$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9727cc1-1fd3-3d3f-86ba-410b0a661f3b.roa File: a9727cc1-1fd3-3d3f-86ba-410b0a661f3b.roa (raw, json) Hash identifier: DttlSh4xQwDNPMlWDiAvBKr4jrXKnxj+BxHTnxMvw+U= Subject key identifier: 89:95:03:4E:6A:47:8B:10:6A:F7:D0:F4:B9:99:41:1C:85:FE:C4:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580FA8A943D8B8409E35AB0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9727cc1-1fd3-3d3f-86ba-410b0a661f3b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 70.41.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:fa:8a:94:3d:8b:84:09:e3:5a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=730b6ec1-cf0c-4138-9a08-87624e60528e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:2e:8d:32:f2:ec:3c:88:7f:cf:5e:e5:99: 86:9d:c3:00:bc:3b:86:26:44:25:b1:aa:b8:26:45: 57:92:2f:d8:ec:fa:5a:b4:33:06:48:46:7a:40:eb: 10:a7:37:cb:ce:a9:37:cb:07:9c:8f:35:a6:6f:97: c9:92:74:b5:8d:42:e8:22:e8:a9:0d:41:2a:e8:3e: 23:0a:dc:0a:55:c6:9f:51:55:46:6d:d8:bf:07:e1: 64:f9:18:27:d4:36:91:ce:e9:66:3e:f1:22:c2:67: 62:f1:9e:bf:a6:8b:e0:c4:19:44:3e:fa:5f:8a:17: f0:ad:7a:d6:84:5e:f9:fd:22:38:da:e9:c1:eb:8d: 92:e9:f4:c7:b4:12:ad:19:2e:8d:68:24:7a:6d:44: ab:8f:ca:06:24:e6:a9:70:91:7a:42:01:62:b8:85: 8e:5e:4f:b0:87:ef:5e:bd:e4:6b:36:ba:86:4a:97: 02:7f:85:43:5a:30:60:53:94:33:74:3d:09:f6:75: 7b:17:d4:ad:1f:60:56:4a:5f:3c:8b:b8:ff:1d:7f: 39:fd:2c:34:f3:79:39:0a:e5:87:c8:ae:6d:25:cd: 5c:43:a7:f9:6e:84:56:4c:ae:41:2c:cf:52:d6:3c: ec:97:a6:a2:5f:3d:81:cd:fd:37:4d:9a:6e:97:9e: 7c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:95:03:4E:6A:47:8B:10:6A:F7:D0:F4:B9:99:41:1C:85:FE:C4:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9727cc1-1fd3-3d3f-86ba-410b0a661f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:83:dd:37:6d:64:42:78:55:ce:b5:9d:3c:b9:65:4c:0d:da: 33:41:09:e0:bc:21:fa:af:cf:cf:89:23:55:9a:1f:a3:65:8f: b9:6c:49:72:05:67:3f:b5:cf:41:9e:ea:96:44:71:63:a0:8c: 51:51:da:cc:f3:be:b8:fa:87:c6:e0:a9:ab:43:06:ad:b1:99: e5:b0:b3:3d:98:35:df:6c:ee:6f:3c:45:f5:80:ef:f4:96:2b: 34:e4:41:7b:4b:22:66:22:86:69:30:e5:ec:5c:7b:03:a1:5a: 1d:f2:eb:d3:31:59:6c:62:bc:a4:4a:be:ca:e3:10:59:d8:ea: ec:07:d4:68:53:d7:17:d8:d7:4d:c2:c5:41:9e:04:09:f7:63: f2:01:8e:e9:81:e8:42:52:45:8b:f7:d2:29:ab:d3:4c:a2:e4: c6:47:f9:78:c8:2b:ba:48:b2:0c:1b:a7:57:3e:ff:1c:b8:81: 3e:22:73:8b:6d:57:a4:65:7c:61:7c:b3:18:20:0d:cd:33:df: 96:14:bc:cc:a6:30:2c:98:63:30:df:c6:41:52:0e:26:42:bc: ca:ba:12:40:f9:1d:e5:33:ba:45:f9:6c:b1:8d:08:3f:c9:70: d1:54:58:b4:dc:9b:c4:35:4f:08:3b:f2:2b:94:13:4b:c4:c6: 9e:f0:a8:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPqKlD2LhAnjWrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzMwYjZlYzEtY2YwYy00MTM4LTlhMDgtODc2MjRlNjA1MjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o8ujTLy7DyIf89e5ZmGncMAvDuGJkQlsaq4 JkVXki/Y7PpatDMGSEZ6QOsQpzfLzqk3ywecjzWmb5fJknS1jULoIuipDUEq6D4j CtwKVcafUVVGbdi/B+Fk+Rgn1DaRzulmPvEiwmdi8Z6/povgxBlEPvpfihfwrXrW hF75/SI42unB642S6fTHtBKtGS6NaCR6bUSrj8oGJOapcJF6QgFiuIWOXk+wh+9e veRrNrqGSpcCf4VDWjBgU5QzdD0J9nV7F9StH2BWSl88i7j/HX85/Sw083k5CuWH yK5tJc1cQ6f5boRWTK5BLM9S1jzsl6aiXz2Bzf03TZpul558mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImVA05qR4sQavfQ9LmZQRyF/sSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTk3MjdjYzEtMWZkMy0z ZDNmLTg2YmEtNDEwYjBhNjYxZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+D3TdtZEJ4Vc61nTy5ZUwN2jNBCeC8Ifqvz8+JI1WaH6Nlj7lsSXIF Zz+1z0Ge6pZEcWOgjFFR2szzvrj6h8bgqatDBq2xmeWwsz2YNd9s7m88RfWA7/SW KzTkQXtLImYihmkw5excewOhWh3y69MxWWxivKRKvsrjEFnY6uwH1GhT1xfY103C xUGeBAn3Y/IBjumB6EJSRYv30imr00yi5MZH+XjIK7pIsgwbp1c+/xy4gT4ic4tt V6RlfGF8sxggDc0z35YUvMymMCyYYzDfxkFSDiZCvMq6EkD5HeUzukX5bLGNCD/J cNFUWLTcm8Q1Twg78iuUE0vExp7wqBg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:40 2025 by rpki-client