$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa File: a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa (raw, json) Hash identifier: yM4NZ6pgSnD6LSDRCEGiLW4FPzUzEdxCSAuzvDuPGzs= Subject key identifier: 6F:17:12:CA:87:FE:A9:2C:14:73:73:15:7C:66:33:D6:57:D3:99:A9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62ABFBD0BC4F18496E8D380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 40306 IP address blocks: 70.41.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:bf:bd:0b:c4:f1:84:96:e8:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=6ef98b6e-f0ae-49b9-9e65-c7f6a04f93da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:93:c3:ed:e9:7f:d0:b5:1f:2c:19:02:de: e3:9e:dd:87:e3:83:19:66:bd:82:f4:5e:a6:8b:6f: 08:0c:c6:45:b0:58:be:f3:84:4c:01:be:86:fd:9a: f8:72:65:13:74:b5:a1:b3:3e:d2:7d:a6:e7:76:6f: 9e:90:e6:1d:a9:89:49:a5:f4:e4:4d:ec:3f:95:a8: 1d:6c:ca:62:ec:14:63:4e:4e:4e:2e:60:e9:77:7f: d2:16:ab:56:d3:4e:4c:fc:57:6a:3b:19:32:9a:20: 0a:60:a8:a0:9e:8a:70:ab:96:3c:53:cd:81:98:d8: 7a:55:b1:fe:06:97:f5:19:b8:94:99:4f:34:8c:ab: ca:a3:b2:ec:80:c0:f3:e0:b0:63:60:00:85:c7:3b: 9d:a8:87:7a:ae:12:2b:af:7b:04:c9:ba:00:97:24: dd:de:fb:42:97:4c:bf:0f:0a:b2:b7:9a:4c:83:d0: f2:0c:fa:98:e4:c4:bb:19:ca:b4:70:ea:42:e2:34: ae:07:2e:cb:05:fc:db:0f:f0:8f:ce:fc:e8:54:13: a0:1e:00:98:fc:e0:5f:ec:ab:a2:0e:27:5d:23:b8: 8a:2c:79:a5:11:6e:52:aa:45:d0:88:a6:95:99:49: 18:71:fd:f9:04:7c:fd:73:49:ac:18:a4:0c:bc:0e: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:17:12:CA:87:FE:A9:2C:14:73:73:15:7C:66:33:D6:57:D3:99:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4d:4e:a2:6c:8e:1e:58:14:73:2d:03:20:9b:b3:c5:6e:61: 0d:6c:05:ee:5b:f1:b0:ab:4e:48:8a:a0:ee:1a:d8:36:b2:36: 4b:73:5d:11:b9:1f:4e:06:b8:87:4a:d6:cd:60:73:a6:20:1c: 8e:12:cc:58:50:b1:13:e4:f1:4d:3c:05:4a:91:2f:fa:8b:75: 24:22:2c:1a:13:33:6b:49:a3:b2:5c:3d:d3:9c:9c:9a:4a:f4: ea:30:a2:e5:45:fc:73:99:fa:9f:44:7e:b8:5b:b2:24:35:c4: 34:9e:18:4a:b1:de:0a:15:92:a7:e3:73:58:32:59:f9:f2:25: 89:b8:31:eb:40:04:25:2c:5d:e7:84:14:72:12:ce:02:3a:f8: 3c:bc:d2:26:a9:ba:31:32:aa:e6:b6:fc:c2:9d:20:c4:0c:49: 57:ca:8a:a4:6f:67:88:6f:3e:92:bf:db:75:88:26:23:ee:73: 7c:2e:8d:08:c8:92:91:f8:ef:59:56:df:47:f4:79:68:a5:38: df:34:fb:3a:f0:d1:7d:3f:11:6c:58:12:75:c5:cb:54:cb:5d: 2d:e3:6c:db:b4:4c:1e:75:b2:dc:02:3b:dd:87:ee:ad:d0:0a: 64:f6:ec:51:21:ac:5d:f2:df:10:f6:da:a4:05:b3:64:32:db: bd:6b:5c:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKr+9C8TxhJbo04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk NmVmOThiNmUtZjBhZS00OWI5LTllNjUtYzdmNmEwNGY5M2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiaTw+3pf9C1HywZAt7jnt2H44MZZr2C9F6m i28IDMZFsFi+84RMAb6G/Zr4cmUTdLWhsz7Sfabndm+ekOYdqYlJpfTkTew/lagd bMpi7BRjTk5OLmDpd3/SFqtW005M/FdqOxkymiAKYKignopwq5Y8U82BmNh6VbH+ Bpf1GbiUmU80jKvKo7LsgMDz4LBjYACFxzudqId6rhIrr3sEyboAlyTd3vtCl0y/ Dwqyt5pMg9DyDPqY5MS7Gcq0cOpC4jSuBy7LBfzbD/CPzvzoVBOgHgCY/OBf7Kui DiddI7iKLHmlEW5SqkXQiKaVmUkYcf35BHz9c0msGKQMvA7ZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8XEsqH/qksFHNzFXxmM9ZX05mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZmMmM4YTgtZTBlZS0z MzM5LTgzOWUtNGM1MWQ4Yzg5MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpNTqJsjh5YFHMtAyCbs8VuYQ1sBe5b8bCrTkiKoO4a2DayNktzXRG5 H04GuIdK1s1gc6YgHI4SzFhQsRPk8U08BUqRL/qLdSQiLBoTM2tJo7JcPdOcnJpK 9OowouVF/HOZ+p9EfrhbsiQ1xDSeGEqx3goVkqfjc1gyWfnyJYm4MetABCUsXeeE FHISzgI6+Dy80iapujEyqua2/MKdIMQMSVfKiqRvZ4hvPpK/23WIJiPuc3wujQjI kpH471lW30f0eWilON80+zrw0X0/EWxYEnXFy1TLXS3jbNu0TB51stwCO92H7q3Q CmT27FEhrF3y3xD22qQFs2Qy271rXCE= -----END CERTIFICATE-----Generated at Fri Nov 22 01:36:22 2024 by rpki-client on console-ams.rpki-client.org