$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa File: af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa (raw, json) Hash identifier: p/iQRaN/hYiVdIyVr0KM5Jk3UltIOfnhlk0IdvKDh8Y= Subject key identifier: EB:9A:28:D5:0D:96:D0:E9:44:5A:EC:02:45:A5:30:58:31:C2:64:9D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581976BA3B4D269E2DC6980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:97:6b:a3:b4:d2:69:e2:dc:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=06d5ee80-3c1c-454d-bdf2-e29d9ad57f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:e3:b4:71:42:c7:5c:1f:d0:55:3c:cf:cc: 57:ff:06:c7:f8:3e:c7:be:8d:be:9a:87:c0:7b:79: 10:8e:d4:96:8e:61:80:27:d0:22:51:e1:ec:d1:5c: a2:38:29:37:89:c4:d3:53:22:ef:ba:ae:ab:0f:04: a1:ab:96:99:5b:84:98:18:bf:31:af:21:66:6a:3b: 07:83:77:b0:b4:28:d6:23:73:e5:cd:cd:a6:02:05: 1f:6b:f3:11:be:81:c4:b5:04:cc:d3:32:77:2c:f5: b2:a0:b3:96:76:8d:ea:4f:6a:8c:cc:23:c9:9a:d5: aa:9c:b5:45:7a:23:e0:0c:34:95:9b:11:b2:8a:b6: 4f:54:b1:ea:e7:e6:ea:a9:2a:29:6c:36:ad:12:31: 7f:53:94:bf:52:4d:04:84:ac:03:ef:81:08:b1:46: f6:51:66:42:7b:34:c3:cc:da:4e:14:2e:16:a5:1c: 47:f4:6a:82:59:36:b8:28:90:a7:12:8b:ad:da:31: 5e:b1:d8:10:29:94:a9:11:f9:ff:a3:48:81:c3:06: d9:c8:05:e7:37:2a:40:7e:8f:07:59:60:b8:f1:a8: 4c:74:63:31:fd:84:f8:8e:8e:e8:4d:51:31:9d:f8: ee:c5:67:3a:2c:ba:26:90:d5:14:f5:33:5a:c9:c3: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9A:28:D5:0D:96:D0:E9:44:5A:EC:02:45:A5:30:58:31:C2:64:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:f9:84:e4:d5:fe:ab:9a:bc:04:a9:4d:37:11:8b:4e:a1:ed: 8c:4d:02:b8:b8:c6:a7:53:56:90:5e:a2:d5:24:3f:3e:2f:a9: 94:ee:32:c6:4b:1f:02:38:54:a6:0f:6a:59:81:ab:c4:37:80: e2:94:6f:c2:dc:78:3c:5c:f7:89:c0:7c:30:44:3b:b2:de:2a: 6a:58:90:3d:2f:50:30:d7:dd:34:ad:7d:20:3d:9d:2b:3b:76: ce:b1:9a:1e:c2:e3:38:41:48:aa:ce:1d:a3:b5:c6:57:b0:d9: 77:f2:f7:67:85:30:e0:5d:92:6c:7f:18:bb:89:ad:c4:53:64: 59:86:24:e7:09:f9:50:2a:bb:3b:49:8a:d2:92:35:56:bb:e0: 64:3c:48:2b:f5:91:63:00:0f:0d:13:83:8b:47:ac:ab:0d:b9: a6:76:e7:24:8b:7c:a2:59:45:b5:39:8e:1d:82:bc:55:66:0b: ff:3e:b1:e3:36:a4:af:37:53:6e:86:ef:2c:e1:93:2b:9f:c7: 27:18:94:e6:3b:9f:27:f5:e7:2a:f5:46:0d:ac:e1:a7:81:6b: 1d:75:76:98:a9:4f:54:d4:a6:fd:95:e7:b3:45:18:58:0a:17: 3e:b3:e9:b6:85:38:f0:e2:01:80:1d:7e:87:5e:ee:4f:94:cb: cf:0f:23:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZdro7TSaeLcaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDZkNWVlODAtM2MxYy00NTRkLWJkZjItZTI5ZDlhZDU3ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ3jtHFCx1wf0FU8z8xX/wbH+D7Hvo2+mofA e3kQjtSWjmGAJ9AiUeHs0VyiOCk3icTTUyLvuq6rDwShq5aZW4SYGL8xryFmajsH g3ewtCjWI3Plzc2mAgUfa/MRvoHEtQTM0zJ3LPWyoLOWdo3qT2qMzCPJmtWqnLVF eiPgDDSVmxGyirZPVLHq5+bqqSopbDatEjF/U5S/Uk0EhKwD74EIsUb2UWZCezTD zNpOFC4WpRxH9GqCWTa4KJCnEout2jFesdgQKZSpEfn/o0iBwwbZyAXnNypAfo8H WWC48ahMdGMx/YT4jo7oTVExnfjuxWc6LLomkNUU9TNaycNHowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuaKNUNltDpRFrsAkWlMFgxwmSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWY4MWE4YTAtMzg3NC0z YzFkLTk0NDUtN2FjMmFlMjBjMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/5hOTV/quavASpTTcRi06h7YxNAri4xqdTVpBeotUkPz4vqZTuMsZL HwI4VKYPalmBq8Q3gOKUb8LceDxc94nAfDBEO7LeKmpYkD0vUDDX3TStfSA9nSs7 ds6xmh7C4zhBSKrOHaO1xlew2Xfy92eFMOBdkmx/GLuJrcRTZFmGJOcJ+VAquztJ itKSNVa74GQ8SCv1kWMADw0Tg4tHrKsNuaZ25ySLfKJZRbU5jh2CvFVmC/8+seM2 pK83U26G7yzhkyufxycYlOY7nyf15yr1Rg2s4aeBax11dpipT1TUpv2V57NFGFgK Fz6z6baFOPDiAYAdfode7k+Uy88PI/A= -----END CERTIFICATE-----Generated at Fri Apr 11 22:59:07 2025 by rpki-client