$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d5b4b4b-cb9f-3267-96b9-099ca30cd730.roa File: 9d5b4b4b-cb9f-3267-96b9-099ca30cd730.roa (raw, json) Hash identifier: /N0Xjcq+D4OdXoQcrOgtVohfP1FoA21W7TX4pXFcJ/I= Subject key identifier: 45:C6:F3:D4:5F:B0:13:2B:53:9C:64:A7:89:87:2E:3A:97:20:A7:CC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580FA59D075895ECBA122C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d5b4b4b-cb9f-3267-96b9-099ca30cd730.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 70.41.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:fa:59:d0:75:89:5e:cb:a1:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c9f2c472-9c86-40b5-812f-16390c199965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d6:b5:2b:bc:29:e9:6d:51:9e:35:7f:14:1d: 4b:e5:c5:f4:9f:40:1d:95:81:53:e7:66:0d:ed:4d: d1:9d:82:1b:44:4f:46:57:0f:48:78:e8:32:8d:5d: 5d:b8:4d:ec:13:09:bf:3b:93:4a:ac:f4:56:14:c2: b8:12:54:56:88:e0:c8:b0:47:97:d9:5d:5a:ae:f9: ef:8d:75:56:41:c5:23:77:e5:4a:98:bf:f9:3e:d1: 57:ac:41:da:99:70:9e:19:d5:04:e2:a7:1a:13:c4: b1:3f:af:ad:3c:4f:8e:c0:73:95:d5:6c:58:4f:11: c2:04:6d:d8:da:87:dc:21:c7:83:21:81:7f:4d:8b: c9:c1:92:33:87:d0:e6:4f:23:5a:52:ea:c1:96:c6: 58:5d:8e:d2:c3:e6:83:69:b6:f1:5a:68:f0:20:2a: b1:fd:c8:21:9b:36:b3:d1:8f:c7:05:df:56:cf:50: 11:82:92:4e:c1:0b:26:92:e0:38:78:a2:29:0e:5f: b0:f8:28:1f:42:67:98:d1:7f:98:d9:f5:df:21:58: 1f:9b:f9:16:bb:78:6b:02:cc:d8:52:be:24:a1:9b: 3f:fc:7f:36:52:c4:a2:6e:81:d6:a6:21:f8:34:6b: 2f:72:a5:e7:c0:0d:72:e3:99:f3:62:65:bc:62:72: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C6:F3:D4:5F:B0:13:2B:53:9C:64:A7:89:87:2E:3A:97:20:A7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d5b4b4b-cb9f-3267-96b9-099ca30cd730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b0:7e:8a:6b:06:c2:a6:c8:bf:22:8f:ce:b9:b7:0d:14:76: ff:b2:f0:9f:fc:9d:21:df:67:6a:eb:1d:ba:ef:34:f1:ee:ec: dd:17:a9:92:d0:18:90:d3:94:28:1b:a9:de:da:2f:38:37:93: 91:0b:cc:fd:32:19:ce:1e:07:43:a0:0e:bc:9c:52:9f:47:d4: 88:61:f4:06:2d:cc:77:8d:cd:7f:95:ab:5e:38:00:5b:f5:e6: 44:6a:ec:c0:35:dd:eb:fd:33:7c:11:41:42:5a:fc:28:49:bf: 23:79:72:7e:4e:f6:38:c1:00:41:ab:a0:20:09:3a:f7:f6:6f: 9d:9c:63:22:f4:24:29:63:d7:9e:ba:de:c6:a9:08:f5:ce:57: 7d:57:33:5c:09:17:fe:73:17:e2:75:e7:7b:e5:5d:a3:9b:e0: a9:7e:94:d3:ec:15:d9:51:37:6e:20:64:27:38:34:4a:d0:86: d6:96:e3:f5:3a:69:1f:a1:be:82:fa:db:59:9b:da:e9:ea:1a: a1:aa:72:b3:5c:46:49:92:25:f8:36:00:26:30:09:07:76:66: bd:6c:e6:5e:13:08:cb:8a:48:5c:d7:53:64:c8:86:a7:67:b7: a6:26:4d:24:a1:54:17:4e:bd:4c:20:bd:c5:cd:f0:8c:38:8e: 7d:5e:f8:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPpZ0HWJXsuhIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzlmMmM0NzItOWM4Ni00MGI1LTgxMmYtMTYzOTBjMTk5OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9a1K7wp6W1RnjV/FB1L5cX0n0AdlYFT52YN 7U3RnYIbRE9GVw9IeOgyjV1duE3sEwm/O5NKrPRWFMK4ElRWiODIsEeX2V1arvnv jXVWQcUjd+VKmL/5PtFXrEHamXCeGdUE4qcaE8SxP6+tPE+OwHOV1WxYTxHCBG3Y 2ofcIceDIYF/TYvJwZIzh9DmTyNaUurBlsZYXY7Sw+aDabbxWmjwICqx/cghmzaz 0Y/HBd9Wz1ARgpJOwQsmkuA4eKIpDl+w+CgfQmeY0X+Y2fXfIVgfm/kWu3hrAszY Ur4koZs//H82UsSiboHWpiH4NGsvcqXnwA1y45nzYmW8YnIlLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXG89RfsBMrU5xkp4mHLjqXIKfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWQ1YjRiNGItY2I5Zi0z MjY3LTk2YjktMDk5Y2EzMGNkNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmwfoprBsKmyL8ij865tw0Udv+y8J/8nSHfZ2rrHbrvNPHu7N0XqZLQ GJDTlCgbqd7aLzg3k5ELzP0yGc4eB0OgDrycUp9H1Ihh9AYtzHeNzX+Vq144AFv1 5kRq7MA13ev9M3wRQUJa/ChJvyN5cn5O9jjBAEGroCAJOvf2b52cYyL0JClj1566 3sapCPXOV31XM1wJF/5zF+J153vlXaOb4Kl+lNPsFdlRN24gZCc4NErQhtaW4/U6 aR+hvoL621mb2unqGqGqcrNcRkmSJfg2ACYwCQd2Zr1s5l4TCMuKSFzXU2TIhqdn t6YmTSShVBdOvUwgvcXN8Iw4jn1e+HM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:07 2025 by rpki-client