$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96ac2500-9cc2-33d3-91f8-4185fb8b1b08.roa File: 96ac2500-9cc2-33d3-91f8-4185fb8b1b08.roa (raw, json) Hash identifier: U4o+5fL2/n9XdtgYN+wV5Cr8TLev+33o9WfdD1RRZnM= Subject key identifier: 4B:F3:43:F6:FC:A6:13:C4:EC:E9:95:17:77:CE:ED:AD:88:0F:77:41 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581085DF8D830DEA438A080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96ac2500-9cc2-33d3-91f8-4185fb8b1b08.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:08:5d:f8:d8:30:de:a4:38:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6801b9f7-93e8-4c67-bf98-ce1ce77cbd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:79:f2:90:35:87:3e:4c:45:6f:1e:67:b9: 69:07:7e:3d:85:c5:e4:65:19:34:78:bd:55:b9:43: 4e:a5:b4:4a:0a:e2:41:02:0f:56:e5:b3:5e:54:0c: 41:fd:78:d8:44:82:a8:9f:c5:38:a0:93:ba:61:a0: c1:2a:d7:56:84:e5:58:62:73:7b:56:bd:27:00:ae: a2:47:ad:10:64:51:33:d3:1f:7c:68:c5:68:69:e4: e0:da:01:83:94:f2:94:91:00:fb:80:65:4d:c0:0f: e7:4a:a6:e2:fb:33:f6:b2:8d:db:95:4b:d8:f7:50: 2b:c7:8f:10:63:68:e4:ad:e1:01:92:68:e8:e5:4c: 10:a3:51:f9:2d:c3:c5:2a:7b:81:aa:25:00:1f:e0: 8e:fc:3b:ff:2b:19:0a:e6:8b:9d:7c:ac:92:80:85: 42:4e:e0:ae:db:c5:7f:a6:90:cb:2e:0a:de:4e:e8: 5d:e3:a9:e9:47:a5:d9:e3:b5:a8:e7:d6:27:c2:03: 27:c7:92:6b:8a:92:4b:05:2e:22:ee:5d:71:b5:19: 2d:de:f1:b8:81:23:b9:35:81:7e:18:84:f4:6d:6a: 44:89:c9:4a:54:4b:da:74:c0:dd:8a:d5:82:ec:7b: 54:ac:fa:f1:60:2d:72:b6:47:44:dd:19:85:3f:38: 42:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F3:43:F6:FC:A6:13:C4:EC:E9:95:17:77:CE:ED:AD:88:0F:77:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96ac2500-9cc2-33d3-91f8-4185fb8b1b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e6:23:fb:08:10:04:47:6d:12:d9:6e:2a:08:5a:04:35:95: b1:91:cd:0c:0c:47:df:38:d8:f7:e0:96:a2:63:57:a0:cc:91: 6b:53:27:dc:91:34:76:12:15:b9:1f:e2:be:f5:f3:b5:46:69: 79:1d:ca:11:45:b2:ab:fe:00:0b:88:fb:f1:8b:0c:f7:c3:f5: 26:3c:b2:7f:6e:66:88:27:59:21:b8:36:06:6a:84:c8:dc:16: c1:93:d2:79:89:53:f9:49:5a:93:87:9b:95:d7:06:22:bb:e1: 4f:ef:f1:c6:7f:b0:2d:44:64:10:f7:f5:e3:c8:59:d2:c5:c0: 1d:94:95:98:56:74:13:44:54:4d:a8:f9:6f:bc:96:fc:cc:e7: ed:ff:fd:a1:9d:8a:8b:4f:67:97:5a:6a:7d:94:ac:d9:19:22: e0:96:90:99:d0:f9:a2:87:e1:2f:20:89:f2:52:d2:07:78:ed: 2c:92:6e:46:72:3b:14:7b:c4:b2:18:05:60:9c:f8:07:8b:a4: 70:98:07:59:c7:54:5c:a5:a2:98:2c:11:b1:38:c1:2d:de:a3: 72:e9:9c:e0:ad:89:82:20:e2:e4:3d:ec:a4:4c:68:e0:32:ea: 0c:19:e1:00:da:43:8a:77:5f:af:24:d9:bc:69:87:26:58:5a: 4e:63:3f:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQhd+Ngw3qQ4oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjgwMWI5ZjctOTNlOC00YzY3LWJmOTgtY2UxY2U3N2NiZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnN58pA1hz5MRW8eZ7lpB349hcXkZRk0eL1V uUNOpbRKCuJBAg9W5bNeVAxB/XjYRIKon8U4oJO6YaDBKtdWhOVYYnN7Vr0nAK6i R60QZFEz0x98aMVoaeTg2gGDlPKUkQD7gGVNwA/nSqbi+zP2so3blUvY91Arx48Q Y2jkreEBkmjo5UwQo1H5LcPFKnuBqiUAH+CO/Dv/KxkK5oudfKySgIVCTuCu28V/ ppDLLgreTuhd46npR6XZ47Wo59YnwgMnx5JripJLBS4i7l1xtRkt3vG4gSO5NYF+ GIT0bWpEiclKVEvadMDditWC7HtUrPrxYC1ytkdE3RmFPzhC/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvzQ/b8phPE7OmVF3fO7a2ID3dBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTZhYzI1MDAtOWNjMi0z M2QzLTkxZjgtNDE4NWZiOGIxYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvmI/sIEARHbRLZbioIWgQ1lbGRzQwMR9842PfglqJjV6DMkWtTJ9yR NHYSFbkf4r7187VGaXkdyhFFsqv+AAuI+/GLDPfD9SY8sn9uZognWSG4NgZqhMjc FsGT0nmJU/lJWpOHm5XXBiK74U/v8cZ/sC1EZBD39ePIWdLFwB2UlZhWdBNEVE2o +W+8lvzM5+3//aGdiotPZ5daan2UrNkZIuCWkJnQ+aKH4S8gifJS0gd47SySbkZy OxR7xLIYBWCc+AeLpHCYB1nHVFylopgsEbE4wS3eo3LpnOCtiYIg4uQ97KRMaOAy 6gwZ4QDaQ4p3X68k2bxphyZYWk5jP6k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:58 2025 by rpki-client