$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a83da1ac-6483-375a-98c7-23090f4bc364.roa File: a83da1ac-6483-375a-98c7-23090f4bc364.roa (raw, json) Hash identifier: rWrS+/A+8qIi0mkp1DgFCmZQGp3T5BA7W+8RUeQw+Fw= Subject key identifier: 24:F2:C5:FA:C2:24:27:E4:1A:3D:38:35:D4:98:7A:FB:E7:5B:0F:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580F99B02C52A294CB49F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a83da1ac-6483-375a-98c7-23090f4bc364.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 70.41.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:f9:9b:02:c5:2a:29:4c:b4:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2879f58e-f6c4-471c-ad46-caa24a06c25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:fd:c9:58:04:05:ac:48:26:a2:81:47:a0: 29:d2:7c:1c:bf:62:c6:8a:34:64:f5:6a:ca:56:d0: 39:25:fc:73:24:d3:4b:16:32:b6:8c:75:8e:4b:04: 37:03:05:f6:ff:57:4d:4a:5f:5f:ee:e0:7b:7f:f5: 14:0e:ed:f5:db:39:ca:1d:2a:01:8b:68:3b:d7:74: 4f:9f:81:1c:51:aa:5b:0a:ff:c0:3c:09:d6:0e:bb: 9d:bb:21:93:e3:2f:bc:67:28:4e:83:34:67:5b:24: 0f:f5:6f:4a:b3:18:28:59:7b:5e:58:aa:c4:c4:ba: 13:69:d7:83:ba:78:2d:f7:d2:49:d7:5e:21:3b:e2: 7e:27:e3:6f:e1:14:07:c9:ad:d2:c7:95:1d:ab:ab: 92:bb:ba:66:06:1b:e4:53:1b:2c:c5:06:36:8f:28: 81:fb:23:e0:63:8c:fc:db:16:c3:a3:dd:8c:40:f2: 2e:e2:18:13:4c:97:04:fa:5a:bd:2a:eb:d2:dc:f6: 8e:47:77:ee:5b:c3:37:8a:1f:ed:46:37:ee:4e:23: cf:f0:d8:af:2b:9f:14:41:ff:19:5c:58:51:be:8f: 50:c3:a7:35:1f:48:61:77:f3:c0:5f:ec:8f:23:f7: 65:06:d8:8f:23:36:87:a5:fe:26:00:07:68:ad:e0: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F2:C5:FA:C2:24:27:E4:1A:3D:38:35:D4:98:7A:FB:E7:5B:0F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a83da1ac-6483-375a-98c7-23090f4bc364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:f3:57:67:ec:8c:eb:35:e1:9c:5c:ab:0d:1f:f1:eb:9f:b3: 44:3f:85:5e:c7:1d:3f:78:4d:10:4b:9e:d9:6e:29:26:87:f3: 34:0d:3f:94:17:db:4e:af:93:8c:ab:85:45:59:e1:7e:e0:29: d4:1e:84:20:05:a8:6c:24:01:96:d3:fc:8d:52:53:12:81:63: 9d:08:9e:eb:0c:7c:cf:8e:49:18:b4:9b:60:82:05:eb:e4:5c: 7b:86:b8:5e:78:8a:a3:3b:21:d0:b2:67:b3:9e:b5:e9:ec:7e: 86:17:15:a1:a1:0a:d5:49:08:36:b6:1f:0e:9d:95:7f:f5:63: 8a:d6:76:69:18:3f:25:b0:e8:4b:c7:f1:cc:a0:a2:6b:92:99: 42:a8:40:5c:73:72:26:f0:21:c7:7a:10:55:75:a7:42:78:16: 3e:d3:b3:91:7a:42:67:5b:92:4a:44:2d:13:68:c5:d7:a5:f9: ce:63:9e:b0:9f:4d:6e:08:f6:53:1d:cc:e4:4d:9d:d7:5a:30: b5:1f:44:47:da:ea:e3:55:f7:35:2c:78:cc:91:86:8e:1f:48: 1e:2a:10:7a:a1:76:04:12:ff:cc:2f:05:2a:7b:32:b2:33:99: d6:7f:b7:4c:91:26:a5:0b:bb:75:7b:35:5f:52:27:21:41:10: 64:a3:86:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPmbAsUqKUy0n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Mjg3OWY1OGUtZjZjNC00NzFjLWFkNDYtY2FhMjRhMDZjMjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7L9yVgEBaxIJqKBR6Ap0nwcv2LGijRk9WrK VtA5JfxzJNNLFjK2jHWOSwQ3AwX2/1dNSl9f7uB7f/UUDu312znKHSoBi2g713RP n4EcUapbCv/APAnWDruduyGT4y+8ZyhOgzRnWyQP9W9KsxgoWXteWKrExLoTadeD ungt99JJ114hO+J+J+Nv4RQHya3Sx5Udq6uSu7pmBhvkUxssxQY2jyiB+yPgY4z8 2xbDo92MQPIu4hgTTJcE+lq9KuvS3PaOR3fuW8M3ih/tRjfuTiPP8NivK58UQf8Z XFhRvo9Qw6c1H0hhd/PAX+yPI/dlBtiPIzaHpf4mAAdoreBUQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTyxfrCJCfkGj04NdSYevvnWw9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTgzZGExYWMtNjQ4My0z NzVhLTk4YzctMjMwOTBmNGJjMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRikcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXzV2fsjOs14Zxcqw0f8eufs0Q/hV7HHT94TRBLntluKSaH8zQNP5QX 206vk4yrhUVZ4X7gKdQehCAFqGwkAZbT/I1SUxKBY50InusMfM+OSRi0m2CCBevk XHuGuF54iqM7IdCyZ7OetensfoYXFaGhCtVJCDa2Hw6dlX/1Y4rWdmkYPyWw6EvH 8cygomuSmUKoQFxzcibwIcd6EFV1p0J4Fj7Ts5F6QmdbkkpELRNoxdel+c5jnrCf TW4I9lMdzORNnddaMLUfREfa6uNV9zUseMyRho4fSB4qEHqhdgQS/8wvBSp7MrIz mdZ/t0yRJqULu3V7NV9SJyFBEGSjhtE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:27:42 2025 by rpki-client