$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/94cda60b-70b5-3edc-a46d-2bc9145ab85a.roa File: 94cda60b-70b5-3edc-a46d-2bc9145ab85a.roa (raw, json) Hash identifier: jqls6LwmqLOSGKbsycisOq1Uh4kO/a0R3sxlTtdfIkw= Subject key identifier: 76:DD:0B:57:4B:23:E1:AE:B0:68:07:B4:8D:0B:20:77:57:73:16:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58108FE6D4A53EC407CAE80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/94cda60b-70b5-3edc-a46d-2bc9145ab85a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:08:fe:6d:4a:53:ec:40:7c:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=58a2eeb1-c475-4c02-b461-73ea7ea39301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:c6:1e:d8:e7:cb:39:5b:23:77:34:ea:6b: 58:3c:5d:0b:a7:80:6f:d7:01:ed:fd:dc:bd:d4:1b: 78:83:84:15:7f:69:5f:65:0a:6a:32:49:b9:4c:6c: 69:00:fc:e6:41:a0:d3:5c:60:fc:7e:58:de:7a:5c: 87:61:91:8f:6b:b9:d9:56:cd:90:c4:c3:94:d5:d5: 72:e0:c9:9b:f9:66:f9:1b:a6:75:6e:2b:ec:c0:cd: 57:a2:4f:dc:0e:1f:bb:ed:e4:20:a9:27:99:a6:61: b5:e7:f3:d2:0c:c5:de:e6:c7:08:58:5f:aa:36:7e: c3:20:9a:73:f0:bf:e7:4f:8e:cd:05:3e:17:b8:4f: 71:57:d0:8d:a6:68:27:1c:d0:ed:15:bf:8b:90:b9: 19:4c:13:86:01:b8:de:49:24:3a:e0:a4:20:19:90: a8:73:f8:7b:34:4e:97:77:40:ec:14:e9:9e:ea:2d: e9:bd:9d:e3:4f:fe:22:be:57:4d:27:f9:9f:b5:8e: 43:95:66:1d:d6:04:75:ab:40:a7:bb:d7:f2:b1:f1: 64:05:9d:8f:80:36:9c:c5:a5:21:67:3e:55:ab:49: d4:71:49:04:94:72:2d:08:86:81:ee:88:f0:d1:58: da:bc:34:10:69:f7:87:0b:a6:77:1d:8f:91:84:96: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DD:0B:57:4B:23:E1:AE:B0:68:07:B4:8D:0B:20:77:57:73:16:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/94cda60b-70b5-3edc-a46d-2bc9145ab85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:dd:81:50:87:47:47:b1:2c:01:a2:76:6e:8f:0d:8a:9a:e0: 1c:03:b6:2a:fa:15:e5:79:19:82:26:07:8b:58:2d:f0:de:bd: a3:85:c4:30:77:8a:ab:b9:87:d0:3d:a7:c5:bb:34:17:a6:dc: a3:dd:0e:c7:da:7e:53:18:0f:27:09:a6:03:e0:67:70:08:20: ed:ba:79:1e:bf:68:12:1d:d9:81:42:5b:3f:5b:fb:1f:65:40: b9:17:d0:45:8b:cc:c4:c3:68:67:2a:d5:7f:df:6a:10:7a:ec: 95:30:3d:d6:9c:b3:09:10:4c:ed:e1:bf:86:1b:23:6e:ff:08: b0:fd:78:98:d1:3f:d8:24:bf:1e:cf:0a:5e:a5:d1:f1:71:3a: e5:fe:3a:6f:0d:93:e4:d3:12:52:b1:7c:33:99:07:b4:8e:87: 79:9f:92:f0:0b:9f:fd:78:d6:7b:ec:fb:69:31:21:f5:fe:48: b1:aa:51:5b:13:8d:75:5c:fb:19:ec:61:35:a1:a3:9a:4e:76: cb:5a:70:0c:61:9f:95:3b:3f:c1:8a:76:69:7f:b7:01:14:16: 10:7e:f0:55:c7:28:3b:e5:61:8e:e7:7b:01:9f:ee:28:83:15: dc:51:05:c4:7e:f3:0a:42:c9:d1:05:59:7d:3e:b5:2c:eb:84: 0b:27:f4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQj+bUpT7EB8roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NThhMmVlYjEtYzQ3NS00YzAyLWI0NjEtNzNlYTdlYTM5MzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4zGHtjnyzlbI3c06mtYPF0Lp4Bv1wHt/dy9 1Bt4g4QVf2lfZQpqMkm5TGxpAPzmQaDTXGD8fljeelyHYZGPa7nZVs2QxMOU1dVy 4Mmb+Wb5G6Z1bivswM1Xok/cDh+77eQgqSeZpmG15/PSDMXe5scIWF+qNn7DIJpz 8L/nT47NBT4XuE9xV9CNpmgnHNDtFb+LkLkZTBOGAbjeSSQ64KQgGZCoc/h7NE6X d0DsFOme6i3pvZ3jT/4ivldNJ/mftY5DlWYd1gR1q0Cnu9fysfFkBZ2PgDacxaUh Zz5Vq0nUcUkElHItCIaB7ojw0VjavDQQafeHC6Z3HY+RhJaPaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbdC1dLI+GusGgHtI0LIHdXcxaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTRjZGE2MGItNzBiNS0z ZWRjLWE0NmQtMmJjOTE0NWFiODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANjdgVCHR0exLAGidm6PDYqa4BwDtir6FeV5GYImB4tYLfDevaOFxDB3 iqu5h9A9p8W7NBem3KPdDsfaflMYDycJpgPgZ3AIIO26eR6/aBId2YFCWz9b+x9l QLkX0EWLzMTDaGcq1X/fahB67JUwPdacswkQTO3hv4YbI27/CLD9eJjRP9gkvx7P Cl6l0fFxOuX+Om8Nk+TTElKxfDOZB7SOh3mfkvALn/141nvs+2kxIfX+SLGqUVsT jXVc+xnsYTWho5pOdstacAxhn5U7P8GKdml/twEUFhB+8FXHKDvlYY7newGf7iiD FdxRBcR+8wpCydEFWX0+tSzrhAsn9DQ= -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:01 2025 by rpki-client