$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25ff607-9b23-38e0-95a9-bdc2496d6722.roa File: a25ff607-9b23-38e0-95a9-bdc2496d6722.roa (raw, json) Hash identifier: cJ4ZBkoKPif0DmkJ5jQyxm7RY+G8ay0q5aPkqC4Inbw= Subject key identifier: F8:2B:40:EE:8D:B0:9D:93:5E:2A:D9:71:A5:88:9E:A7:C1:9E:92:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819894B11C76A2D8516440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25ff607-9b23-38e0-95a9-bdc2496d6722.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:98:94:b1:1c:76:a2:d8:51:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=328c8aa0-253a-4307-8cda-adcc05b2ec1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:42:b8:a9:71:d5:0a:5a:80:cd:6a:c6:59:cb: f5:5f:d9:e1:3f:43:fe:7f:65:32:84:07:9f:df:58: 41:75:bf:20:5c:4a:32:72:ab:c4:23:eb:18:d6:35: 83:1d:4d:e9:4e:af:43:ae:2d:32:32:bb:ae:5a:7d: 90:d1:90:43:93:79:4e:2e:da:f3:5c:b3:a7:d2:97: 3a:16:1d:69:1a:ad:d5:18:f0:1b:b4:84:ae:d9:7e: c3:de:92:e6:4c:41:cf:f6:d3:03:97:df:94:cc:df: 09:36:1f:e1:bd:7f:03:b0:da:7b:ab:ae:da:aa:42: 59:35:93:2c:ff:e2:39:af:04:b9:83:17:ab:41:ab: 36:3a:10:99:76:4d:67:73:1d:27:bc:00:14:df:5b: be:d9:94:89:80:17:32:81:ed:5d:d3:3d:3b:58:8d: 28:52:c0:9a:19:41:8e:8b:61:75:42:7f:c1:11:83: ca:33:0f:37:92:44:18:e7:4a:17:55:0a:c2:c1:b0: 08:3a:00:f4:88:72:0c:67:95:49:c2:b7:60:34:bb: 8f:5b:3e:e4:35:77:88:97:ea:81:d0:c7:0d:34:82: e3:7c:92:6e:a3:13:b0:06:b4:af:bb:ae:1f:fb:e1: 8b:ca:db:af:9b:7b:e4:10:6c:17:0a:59:bf:d3:0b: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2B:40:EE:8D:B0:9D:93:5E:2A:D9:71:A5:88:9E:A7:C1:9E:92:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25ff607-9b23-38e0-95a9-bdc2496d6722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:0d:f5:5f:22:16:57:04:08:5c:bb:86:0e:68:19:24:4b:9f: a5:c3:0d:e9:f4:8a:02:68:52:17:e4:a8:19:1e:4d:4b:6e:0b: 30:a7:4a:64:85:df:4b:6c:28:9e:b5:51:c3:49:2f:33:7e:e3: a5:02:0b:e6:a1:10:9a:00:9b:68:b4:54:de:27:df:2b:74:4a: 78:a5:5a:b5:e0:b7:d5:c0:a3:73:74:f3:d3:df:56:be:8e:f7: 35:98:df:7e:b7:d3:a4:b0:ac:26:c2:09:94:a2:ba:85:de:c9: 0a:07:95:ab:d7:68:fe:cd:c7:f2:3b:dc:6e:b1:09:43:f7:35: 62:44:9f:ea:92:c5:f3:5e:e4:e1:27:10:56:ba:15:cf:1f:78: d8:d8:39:61:32:7f:a6:98:07:4d:60:ef:e5:e2:e7:a9:48:f4: 98:8b:c4:44:6b:4f:b9:f5:33:38:86:2f:80:6e:f9:99:80:c1: f3:45:7b:f2:83:d6:b2:05:b3:2f:ed:bc:1d:54:01:36:58:42: 54:35:66:06:39:f9:6d:84:c2:f4:bc:d0:3a:d8:fa:bf:15:76: 06:bd:da:1c:72:23:25:ce:0c:6c:0b:8b:c2:cd:36:0f:fd:48: b7:31:25:d9:ca:9d:05:6f:d8:07:d3:73:11:79:15:3f:da:7c: e3:6a:4e:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZiUsRx2othRZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzI4YzhhYTAtMjUzYS00MzA3LThjZGEtYWRjYzA1YjJlYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0K4qXHVClqAzWrGWcv1X9nhP0P+f2UyhAef 31hBdb8gXEoycqvEI+sY1jWDHU3pTq9Dri0yMruuWn2Q0ZBDk3lOLtrzXLOn0pc6 Fh1pGq3VGPAbtISu2X7D3pLmTEHP9tMDl9+UzN8JNh/hvX8DsNp7q67aqkJZNZMs /+I5rwS5gxerQas2OhCZdk1ncx0nvAAU31u+2ZSJgBcyge1d0z07WI0oUsCaGUGO i2F1Qn/BEYPKMw83kkQY50oXVQrCwbAIOgD0iHIMZ5VJwrdgNLuPWz7kNXeIl+qB 0McNNILjfJJuoxOwBrSvu64f++GLytuvm3vkEGwXClm/0wvclQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgrQO6NsJ2TXirZcaWInqfBnpJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTI1ZmY2MDctOWIyMy0z OGUwLTk1YTktYmRjMjQ5NmQ2NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcN9V8iFlcECFy7hg5oGSRLn6XDDen0igJoUhfkqBkeTUtuCzCnSmSF 30tsKJ61UcNJLzN+46UCC+ahEJoAm2i0VN4n3yt0SnilWrXgt9XAo3N089PfVr6O 9zWY336306SwrCbCCZSiuoXeyQoHlavXaP7Nx/I73G6xCUP3NWJEn+qSxfNe5OEn EFa6Fc8feNjYOWEyf6aYB01g7+Xi56lI9JiLxERrT7n1MziGL4Bu+ZmAwfNFe/KD 1rIFsy/tvB1UATZYQlQ1ZgY5+W2EwvS80DrY+r8Vdga92hxyIyXODGwLi8LNNg/9 SLcxJdnKnQVv2AfTcxF5FT/afONqTk4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:24 2025 by rpki-client