$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa File: a08ce2be-b409-35c4-a379-ba55950d59ea.roa (raw, json) Hash identifier: P+WdqaN1kgrSvntsg/8WV6g7rqGEw6HXzVoyqSEem34= Subject key identifier: F4:1F:AF:5A:85:61:F5:3D:82:62:82:11:B7:0B:4C:C4:1B:94:48:A0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819BFA3530195A72484AC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9b:fa:35:30:19:5a:72:48:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=aec5e30c-b5ea-49f9-8ec7-b633329b3d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:67:ca:ab:e4:6c:fd:36:13:b0:d6:4b:2a:67: 8b:e2:f0:cc:28:25:7b:9c:9f:69:35:04:57:91:6a: 85:52:57:29:1b:5a:f0:a0:3d:c9:48:13:b3:66:6a: 9e:54:4d:2f:82:ce:d2:e9:b6:77:0d:83:d1:41:94: 8f:92:8d:84:59:1e:78:85:d8:86:f1:88:dd:64:80: dc:85:52:6a:ec:65:d6:97:00:07:f7:18:4b:20:ee: 24:24:c0:08:1a:ab:0f:47:b3:04:3b:c2:b2:b0:cf: 47:52:f8:b3:96:a8:48:97:a1:2b:de:ff:bd:da:4b: 40:18:63:b9:16:03:d3:2a:12:4e:8a:f2:75:2d:cc: 55:54:0d:b6:f4:0a:8d:e3:28:d2:66:53:8b:a2:e0: f5:bf:79:96:cb:84:10:f6:11:b6:f5:ac:c9:b7:17: 67:97:43:a6:c9:78:08:31:3f:f8:2d:b8:32:ee:7d: b2:af:db:c5:61:7a:54:60:bb:66:c5:4a:75:e8:ee: ea:0d:d8:c0:80:d1:db:68:59:d2:c5:aa:0f:e0:09: 57:71:ce:39:43:1d:9b:ee:80:f0:4e:97:3f:95:23: 4d:06:17:f6:df:88:e9:e5:a7:f7:01:8b:0c:15:94: 7c:36:d9:31:09:28:e5:1f:5d:64:e4:5e:f7:80:eb: ba:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1F:AF:5A:85:61:F5:3D:82:62:82:11:B7:0B:4C:C4:1B:94:48:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:2c:35:68:32:55:30:af:02:61:a1:84:5d:72:f7:c7:74:40: c0:ee:86:4c:da:ff:7c:7c:75:34:62:3a:d9:a1:1a:45:52:e1: 5a:19:95:e8:ff:83:2d:5e:e9:6d:f2:1e:46:2c:8a:56:97:81: 2c:01:4c:42:90:a6:90:be:bf:5d:c9:83:b8:cd:e4:f3:fd:9a: 5c:c2:8b:66:1b:54:6b:e3:9f:1f:1d:29:a7:02:fd:44:51:2a: 04:b8:0f:f7:f1:82:47:c1:c8:40:39:3d:49:6a:ca:2b:b6:e4: cc:06:22:5b:20:12:c9:83:66:88:50:a8:67:b8:5a:06:33:68: 0c:07:21:f2:1f:90:af:7d:2f:e7:de:37:6b:c9:6c:2f:87:52: 25:d9:7b:5e:3d:75:b8:69:e0:d0:a7:fb:9c:9c:16:b5:af:e5: 91:f4:1d:70:32:f3:82:e2:59:78:94:cd:d5:a0:c9:94:a9:7f: 87:6c:37:02:0e:48:e2:93:09:52:8c:52:d3:86:ac:74:85:ed: 60:fa:14:c3:a1:d6:58:db:24:2f:b0:44:c0:16:4d:07:b6:fe: 7c:6d:6b:64:f0:7c:2c:85:94:5c:ab:55:f9:3b:55:02:f7:2e: 70:ab:63:f7:b4:d2:25:d6:4f:3a:4f:fd:1d:c1:eb:b5:9b:35: 6a:63:2f:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZv6NTAZWnJISsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWVjNWUzMGMtYjVlYS00OWY5LThlYzctYjYzMzMyOWIzZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWfKq+Rs/TYTsNZLKmeL4vDMKCV7nJ9pNQRX kWqFUlcpG1rwoD3JSBOzZmqeVE0vgs7S6bZ3DYPRQZSPko2EWR54hdiG8YjdZIDc hVJq7GXWlwAH9xhLIO4kJMAIGqsPR7MEO8KysM9HUvizlqhIl6Er3v+92ktAGGO5 FgPTKhJOivJ1LcxVVA229AqN4yjSZlOLouD1v3mWy4QQ9hG29azJtxdnl0OmyXgI MT/4Lbgy7n2yr9vFYXpUYLtmxUp16O7qDdjAgNHbaFnSxaoP4AlXcc45Qx2b7oDw Tpc/lSNNBhf234jp5af3AYsMFZR8NtkxCSjlH11k5F73gOu6JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQfr1qFYfU9gmKCEbcLTMQblEigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTA4Y2UyYmUtYjQwOS0z NWM0LWEzNzktYmE1NTk1MGQ1OWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8sNWgyVTCvAmGhhF1y98d0QMDuhkza/3x8dTRiOtmhGkVS4VoZlej/ gy1e6W3yHkYsilaXgSwBTEKQppC+v13Jg7jN5PP9mlzCi2YbVGvjnx8dKacC/URR KgS4D/fxgkfByEA5PUlqyiu25MwGIlsgEsmDZohQqGe4WgYzaAwHIfIfkK99L+fe N2vJbC+HUiXZe149dbhp4NCn+5ycFrWv5ZH0HXAy84LiWXiUzdWgyZSpf4dsNwIO SOKTCVKMUtOGrHSF7WD6FMOh1ljbJC+wRMAWTQe2/nxta2TwfCyFlFyrVfk7VQL3 LnCrY/e00iXWTzpP/R3B67WbNWpjL/M= -----END CERTIFICATE-----Generated at Fri Apr 11 22:34:40 2025 by rpki-client