxH8EtBfZNZJDnKwSvWozqUpW0kmwGjHRPHQ9aSVGUWY04QPCmSCeXN+6 XcQikWeIur34l5TEHlQlL51Tgkbh5O5XrJf6i99+f+LjcrzDcpztibjSPgHfOI9g 9GaH5p9G1ZTtxQfjFwSf51fb4pyvxzwJULCG4XOrM4U81Qo1+LrgBsGj1wiS8AMv lYLG1PHH2PsNJT+KKUjUARNdBIM8cj4= -----END CERTIFICATE-----Generated at Fri Apr 11 22:50:31 2025 by rpki-client