$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afc85658-0cf7-3600-a645-0617e49b0ac0.roa File: afc85658-0cf7-3600-a645-0617e49b0ac0.roa (raw, json) Hash identifier: xY5RN9GxBDyERL/nBJH9/UHq2AEUGgPeZWAjdONKdXk= Subject key identifier: 2D:8E:EA:3E:DE:EC:8D:92:1C:DC:70:82:2F:6C:83:A2:8E:7D:95:4D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847EE8A32AFD95EA9DD2D7E1C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afc85658-0cf7-3600-a645-0617e49b0ac0.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 40306 IP address blocks: 70.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:32:af:d9:5e:a9:dd:2d:7e:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=789e57bc-61d2-4ff9-aa36-af60374aced7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:80:59:c6:95:d6:bf:d2:43:45:c0:90:30: 22:3c:ab:9e:df:ae:30:06:d5:d1:65:b3:26:58:d3: 10:7a:80:76:ac:e9:07:50:b7:99:1a:e5:ef:88:7d: d6:6c:56:38:b8:bb:b8:8f:64:1a:1d:0d:2c:89:21: 61:86:b8:b8:f6:72:d8:a8:7a:80:71:ac:75:3b:95: 40:3c:be:96:11:13:07:30:5a:c9:23:be:f6:0c:d3: 54:aa:c1:43:63:5e:3f:f5:9d:51:b0:09:eb:9f:7f: 3f:23:9b:c1:59:f4:b4:a0:de:f7:38:eb:f6:ad:fd: 42:82:db:8d:da:b9:a2:ed:21:d3:71:fa:a6:1e:d7: 00:42:18:91:d2:75:c8:fe:d6:9c:63:56:af:f2:28: 83:66:f9:bd:fa:44:c4:f6:80:9e:b6:db:53:35:19: 01:fc:78:97:62:57:63:3b:3f:16:9d:87:b3:a7:81: c3:73:7b:21:ca:77:84:70:64:e4:d6:76:47:fd:df: 71:83:6e:3d:61:c4:c6:16:59:f1:f3:de:16:44:82: ab:01:ad:ae:57:51:c6:c0:d3:f9:27:5c:78:7b:50: 2b:1b:43:ac:1c:2d:0d:5c:41:4a:95:1f:90:c3:a1: a8:b6:14:57:a7:55:08:76:ff:32:01:77:3b:8e:1a: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8E:EA:3E:DE:EC:8D:92:1C:DC:70:82:2F:6C:83:A2:8E:7D:95:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afc85658-0cf7-3600-a645-0617e49b0ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:95:1c:4e:ab:42:f4:f4:61:cf:a5:50:61:13:3b:7d:f5:0f: a4:70:d1:6d:d6:cd:04:cf:02:a9:61:de:81:6b:9c:27:f0:c1: c7:4f:82:d0:f7:e1:e5:42:95:af:fc:6a:05:bd:54:bd:dc:a5: 14:e4:59:25:19:fa:70:99:12:b2:46:83:ba:a1:68:08:6f:82: 12:07:7a:66:72:23:ff:28:09:bb:d3:ca:e3:aa:ff:64:1f:43: 63:46:41:55:16:77:1c:59:8c:14:88:91:45:7e:86:a1:3d:b5: 7a:9d:10:2e:9a:ac:58:7f:36:19:40:1f:9e:c8:23:e1:2f:d6: e2:3f:b8:28:11:fd:a9:9f:7a:bc:31:09:ae:30:35:4c:9a:b3: 94:8b:54:f2:c6:30:94:91:12:e6:d9:75:ae:93:7b:96:d9:7d: 55:e3:54:02:8a:7c:16:23:df:9a:d2:11:85:0d:c6:d9:0f:bb: 7b:3d:b3:23:21:0f:66:e5:b6:5e:55:dd:c2:00:23:e3:8c:e1: b8:b6:c8:7d:db:ac:75:45:50:4d:c7:a8:ce:7d:68:ed:48:ae: 1e:ec:b8:ab:e1:15:bd:de:c1:89:21:ca:79:87:e9:64:42:82: 07:9b:ea:4b:9c:e1:10:5e:16:22:17:fe:22:a1:0a:c4:f0:78: 4f:e9:db:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijKv2V6p3S1+HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk Nzg5ZTU3YmMtNjFkMi00ZmY5LWFhMzYtYWY2MDM3NGFjZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiSAWcaV1r/SQ0XAkDAiPKue364wBtXRZbMm WNMQeoB2rOkHULeZGuXviH3WbFY4uLu4j2QaHQ0siSFhhri49nLYqHqAcax1O5VA PL6WERMHMFrJI772DNNUqsFDY14/9Z1RsAnrn38/I5vBWfS0oN73OOv2rf1CgtuN 2rmi7SHTcfqmHtcAQhiR0nXI/tacY1av8iiDZvm9+kTE9oCetttTNRkB/HiXYldj Oz8WnYezp4HDc3shyneEcGTk1nZH/d9xg249YcTGFlnx894WRIKrAa2uV1HGwNP5 J1x4e1ArG0OsHC0NXEFKlR+Qw6GothRXp1UIdv8yAXc7jhpJkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2O6j7e7I2SHNxwgi9sg6KOfZVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWZjODU2NTgtMGNmNy0z NjAwLWE2NDUtMDYxN2U0OWIwYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARineMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmVHE6rQvT0Yc+lUGETO331D6Rw0W3WzQTPAqlh3oFrnCfwwcdPgtD3 4eVCla/8agW9VL3cpRTkWSUZ+nCZErJGg7qhaAhvghIHemZyI/8oCbvTyuOq/2Qf Q2NGQVUWdxxZjBSIkUV+hqE9tXqdEC6arFh/NhlAH57II+Ev1uI/uCgR/amferwx Ca4wNUyas5SLVPLGMJSREubZda6Te5bZfVXjVAKKfBYj35rSEYUNxtkPu3s9syMh D2bltl5V3cIAI+OM4bi2yH3brHVFUE3HqM59aO1Irh7suKvhFb3ewYkhynmH6WRC ggeb6kuc4RBeFiIX/iKhCsTweE/p23g= -----END CERTIFICATE-----Generated at Fri Nov 22 02:12:12 2024 by rpki-client on console-fra.rpki-client.org