$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25f51f5-5d4b-397c-9fbe-1825b7d48a30.roa File: c25f51f5-5d4b-397c-9fbe-1825b7d48a30.roa (raw, json) Hash identifier: Q9HMb6BBq29MaKbV3K2OXmsMNXH9HAyim1czGpZ1TY8= Subject key identifier: 0B:B3:12:3D:83:29:CB:93:7B:FE:C2:7A:0B:A6:20:F9:7F:14:5C:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58199E6FA3E0FC321B92980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25f51f5-5d4b-397c-9fbe-1825b7d48a30.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:99:e6:fa:3e:0f:c3:21:b9:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=fafb0b4a-7546-4155-ae7a-4db542d24be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:07:5f:a2:f5:5d:10:ad:22:9c:24:78:31: e9:d4:e6:ac:0f:c1:18:50:f9:5f:81:51:d7:da:30: 27:d5:38:ce:98:de:30:40:0d:a2:59:76:60:d0:64: 85:d2:2f:cd:8d:8e:a5:2d:6d:89:86:cf:af:2c:8a: 3f:86:5e:d2:37:87:9a:98:17:1b:c3:fe:c0:e8:12: cd:00:9e:20:9f:bc:4d:33:bf:ec:2e:c2:a2:ec:94: fd:7a:15:30:b3:ab:81:a4:79:e3:97:2c:f4:51:e3: ea:db:5f:14:bf:64:1b:be:f4:8b:b2:05:00:90:0d: 91:33:67:69:2e:8a:21:93:be:e8:e6:a6:c0:af:7f: fa:00:5f:78:3a:ad:7d:8d:e2:6a:43:44:0d:1e:a9: a4:f6:74:77:4d:7f:1e:2c:37:7a:23:cf:f6:9c:88: a2:01:2f:78:df:ef:00:57:be:43:18:ab:6e:fc:a8: a8:12:b3:67:89:a0:89:13:a6:0e:f5:fa:9e:6a:3e: e1:34:57:a0:7c:fd:fa:f4:a4:38:80:54:7f:2f:95: 0f:53:bb:49:f9:95:ec:42:03:68:cb:42:61:28:38: bd:51:9e:18:7f:4a:70:f5:11:c8:ed:4d:e5:3e:43: d9:9e:db:3e:6d:26:6b:5e:ce:a3:00:38:56:16:ba: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B3:12:3D:83:29:CB:93:7B:FE:C2:7A:0B:A6:20:F9:7F:14:5C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25f51f5-5d4b-397c-9fbe-1825b7d48a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a0:06:d3:8b:38:83:9c:6c:24:8d:b0:d2:07:43:af:49:13: 45:06:e3:d3:a0:0d:59:76:3c:57:a4:8a:75:11:b7:68:d3:e5: 2b:cc:e3:5d:b5:8c:c8:21:c4:68:ad:ae:07:3d:54:1c:96:46: 7a:9f:8e:ce:b6:c4:0a:4d:54:b8:59:42:53:35:c1:75:5e:7e: cd:26:d6:a8:d3:89:02:68:de:ee:18:bf:d1:80:8c:95:27:d0: 76:c1:97:f4:b8:38:32:17:56:81:bb:ed:8d:20:90:f9:86:1c: d8:2c:71:e2:16:9b:9d:49:17:67:b8:04:cc:72:a5:44:ba:1c: 18:69:68:1c:97:82:84:70:a4:9d:20:a1:8f:38:f7:01:c8:3a: ac:e4:53:34:62:1a:2f:65:31:07:90:ec:b0:97:09:a2:a8:cf: fe:d5:91:b6:10:7c:b3:0a:4b:c5:b7:cd:32:0f:ab:da:cc:76: 44:c8:1b:e5:eb:21:a0:8e:a6:37:48:c8:0f:8f:80:1c:87:84: 71:7f:70:f6:cb:b7:a0:5e:45:14:b7:ab:ed:2c:04:1c:98:ad: c9:2b:c6:e5:3b:d6:80:af:d6:45:df:72:d4:3f:69:a9:4f:d3: bb:e9:a5:a1:10:b2:40:d0:dc:8b:51:b2:2f:4b:fb:0a:3c:84: 16:ff:bc:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZnm+j4PwyG5KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmFmYjBiNGEtNzU0Ni00MTU1LWFlN2EtNGRiNTQyZDI0YmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf4HX6L1XRCtIpwkeDHp1OasD8EYUPlfgVHX 2jAn1TjOmN4wQA2iWXZg0GSF0i/NjY6lLW2Jhs+vLIo/hl7SN4eamBcbw/7A6BLN AJ4gn7xNM7/sLsKi7JT9ehUws6uBpHnjlyz0UePq218Uv2QbvvSLsgUAkA2RM2dp Loohk77o5qbAr3/6AF94Oq19jeJqQ0QNHqmk9nR3TX8eLDd6I8/2nIiiAS943+8A V75DGKtu/KioErNniaCJE6YO9fqeaj7hNFegfP369KQ4gFR/L5UPU7tJ+ZXsQgNo y0JhKDi9UZ4Yf0pw9RHI7U3lPkPZnts+bSZrXs6jADhWFrobZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuzEj2DKcuTe/7CegumIPl/FFyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzI1ZjUxZjUtNWQ0Yi0z OTdjLTlmYmUtMTgyNWI3ZDQ4YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGgBtOLOIOcbCSNsNIHQ69JE0UG49OgDVl2PFekinURt2jT5SvM4121 jMghxGitrgc9VByWRnqfjs62xApNVLhZQlM1wXVefs0m1qjTiQJo3u4Yv9GAjJUn 0HbBl/S4ODIXVoG77Y0gkPmGHNgsceIWm51JF2e4BMxypUS6HBhpaByXgoRwpJ0g oY849wHIOqzkUzRiGi9lMQeQ7LCXCaKoz/7VkbYQfLMKS8W3zTIPq9rMdkTIG+Xr IaCOpjdIyA+PgByHhHF/cPbLt6BeRRS3q+0sBByYrckrxuU71oCv1kXfctQ/aalP 07vppaEQskDQ3ItRsi9L+wo8hBb/vEY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:52 2025 by rpki-client