$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b139f623-0d4a-3094-9459-6e9aecf27d12.roa File: b139f623-0d4a-3094-9459-6e9aecf27d12.roa (raw, json) Hash identifier: WNAlfivd72W6RuQUzBMskS4eXzQJ5JWgLF9HF28yHQU= Subject key identifier: 73:BC:3F:FA:C2:00:5A:31:E8:15:C2:91:3C:80:13:14:00:F6:5F:F7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58198658D65C2DE171E0580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b139f623-0d4a-3094-9459-6e9aecf27d12.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:98:65:8d:65:c2:de:17:1e:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2de2e8ff-3a39-4747-9a8e-6654499c9bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a7:cd:e9:10:c0:6a:51:63:9f:28:f3:30:93: 4f:64:71:cf:82:37:5b:3a:bd:27:96:b6:ca:ce:9c: f9:a8:a9:ba:be:4d:53:5a:e4:80:db:4c:76:d2:76: 99:0a:1e:84:ed:cf:fe:94:f0:20:a6:9f:ed:5f:34: 88:bb:74:da:c4:8e:ec:22:67:c0:de:ea:24:36:7b: 78:2c:29:19:25:9c:07:c4:d7:d4:ac:c9:aa:5f:c1: 97:90:0f:f9:ae:0b:a6:5d:99:ae:b6:8f:a9:cb:76: 2c:76:96:60:95:91:bd:51:a9:19:6e:0a:bf:02:13: ff:fe:0f:d4:56:4e:86:f4:50:d0:74:a2:0e:a3:eb: 90:f3:e0:ce:ac:c0:33:06:07:f4:8c:73:08:db:e2: 9f:4a:00:be:a5:b8:69:06:c7:4c:c5:62:70:e8:7f: 05:05:68:ba:5e:c9:e0:ef:77:86:1b:4b:37:70:cb: ac:45:5a:47:63:01:13:23:6e:92:27:c1:98:c4:f5: 5c:42:4c:ac:1e:06:fa:f5:dc:a3:6b:88:22:5b:5e: 5d:94:7d:71:9f:83:06:1e:90:e5:7e:27:15:78:5f: ad:9f:ca:81:bd:4b:56:3a:32:90:43:3b:cb:77:03: 8a:23:be:fe:95:34:17:99:5a:9d:e0:70:e4:7c:87: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BC:3F:FA:C2:00:5A:31:E8:15:C2:91:3C:80:13:14:00:F6:5F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b139f623-0d4a-3094-9459-6e9aecf27d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f9:e6:dd:c3:65:3f:dd:bc:77:04:56:f4:8e:d1:7b:db:40: 0a:12:5b:fe:5d:40:ed:c9:ba:a5:d2:74:a5:d9:94:3c:b9:ea: 43:91:d3:55:a2:ed:64:d3:6d:6f:81:3e:d7:bd:b4:93:4b:03: 3d:3c:78:66:97:b5:40:1c:11:a2:11:5c:1a:68:88:55:42:c9: 51:ca:48:5d:9b:59:24:93:40:f0:7f:86:73:48:2f:0c:f0:37: 55:84:9c:4b:41:48:01:ea:36:9e:11:36:d1:43:ad:42:a9:6b: 52:55:00:09:79:29:7a:17:65:c0:4b:92:e9:c8:db:ff:37:b1: 5e:73:b8:34:68:3b:19:b6:e1:d0:f0:67:ea:d9:d0:89:a2:21: 6e:69:e2:2f:a8:50:d7:bd:49:6c:11:aa:b7:5a:20:c4:98:e4: 4e:d8:09:2c:ba:8c:2e:3f:40:22:a0:9c:c1:ec:85:df:98:b7: 28:86:1c:59:00:7f:b2:6f:ee:7d:e5:c2:28:fe:1e:21:76:23: 6f:d4:6e:3e:44:ed:36:ff:81:db:4a:d0:a6:61:34:ec:53:df: 9d:d5:49:9a:05:91:9d:67:b8:df:56:0b:7c:6c:32:06:95:d5: e1:30:32:d4:ac:e1:3d:a1:a8:b5:f8:ce:43:db:75:d0:35:32: 93:43:33:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZhljWXC3hceBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmRlMmU4ZmYtM2EzOS00NzQ3LTlhOGUtNjY1NDQ5OWM5YmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qfN6RDAalFjnyjzMJNPZHHPgjdbOr0nlrbK zpz5qKm6vk1TWuSA20x20naZCh6E7c/+lPAgpp/tXzSIu3TaxI7sImfA3uokNnt4 LCkZJZwHxNfUrMmqX8GXkA/5rgumXZmuto+py3YsdpZglZG9UakZbgq/AhP//g/U Vk6G9FDQdKIOo+uQ8+DOrMAzBgf0jHMI2+KfSgC+pbhpBsdMxWJw6H8FBWi6Xsng 73eGG0s3cMusRVpHYwETI26SJ8GYxPVcQkysHgb69dyja4giW15dlH1xn4MGHpDl ficVeF+tn8qBvUtWOjKQQzvLdwOKI77+lTQXmVqd4HDkfIfF9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO8P/rCAFox6BXCkTyAExQA9l/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjEzOWY2MjMtMGQ0YS0z MDk0LTk0NTktNmU5YWVjZjI3ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/55t3DZT/dvHcEVvSO0XvbQAoSW/5dQO3JuqXSdKXZlDy56kOR01Wi 7WTTbW+BPte9tJNLAz08eGaXtUAcEaIRXBpoiFVCyVHKSF2bWSSTQPB/hnNILwzw N1WEnEtBSAHqNp4RNtFDrUKpa1JVAAl5KXoXZcBLkunI2/83sV5zuDRoOxm24dDw Z+rZ0ImiIW5p4i+oUNe9SWwRqrdaIMSY5E7YCSy6jC4/QCKgnMHshd+YtyiGHFkA f7Jv7n3lwij+HiF2I2/Ubj5E7Tb/gdtK0KZhNOxT353VSZoFkZ1nuN9WC3xsMgaV 1eEwMtSs4T2hqLX4zkPbddA1MpNDMyQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:04 2025 by rpki-client