$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa File: 967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa (raw, json) Hash identifier: /qVmgyjc35bF+5Qh5JzMg3ph6DXHmBloG0kTrKUvv1U= Subject key identifier: 37:0A:C8:21:A9:F9:24:AB:B5:E7:C8:E8:F0:86:AD:2B:69:85:15:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580F93B07AA43EFF78D0000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 16491 IP address blocks: 70.41.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:f9:3b:07:aa:43:ef:f7:8d:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5be8978e-7488-4119-b005-bfe694eea5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:b9:34:29:f1:4a:c1:76:bf:56:39:93:c8: ff:53:23:af:59:b5:90:5e:81:91:c1:47:3c:33:3d: 03:9e:f2:7a:8b:86:fc:30:46:5f:80:df:d9:3d:f6: 60:68:8d:30:81:cf:e3:8c:89:6c:82:1a:c5:cd:08: 94:bb:da:a1:d9:b1:a1:37:03:6b:0e:9b:c4:b7:e3: 74:4e:92:3e:ce:c1:ed:eb:8c:24:df:bd:f9:9c:86: f0:67:41:c4:b3:8b:b0:8d:d0:32:5a:1d:7d:eb:8d: cd:56:f5:18:ec:60:0e:7f:0a:5e:a1:32:bc:90:61: 37:f5:e6:13:98:23:54:92:6b:84:9b:54:0e:7b:b8: 25:ac:68:c4:35:15:c9:2a:b2:f5:5e:88:cf:b2:16: 37:1a:67:44:67:d8:8b:58:e6:a2:99:ee:79:e5:48: 08:6f:ab:da:a3:38:89:62:22:f6:32:ed:92:4c:0d: 14:ac:71:eb:cf:a1:2e:06:9f:4d:85:30:a0:0d:dc: 50:15:08:2d:7d:07:ce:0b:09:8f:35:32:2c:47:9a: 9c:6b:d3:11:27:d2:ed:dc:9e:7b:4d:5c:2e:03:07: 01:93:d3:53:e8:ef:67:ce:e0:07:b5:20:51:d9:e5: 75:3b:26:52:ab:b1:25:f1:79:41:aa:8d:0d:62:f1: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0A:C8:21:A9:F9:24:AB:B5:E7:C8:E8:F0:86:AD:2B:69:85:15:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:77:b0:82:9c:2a:8b:b8:2d:bd:c4:ae:9b:f1:82:73:a3:3a: 32:8b:0b:8c:d7:41:03:8c:de:01:0d:2c:a4:3e:f6:23:68:27: 2a:84:08:18:23:38:c7:1b:6c:2c:72:ee:cc:ac:31:d0:2a:1b: 5e:4e:50:76:76:65:c6:38:7f:dd:15:e6:15:de:99:49:f0:70: 03:c5:60:13:0d:dd:e0:df:5e:b3:e5:ee:56:b2:21:e2:31:9f: df:1c:bb:ab:e3:a7:e6:f0:b6:60:d4:4a:06:7a:e3:65:af:31: 41:a8:c1:92:dd:0f:a5:12:bd:d9:bb:a7:dd:74:e9:6c:44:a2: 7b:ff:ef:bc:55:cc:7f:9b:5d:83:5f:4e:b5:28:0c:9a:fc:16: 58:db:44:87:85:57:ed:8c:45:f1:b4:be:f6:34:07:d6:93:7e: ce:2b:6c:df:f8:82:13:e8:fc:4e:67:eb:db:af:e9:5d:88:6d: 59:0a:43:4f:ea:b9:d8:df:b0:67:e0:cd:98:94:fd:27:dd:b4: 6c:51:f4:79:c6:f0:d7:17:a6:72:e5:6a:1f:e7:90:45:e4:06: b0:89:56:2d:94:e4:92:99:7a:78:65:20:cc:e1:cb:68:a1:9b: e2:ac:a6:0c:6a:ed:34:85:eb:db:77:4c:a0:0f:58:e2:4b:66: 80:9b:6d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPk7B6pD7/eNAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWJlODk3OGUtNzQ4OC00MTE5LWIwMDUtYmZlNjk0ZWVhNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnq5NCnxSsF2v1Y5k8j/UyOvWbWQXoGRwUc8 Mz0DnvJ6i4b8MEZfgN/ZPfZgaI0wgc/jjIlsghrFzQiUu9qh2bGhNwNrDpvEt+N0 TpI+zsHt64wk3735nIbwZ0HEs4uwjdAyWh19643NVvUY7GAOfwpeoTK8kGE39eYT mCNUkmuEm1QOe7glrGjENRXJKrL1XojPshY3GmdEZ9iLWOaime555UgIb6vaoziJ YiL2Mu2STA0UrHHrz6EuBp9NhTCgDdxQFQgtfQfOCwmPNTIsR5qca9MRJ9Lt3J57 TVwuAwcBk9NT6O9nzuAHtSBR2eV1OyZSq7El8XlBqo0NYvGZdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcKyCGp+SSrtefI6PCGrStphRV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTY3Yzc1MzQtMzA2NS0z ZWFmLWI4MWYtNGY0ZjJmNGY5OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR3sIKcKou4Lb3ErpvxgnOjOjKLC4zXQQOM3gENLKQ+9iNoJyqECBgj OMcbbCxy7sysMdAqG15OUHZ2ZcY4f90V5hXemUnwcAPFYBMN3eDfXrPl7layIeIx n98cu6vjp+bwtmDUSgZ642WvMUGowZLdD6USvdm7p9106WxEonv/77xVzH+bXYNf TrUoDJr8FljbRIeFV+2MRfG0vvY0B9aTfs4rbN/4ghPo/E5n69uv6V2IbVkKQ0/q udjfsGfgzZiU/SfdtGxR9HnG8NcXpnLlah/nkEXkBrCJVi2U5JKZenhlIMzhy2ih m+Kspgxq7TSF69t3TKAPWOJLZoCbbeI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:37 2025 by rpki-client