$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9f874a7-e954-3947-98a2-b7b5b6cd43bb.roa File: b9f874a7-e954-3947-98a2-b7b5b6cd43bb.roa (raw, json) Hash identifier: eHe6R1cyEduyDEwPxMAENsAnlWm+ysef+0A7/YPniBQ= Subject key identifier: 7A:3B:B8:A7:26:6C:E6:2A:DE:43:58:FF:E9:8C:65:96:92:C1:B2:99 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F432858454F02BC772F143F1F2F380200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9f874a7-e954-3947-98a2-b7b5b6cd43bb.roa Signing time: Sun 24 Mar 2024 01:00:24 +0000 ROA not before: Sun 24 Mar 2024 01:00:24 +0000 ROA not after: Sat 22 Jun 2024 01:00:24 +0000 asID: 7155 IP address blocks: 70.41.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:4f:02:bc:77:2f:14:3f:1f:2f:38:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 24 01:00:24 2024 GMT Not After : Jun 22 01:00:24 2024 GMT Subject: CN=36ed6432-9df3-4157-ada9-e4f297a4213f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fa:09:f1:a0:87:0f:b8:d9:85:5b:51:65:2a: b7:cb:7a:b8:0f:e0:f8:62:98:37:bd:58:cd:13:3f: 7a:7c:65:ed:e7:5f:33:7c:62:ef:9f:21:55:0d:7e: a6:7e:9a:86:ec:2a:bc:a8:65:45:0f:e0:46:a6:35: b0:4d:90:f2:0d:92:a9:24:71:2b:7a:11:5a:30:92: a4:b4:71:96:75:ef:ef:ad:00:45:6e:d2:34:a6:47: 98:a2:98:55:dc:4e:5b:da:b5:64:e9:06:41:26:fb: 6a:34:8b:9b:93:fe:ce:a7:52:bd:3b:7d:a7:6d:a9: 57:98:e9:a3:78:47:f2:61:34:d7:d2:78:a6:65:54: be:11:48:42:0b:9f:bf:04:30:4d:64:c8:1e:f9:61: be:50:e6:3a:b9:42:d3:e5:9b:47:bc:36:e8:dc:cd: d0:2f:29:2b:39:b0:48:84:e6:fe:7c:34:d6:d1:e9: 7a:c5:7a:6d:6e:78:4e:c5:28:39:63:d1:03:24:52: 7f:b5:ed:a3:60:39:a1:fb:60:30:4c:e9:04:22:80: c0:12:f1:39:1b:25:14:e1:bb:1f:c9:18:04:ac:53: cb:a8:ae:08:14:7a:f6:92:08:78:9a:e4:c4:0f:80: 0c:af:7d:b5:2f:c0:22:02:1d:5e:27:b7:db:49:c0: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3B:B8:A7:26:6C:E6:2A:DE:43:58:FF:E9:8C:65:96:92:C1:B2:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9f874a7-e954-3947-98a2-b7b5b6cd43bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b1:ee:1d:fa:28:af:c3:c7:ea:02:51:31:e1:52:6b:78:40: cf:95:3d:59:a4:2f:0e:7a:fb:5b:6f:21:5a:89:8e:4e:fc:51: ff:cf:b0:09:f2:95:eb:b8:a3:07:bc:37:f9:3f:28:8a:4d:53: d7:63:58:9f:3d:f4:c3:75:2f:ed:e0:0a:d0:c2:a4:3b:26:da: cd:c4:66:f1:e7:76:6c:4e:ef:2d:81:b2:02:74:60:b4:f3:5b: cc:84:21:1f:5b:f2:69:29:9a:fe:fe:8a:d6:bc:7e:d7:3a:1e: 8b:20:ee:b1:67:5f:84:f1:a8:65:21:be:75:8f:db:a0:cc:64: e6:1e:7b:df:09:12:ff:d1:b2:43:b9:60:5c:48:cf:33:1f:45: e0:c6:7a:3f:ed:5c:f8:12:69:10:89:7d:62:2e:fe:7b:2a:46: 9c:07:94:11:57:c5:57:bd:2d:84:73:ab:57:16:55:c0:8c:f5: 64:9d:38:a0:20:16:a2:e5:de:ff:5a:af:6c:e0:56:cd:ab:92: 52:a4:5d:ae:91:e9:ed:23:e3:3b:bd:2c:0f:f2:82:f7:72:25: c3:20:66:2e:e0:90:c3:77:b5:c5:ae:da:6e:ab:32:33:1c:12: 92:4f:1f:84:f9:7b:a4:b0:0d:7f:fb:d6:c3:be:b7:72:e6:91: 03:ab:43:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVPArx3LxQ/Hy84AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyNDAxMDAyNFoXDTI0MDYyMjAxMDAyNFowLzEtMCsGA1UEAxMk MzZlZDY0MzItOWRmMy00MTU3LWFkYTktZTRmMjk3YTQyMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvoJ8aCHD7jZhVtRZSq3y3q4D+D4Ypg3vVjN Ez96fGXt518zfGLvnyFVDX6mfpqG7Cq8qGVFD+BGpjWwTZDyDZKpJHErehFaMJKk tHGWde/vrQBFbtI0pkeYophV3E5b2rVk6QZBJvtqNIubk/7Op1K9O32nbalXmOmj eEfyYTTX0nimZVS+EUhCC5+/BDBNZMge+WG+UOY6uULT5ZtHvDbo3M3QLykrObBI hOb+fDTW0el6xXptbnhOxSg5Y9EDJFJ/te2jYDmh+2AwTOkEIoDAEvE5GyUU4bsf yRgErFPLqK4IFHr2kgh4muTED4AMr321L8AiAh1eJ7fbScBJtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHo7uKcmbOYq3kNY/+mMZZaSwbKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjlmODc0YTctZTk1NC0z OTQ3LTk4YTItYjdiNWI2Y2Q0M2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRilsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGx7h36KK/Dx+oCUTHhUmt4QM+VPVmkLw56+1tvIVqJjk78Uf/PsAny leu4owe8N/k/KIpNU9djWJ899MN1L+3gCtDCpDsm2s3EZvHndmxO7y2BsgJ0YLTz W8yEIR9b8mkpmv7+ita8ftc6Hosg7rFnX4TxqGUhvnWP26DMZOYee98JEv/RskO5 YFxIzzMfReDGej/tXPgSaRCJfWIu/nsqRpwHlBFXxVe9LYRzq1cWVcCM9WSdOKAg FqLl3v9ar2zgVs2rklKkXa6R6e0j4zu9LA/ygvdyJcMgZi7gkMN3tcWu2m6rMjMc EpJPH4T5e6SwDX/71sO+t3LmkQOrQ1E= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:46 2024 by rpki-client on console-ams.rpki-client.org