$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1e7a521-0d6b-3764-9bc4-7ed75cfa21f8.roa File: b1e7a521-0d6b-3764-9bc4-7ed75cfa21f8.roa (raw, json) Hash identifier: 982eYP1NjBVp8jk3nLNfo2KOVj79QemSqvez+PKbKWk= Subject key identifier: 31:1C:57:56:27:F4:E2:A8:E3:59:EC:00:56:87:C1:2B:29:35:17:66 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D7F1A6CB47D4583882C40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1e7a521-0d6b-3764-9bc4-7ed75cfa21f8.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 70.41.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:7f:1a:6c:b4:7d:45:83:88:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=b4e81204-6169-47ef-b4b5-5b0757d42f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6a:1f:40:f8:51:dd:47:a6:59:b8:c9:98:86: d0:66:68:35:ba:f8:06:86:d5:ce:f5:e5:3e:86:38: 23:81:41:33:dd:11:37:26:73:d0:95:ce:52:be:14: ce:b7:e6:ec:39:a5:ef:20:23:03:97:d6:8b:99:d6: 67:3c:26:42:4a:29:a8:c3:56:d4:2c:99:ce:e6:cf: a2:50:f7:ca:c4:5f:a4:7b:e2:70:59:e0:21:d9:d7: 0a:a0:6b:56:32:1c:f1:08:db:da:58:02:e8:d0:cb: e2:ee:ef:c0:69:c5:d9:17:3e:19:51:8f:4e:ec:54: 5e:ec:a6:9b:83:b2:ec:1b:d5:2d:1c:ba:67:8c:d2: 47:e5:17:fe:f0:54:04:d7:12:45:9e:9c:3b:43:97: 19:69:be:7e:1c:aa:4e:f4:75:f8:88:32:32:17:94: 80:b3:17:10:9a:2e:77:47:d1:cc:12:2a:f9:a1:e5: 35:5d:87:2c:6e:f6:6a:b9:15:ca:b3:8c:2e:ae:bf: b2:bc:2e:db:36:cf:97:e6:a2:d6:a6:48:25:0d:fd: 7e:2d:95:4a:dd:62:73:d6:31:c1:e2:7a:2c:92:14: d7:3d:3f:01:d9:45:af:25:6f:74:be:61:19:39:9b: 64:cb:bd:10:f7:c9:cc:9a:a7:59:60:90:29:94:c2: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1C:57:56:27:F4:E2:A8:E3:59:EC:00:56:87:C1:2B:29:35:17:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b1e7a521-0d6b-3764-9bc4-7ed75cfa21f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3a:7b:56:c0:ef:f0:a2:a3:d5:12:38:7f:eb:10:80:e8:43: 11:c5:ec:f4:8e:fb:b0:df:e7:cf:b9:e1:ed:c7:07:3d:f3:88: 81:13:7c:3b:46:6b:be:c5:36:26:fe:31:cd:06:7f:8b:51:7f: 23:f0:57:b5:07:77:5e:30:fb:69:16:30:70:7d:85:8e:e7:03: d6:27:03:64:0e:69:2d:72:61:64:85:5e:14:ff:61:24:cc:42: 38:a0:ad:a6:13:54:ce:ed:0f:1b:08:e3:6f:37:5c:13:fe:da: 19:9a:56:5b:6c:2f:4b:ef:cc:ef:1a:72:b4:41:16:2a:14:4e: 39:c9:05:51:e0:50:e1:bd:18:4a:21:5a:15:88:eb:e5:be:1c: 8d:99:a3:b9:6d:d9:86:c7:e9:d0:96:db:aa:fe:66:da:69:b8: 70:8c:90:6f:78:87:90:a7:54:9c:e1:5d:88:b5:6b:a0:a2:5e: a1:af:75:5c:ca:f7:52:56:ed:df:7e:67:6b:6b:21:ba:90:4d: 3e:89:1b:a6:3b:99:63:54:46:6a:41:54:db:04:f9:31:8a:ba: ca:ab:d8:20:65:56:9f:02:20:1b:8d:1e:c3:54:70:10:f6:6c: 0a:b0:67:11:56:6c:1b:66:5d:ba:0a:24:fc:ea:0d:a7:10:f1: 78:4e:01:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPX8abLR9RYOILEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YjRlODEyMDQtNjE2OS00N2VmLWI0YjUtNWIwNzU3ZDQyZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmofQPhR3UemWbjJmIbQZmg1uvgGhtXO9eU+ hjgjgUEz3RE3JnPQlc5SvhTOt+bsOaXvICMDl9aLmdZnPCZCSimow1bULJnO5s+i UPfKxF+ke+JwWeAh2dcKoGtWMhzxCNvaWALo0Mvi7u/AacXZFz4ZUY9O7FRe7Kab g7LsG9UtHLpnjNJH5Rf+8FQE1xJFnpw7Q5cZab5+HKpO9HX4iDIyF5SAsxcQmi53 R9HMEir5oeU1XYcsbvZquRXKs4wurr+yvC7bNs+X5qLWpkglDf1+LZVK3WJz1jHB 4noskhTXPT8B2UWvJW90vmEZOZtky70Q98nMmqdZYJAplMLe4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEcV1Yn9OKo41nsAFaHwSspNRdmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjFlN2E1MjEtMGQ2Yi0z NzY0LTliYzQtN2VkNzVjZmEyMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc6e1bA7/Cio9USOH/rEIDoQxHF7PSO+7Df58+54e3HBz3ziIETfDtG a77FNib+Mc0Gf4tRfyPwV7UHd14w+2kWMHB9hY7nA9YnA2QOaS1yYWSFXhT/YSTM QjigraYTVM7tDxsI4283XBP+2hmaVltsL0vvzO8acrRBFioUTjnJBVHgUOG9GEoh WhWI6+W+HI2Zo7lt2YbH6dCW26r+ZtppuHCMkG94h5CnVJzhXYi1a6CiXqGvdVzK 91JW7d9+Z2trIbqQTT6JG6Y7mWNURmpBVNsE+TGKusqr2CBlVp8CIBuNHsNUcBD2 bAqwZxFWbBtmXboKJPzqDacQ8XhOAYA= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:37 2024 by rpki-client on console-ams.rpki-client.org