$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa File: 96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa (raw, json) Hash identifier: Wgm8M5vndU6+v1bXF6E/e0DB1+KUlk3U5oFDAMvYSr4= Subject key identifier: EB:4F:E1:E2:4E:4E:8D:A6:35:84:A8:18:87:9E:B3:3D:FB:C7:E5:11 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F432858454F02C2F7F94A446F31795F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa Signing time: Sun 24 Mar 2024 01:00:24 +0000 ROA not before: Sun 24 Mar 2024 01:00:24 +0000 ROA not after: Sat 22 Jun 2024 01:00:24 +0000 asID: 40306 IP address blocks: 70.41.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4f:02:c2:f7:f9:4a:44:6f:31:79:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 24 01:00:24 2024 GMT Not After : Jun 22 01:00:24 2024 GMT Subject: CN=8afbf289-e276-4fcb-807d-7f5eca211791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6e:a1:58:67:43:11:1d:dd:f9:58:28:9e:7b: 1f:09:96:0a:61:45:d6:87:70:c2:14:63:3a:aa:6a: 62:f1:78:c9:c4:2d:45:6e:26:18:e5:0a:a3:ed:76: 57:00:92:9b:dd:f3:d7:82:07:68:19:56:20:df:68: c1:c0:ba:ea:88:d2:4c:c5:d2:a4:83:9c:c4:ca:37: 43:04:66:98:f6:9f:87:09:f7:30:f7:c4:3a:2c:38: 53:8a:9d:ad:8b:2d:1c:4b:d2:49:50:db:2a:95:4c: 21:22:ed:82:b2:b6:e2:1f:2d:ab:ff:f1:45:9a:45: 47:9b:58:57:4e:c1:a5:66:d0:e4:4e:de:e6:c6:cf: ed:96:f5:7a:42:0e:14:f3:9b:1d:b8:d0:06:bd:0b: 33:49:a7:4c:ae:3d:e0:7c:1c:c8:04:ea:8a:8d:7b: 5f:75:6c:4a:b8:ff:91:69:e9:09:5c:33:d7:3e:86: 47:2b:1a:09:e4:c1:8c:fc:fd:19:34:f6:f4:7e:be: 0c:5c:5a:cc:9a:eb:e7:d4:71:1e:35:99:f2:41:76: 50:f6:7e:05:51:a9:1b:62:27:cd:b3:3b:7b:b3:c9: b8:7b:55:85:e6:78:10:f5:1e:14:0c:f7:7c:fd:3d: a3:e9:42:ae:6e:c4:43:47:7e:d7:e5:84:3f:4e:50: b2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4F:E1:E2:4E:4E:8D:A6:35:84:A8:18:87:9E:B3:3D:FB:C7:E5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:0a:51:dc:68:6d:99:00:90:b8:a6:5e:8d:b2:8e:95:fb:98: 47:68:2f:18:5a:3a:21:46:01:94:8b:82:65:b5:d9:67:5d:ba: ba:bd:54:89:14:33:29:74:fb:c0:02:89:db:66:75:8e:15:c6: f5:50:56:c1:a0:63:aa:02:a1:e0:97:7d:5d:7e:f7:a3:64:b1: 9a:8b:e3:a5:df:0c:f4:51:39:1d:1a:f6:6a:1d:b1:87:d4:49: a8:40:0e:fa:ac:ab:6c:fc:7b:6f:60:53:b0:77:00:02:e5:90: 52:41:88:82:fe:18:1b:e2:c7:fa:b7:c7:86:18:da:44:26:fa: 72:0c:7d:92:ef:de:e4:f5:5b:b5:35:d0:4c:2d:22:f9:9f:1c: 65:c2:fa:1f:90:2e:80:c2:6d:86:2a:34:a0:f3:e6:de:cc:01: 78:a2:22:32:84:16:74:c0:2e:c8:d7:67:6c:59:44:44:a1:85: 6b:50:58:ed:7c:07:df:74:d6:a8:ca:bd:2d:f0:76:31:66:83: eb:2a:0b:0b:07:48:1c:40:ea:18:90:1b:65:39:ff:e5:6c:da: cf:a6:78:f4:1e:0b:0b:07:8d:39:26:b4:fe:bf:fd:4e:57:da: d1:80:46:db:0a:21:92:35:05:8f:bf:06:94:d3:e8:d5:2c:aa: 17:c4:2d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVPAsL3+UpEbzF5XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyNDAxMDAyNFoXDTI0MDYyMjAxMDAyNFowLzEtMCsGA1UEAxMk OGFmYmYyODktZTI3Ni00ZmNiLTgwN2QtN2Y1ZWNhMjExNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG6hWGdDER3d+VgonnsfCZYKYUXWh3DCFGM6 qmpi8XjJxC1FbiYY5Qqj7XZXAJKb3fPXggdoGVYg32jBwLrqiNJMxdKkg5zEyjdD BGaY9p+HCfcw98Q6LDhTip2tiy0cS9JJUNsqlUwhIu2CsrbiHy2r//FFmkVHm1hX TsGlZtDkTt7mxs/tlvV6Qg4U85sduNAGvQszSadMrj3gfBzIBOqKjXtfdWxKuP+R aekJXDPXPoZHKxoJ5MGM/P0ZNPb0fr4MXFrMmuvn1HEeNZnyQXZQ9n4FUakbYifN szt7s8m4e1WF5ngQ9R4UDPd8/T2j6UKubsRDR37X5YQ/TlCyyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtP4eJOTo2mNYSoGIeesz37x+URMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTZlN2Q5MWYtM2ExZi0z ZjRkLTk1ZmQtOTYzNGQ3ZTg3ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANEKUdxobZkAkLimXo2yjpX7mEdoLxhaOiFGAZSLgmW12Wddurq9VIkU Myl0+8ACidtmdY4VxvVQVsGgY6oCoeCXfV1+96NksZqL46XfDPRROR0a9modsYfU SahADvqsq2z8e29gU7B3AALlkFJBiIL+GBvix/q3x4YY2kQm+nIMfZLv3uT1W7U1 0EwtIvmfHGXC+h+QLoDCbYYqNKDz5t7MAXiiIjKEFnTALsjXZ2xZREShhWtQWO18 B9901qjKvS3wdjFmg+sqCwsHSBxA6hiQG2U5/+Vs2s+mePQeCwsHjTkmtP6//U5X 2tGARtsKIZI1BY+/BpTT6NUsqhfELSg= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:36 2024 by rpki-client on console-ams.rpki-client.org