$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa File: 967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa (raw, json) Hash identifier: SSBeY+8IIbVzeCQwZW+hl0d5CqXGTvO4X9shaCshydY= Subject key identifier: 3B:0F:1D:E7:C7:F3:FA:52:72:ED:62:83:2C:0A:B5:1C:24:0B:CB:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D6F744A04DF891B241C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 16491 IP address blocks: 70.41.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:6f:74:4a:04:df:89:1b:24:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=3ab99167-7d83-49b3-982a-02c889de046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:42:0a:03:a9:1d:c1:80:76:c5:9f:ae:f3:89: 81:55:8e:bf:53:7f:4c:b4:64:2d:29:07:0d:92:14: 9c:d1:c6:0b:99:8c:66:84:a9:b7:4c:bb:f6:2a:94: 83:a4:85:ac:4f:f1:41:ca:6d:86:ef:a2:c6:ef:7e: 35:ee:3f:ea:84:34:de:f3:4f:2d:d0:9b:77:e4:95: 8d:df:d6:f5:37:24:a8:db:03:eb:7f:43:07:cb:b7: 83:05:2c:53:32:f3:74:eb:62:4d:7c:46:e7:82:e1: ea:1d:d4:47:9b:9d:87:95:5d:1c:0c:1b:b5:da:bf: ad:c1:28:3f:55:c4:aa:69:5c:d0:de:ea:a3:47:17: 57:35:67:7c:72:cc:db:aa:86:7f:5b:8a:2c:57:60: 88:73:01:ef:f3:8d:d8:1b:be:f7:67:a9:f2:67:46: bb:e2:e3:83:ab:f4:36:10:91:02:11:c3:3c:6d:5c: 61:37:b1:91:7f:7c:4f:83:57:06:9d:00:3b:79:f5: 43:f6:71:f4:cb:11:52:1a:14:c0:37:c2:ac:3e:09: e5:2d:e8:a9:a8:b4:35:ec:e7:9e:b8:97:6a:11:96: 4a:20:48:b2:ea:28:89:33:f2:3c:27:5d:e6:ee:9c: 6b:f5:da:11:3d:5d:4a:29:ee:50:32:86:29:7a:fc: e5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0F:1D:E7:C7:F3:FA:52:72:ED:62:83:2C:0A:B5:1C:24:0B:CB:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:92:9c:2c:fa:06:36:54:4d:09:dd:97:c1:57:5a:0c:09:1c: e2:f2:5a:1b:8c:88:8c:2e:94:ff:89:ca:05:31:71:33:5e:a4: 66:11:8e:58:6b:00:89:c3:de:ae:8e:94:47:af:7d:00:df:ce: 79:3b:2b:9c:9f:e1:79:e7:79:f2:87:a8:7e:c1:0a:7b:4b:6b: c3:5a:a5:5a:46:cd:78:d6:8e:73:f7:f8:94:a1:5c:42:34:31: 61:0e:b1:ae:78:28:38:53:62:27:49:fd:39:7b:0e:42:54:2d: 10:e2:15:0c:9d:a2:f0:01:c7:be:6a:4c:49:61:e0:e5:ba:4d: 82:85:b6:b0:11:00:d3:bf:8a:b4:32:ef:89:fd:29:d3:21:d7: dc:f4:da:ea:6e:a0:07:cc:d2:28:05:07:2c:15:9e:55:a5:ab: 31:65:4c:ce:64:a2:e1:01:11:e2:59:f8:7f:83:57:a7:ff:26: 02:72:be:95:89:db:a1:ea:5b:7a:a4:47:45:98:fd:f5:0b:59: 9f:0c:43:ea:cc:2c:52:e9:da:65:c1:c8:5e:a2:29:56:a8:dc: 9d:a8:bb:d9:60:d7:b9:da:99:ed:16:2a:82:a7:c6:67:3b:35: ca:2b:3c:a3:ce:d3:58:b1:d2:d4:47:2f:54:95:04:e8:1d:d5: 73:6f:07:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPW90SgTfiRskHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk M2FiOTkxNjctN2Q4My00OWIzLTk4MmEtMDJjODg5ZGUwNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEIKA6kdwYB2xZ+u84mBVY6/U39MtGQtKQcN khSc0cYLmYxmhKm3TLv2KpSDpIWsT/FBym2G76LG73417j/qhDTe808t0Jt35JWN 39b1NySo2wPrf0MHy7eDBSxTMvN062JNfEbnguHqHdRHm52HlV0cDBu12r+twSg/ VcSqaVzQ3uqjRxdXNWd8cszbqoZ/W4osV2CIcwHv843YG773Z6nyZ0a74uODq/Q2 EJECEcM8bVxhN7GRf3xPg1cGnQA7efVD9nH0yxFSGhTAN8KsPgnlLeipqLQ17Oee uJdqEZZKIEiy6iiJM/I8J13m7pxr9doRPV1KKe5QMoYpevzlnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsPHefH8/pScu1igywKtRwkC8uUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTY3Yzc1MzQtMzA2NS0z ZWFmLWI4MWYtNGY0ZjJmNGY5OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqSnCz6BjZUTQndl8FXWgwJHOLyWhuMiIwulP+JygUxcTNepGYRjlhr AInD3q6OlEevfQDfznk7K5yf4XnnefKHqH7BCntLa8NapVpGzXjWjnP3+JShXEI0 MWEOsa54KDhTYidJ/Tl7DkJULRDiFQydovABx75qTElh4OW6TYKFtrARANO/irQy 74n9KdMh19z02upuoAfM0igFBywVnlWlqzFlTM5kouEBEeJZ+H+DV6f/JgJyvpWJ 26HqW3qkR0WY/fULWZ8MQ+rMLFLp2mXByF6iKVao3J2ou9lg17name0WKoKnxmc7 NcorPKPO01ix0tRHL1SVBOgd1XNvBxE= -----END CERTIFICATE-----Generated at Sun Apr 28 00:51:15 2024 by rpki-client on console-ams.rpki-client.org