$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf45e9e-dc18-3d25-b5d1-bae729308233.roa File: bcf45e9e-dc18-3d25-b5d1-bae729308233.roa (raw, json) Hash identifier: WYNDOn/loNni8conQZ6DORtgmTxkUqcH62All5R0YE0= Subject key identifier: 90:8D:21:3D:B5:69:DF:1B:78:47:43:66:F1:99:0C:99:D4:3E:68:DC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D716226F7F51E6F87AE80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf45e9e-dc18-3d25-b5d1-bae729308233.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 40306 IP address blocks: 70.41.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:71:62:26:f7:f5:1e:6f:87:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=a33f4bfe-fa73-4c44-93d7-754097c21355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:4e:08:a6:fd:a4:05:ee:c6:98:0c:c2:0b: b4:84:37:32:8d:b1:c5:1c:df:76:49:87:92:10:7d: 7a:eb:cc:bf:de:f9:cc:3b:95:d6:7b:b4:2f:a8:75: fd:65:56:b9:6d:4d:2b:08:bf:f0:da:62:cc:f9:d0: 60:1f:0c:5c:a6:d7:10:05:ee:e7:55:f6:45:9f:e4: d3:33:52:f7:ef:d8:4d:40:bf:72:97:b6:7c:f3:da: ae:5c:20:44:33:9e:ab:e0:f1:fa:96:2d:60:c0:a2: d2:5e:92:32:2b:6c:61:60:73:cf:03:80:78:1d:5e: d9:00:eb:80:b0:0b:69:c9:55:b3:40:0c:49:d3:0b: 93:7e:61:1e:4d:eb:31:e3:24:3e:84:a6:59:52:41: 9f:83:cd:f8:58:77:d7:a8:05:09:49:18:7f:ab:34: dc:f0:b0:9a:0d:b8:45:82:38:9d:c6:63:12:f5:45: a4:03:4c:f6:ff:d2:85:6e:14:e7:9d:c5:4a:c5:29: 81:84:37:fc:e3:5d:8d:af:b5:9b:69:c8:4e:6c:50: b8:bf:d9:0c:37:00:19:93:c8:67:4e:d7:95:33:21: 93:f0:23:d1:e4:42:cf:68:5d:14:ed:3b:c5:71:ce: 81:89:15:9c:6d:ff:f3:7e:a4:11:c0:a3:d8:a4:20: cf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:21:3D:B5:69:DF:1B:78:47:43:66:F1:99:0C:99:D4:3E:68:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf45e9e-dc18-3d25-b5d1-bae729308233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:e1:26:e0:b5:4e:8e:3d:3d:e4:e4:b1:ef:c6:93:0e:83:a2: 1e:34:ac:38:ac:4a:15:39:d2:3b:62:56:1c:32:29:d4:bb:c9: a1:8a:1f:97:25:43:35:76:02:20:58:3c:bf:46:0f:3f:8e:6a: 99:61:b3:6e:e2:33:70:80:ca:42:4d:27:8f:b0:e3:f7:66:be: b3:40:05:cf:bf:37:cc:5a:3d:46:dd:86:02:d2:2d:bc:91:e2: fc:d9:13:e0:b6:a8:28:85:f7:c4:be:55:c5:5e:c5:bb:47:82: 52:bb:4a:21:58:bc:a0:a9:c9:e3:92:1e:af:32:66:d5:c0:53: a0:37:08:6f:d2:d4:0d:61:e2:28:ee:d7:d7:2a:db:4c:9c:8a: c1:24:d2:f0:27:fa:14:c8:b6:57:ff:5b:aa:ea:71:5a:8b:f0: 1c:91:db:5d:9a:50:6a:d4:6a:f7:74:67:08:82:2a:23:9d:55: 8f:03:29:14:34:aa:0e:e0:77:99:69:b3:19:06:02:48:f1:b4: fe:1e:72:a5:50:0a:68:c6:d2:22:b4:d6:a2:3e:93:f4:cc:9a: 51:60:af:bc:6e:ad:7e:45:3e:25:a0:25:d0:1d:2b:4d:cb:07: 85:e5:2e:d2:c2:27:7d:df:5a:92:1f:f2:82:7e:e4:44:0f:58: e1:78:70:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPXFiJvf1Hm+HroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk YTMzZjRiZmUtZmE3My00YzQ0LTkzZDctNzU0MDk3YzIxMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM5OCKb9pAXuxpgMwgu0hDcyjbHFHN92SYeS EH1668y/3vnMO5XWe7QvqHX9ZVa5bU0rCL/w2mLM+dBgHwxcptcQBe7nVfZFn+TT M1L379hNQL9yl7Z889quXCBEM56r4PH6li1gwKLSXpIyK2xhYHPPA4B4HV7ZAOuA sAtpyVWzQAxJ0wuTfmEeTesx4yQ+hKZZUkGfg834WHfXqAUJSRh/qzTc8LCaDbhF gjidxmMS9UWkA0z2/9KFbhTnncVKxSmBhDf8412Nr7WbachObFC4v9kMNwAZk8hn TteVMyGT8CPR5ELPaF0U7TvFcc6BiRWcbf/zfqQRwKPYpCDPSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCNIT21ad8beEdDZvGZDJnUPmjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNmNDVlOWUtZGMxOC0z ZDI1LWI1ZDEtYmFlNzI5MzA4MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHhJuC1To49PeTkse/Gkw6Doh40rDisShU50jtiVhwyKdS7yaGKH5cl QzV2AiBYPL9GDz+Oaplhs27iM3CAykJNJ4+w4/dmvrNABc+/N8xaPUbdhgLSLbyR 4vzZE+C2qCiF98S+VcVexbtHglK7SiFYvKCpyeOSHq8yZtXAU6A3CG/S1A1h4iju 19cq20ycisEk0vAn+hTItlf/W6rqcVqL8ByR212aUGrUavd0ZwiCKiOdVY8DKRQ0 qg7gd5lpsxkGAkjxtP4ecqVQCmjG0iK01qI+k/TMmlFgr7xurX5FPiWgJdAdK03L B4XlLtLCJ33fWpIf8oJ+5EQPWOF4cO4= -----END CERTIFICATE-----Generated at Sat Apr 27 15:14:10 2024 by rpki-client on console-ams.rpki-client.org