$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3e0007e-06c9-33c2-87e1-c5756d0e2009.roa File: c3e0007e-06c9-33c2-87e1-c5756d0e2009.roa (raw, json) Hash identifier: nfgyI3+lg+56MOVGu4G8LxEh7hLewYMulILnrC29ug4= Subject key identifier: C4:A3:8C:24:7D:A3:42:44:85:99:0A:21:07:AD:B8:E4:E3:09:F6:8C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819AE1EFA82218C5F464A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3e0007e-06c9-33c2-87e1-c5756d0e2009.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9a:e1:ef:a8:22:18:c5:f4:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f0b8ea4b-0d8d-45bd-b1b6-a7f088b16479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c9:87:81:47:ab:a6:05:52:cc:ec:af:6e:b7: 89:f4:bb:81:fd:1c:ea:74:14:6c:72:38:37:be:cb: 15:0e:35:1f:58:10:58:20:f7:11:f2:78:f6:fe:65: 56:3c:18:b1:da:69:9e:24:fe:94:1a:03:71:72:30: 94:b6:de:47:c1:35:26:df:be:0e:ab:fd:ec:c6:e0: 66:90:c8:bd:4d:56:0a:99:d2:bf:23:19:4f:52:3d: a9:58:bf:fe:9b:d6:4b:9d:51:00:b0:54:4c:80:76: b2:25:72:ad:39:19:94:66:d3:17:f7:78:41:16:e3: fd:04:e4:1e:49:18:c5:d8:ac:fc:00:e2:a3:03:dd: 5f:0a:11:e8:ec:ee:86:1f:eb:62:68:45:43:33:35: ee:77:fa:5d:1f:dc:ed:db:a3:78:46:59:92:d7:33: 94:89:26:5f:f8:75:d2:ab:cd:88:ea:78:1e:a9:c0: c0:bf:6c:8a:9a:c4:20:1b:05:3a:1f:88:61:7a:b8: 75:61:7a:ce:c1:7e:06:bc:a8:ae:df:ad:9b:e0:1e: 27:d5:a4:45:77:22:29:87:01:dd:09:ff:b6:a8:33: db:3a:cf:79:29:bd:5a:56:ff:cc:0c:53:ba:af:97: ec:a0:dc:a7:7d:9a:8a:eb:28:50:9b:c6:0c:00:15: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A3:8C:24:7D:A3:42:44:85:99:0A:21:07:AD:B8:E4:E3:09:F6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3e0007e-06c9-33c2-87e1-c5756d0e2009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:78:0b:87:97:98:cb:ab:e5:4e:60:35:f5:45:a1:0f:fc:d2: 76:9e:fa:bf:a6:3f:80:b8:54:cc:55:e6:7b:cf:06:80:e0:7c: 73:81:95:d2:9c:f0:59:28:2f:54:ab:72:e5:eb:90:ee:df:4e: 9f:ef:fd:f6:e7:ab:10:fb:b8:2b:f9:8b:7f:26:49:33:c2:fa: 8c:2e:3f:ec:4b:8d:5b:5c:6c:da:0d:72:53:92:71:93:db:be: bc:d3:ab:c3:a6:c6:55:df:76:53:df:15:f3:f1:41:3e:3a:0d: 3f:c2:bc:52:2a:0d:66:59:aa:0c:41:bf:02:ae:9f:3e:5f:e5: b3:0e:f9:82:a0:1b:e7:0d:bb:be:0b:a2:db:8c:fa:c5:b5:0d: 57:3e:d9:c8:d3:97:ba:4d:c4:6e:dc:26:9e:c6:95:c1:d3:41: 8c:f9:d4:64:33:a6:55:67:e0:dd:2a:d4:b5:aa:53:11:cc:25: 47:6b:75:eb:e3:69:6c:ca:83:79:b7:a8:91:c5:ae:b6:fd:91: e9:6b:f4:4a:50:45:9b:92:05:65:16:71:6d:21:6d:00:9a:c1: 9f:30:6f:d6:19:ab:34:e3:9b:c4:6a:07:b4:e7:d8:5a:95:c6: 52:49:54:8c:8e:69:f0:79:58:dd:bf:bd:e7:84:fc:76:c6:06: b9:02:70:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZrh76giGMX0ZKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjBiOGVhNGItMGQ4ZC00NWJkLWIxYjYtYTdmMDg4YjE2NDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8mHgUerpgVSzOyvbreJ9LuB/RzqdBRscjg3 vssVDjUfWBBYIPcR8nj2/mVWPBix2mmeJP6UGgNxcjCUtt5HwTUm374Oq/3sxuBm kMi9TVYKmdK/IxlPUj2pWL/+m9ZLnVEAsFRMgHayJXKtORmUZtMX93hBFuP9BOQe SRjF2Kz8AOKjA91fChHo7O6GH+tiaEVDMzXud/pdH9zt26N4RlmS1zOUiSZf+HXS q82I6ngeqcDAv2yKmsQgGwU6H4hherh1YXrOwX4GvKiu362b4B4n1aRFdyIphwHd Cf+2qDPbOs95Kb1aVv/MDFO6r5fsoNynfZqK6yhQm8YMABXPbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSjjCR9o0JEhZkKIQetuOTjCfaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzNlMDAwN2UtMDZjOS0z M2MyLTg3ZTEtYzU3NTZkMGUyMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKl4C4eXmMur5U5gNfVFoQ/80nae+r+mP4C4VMxV5nvPBoDgfHOBldKc 8FkoL1SrcuXrkO7fTp/v/fbnqxD7uCv5i38mSTPC+owuP+xLjVtcbNoNclOScZPb vrzTq8OmxlXfdlPfFfPxQT46DT/CvFIqDWZZqgxBvwKunz5f5bMO+YKgG+cNu74L otuM+sW1DVc+2cjTl7pNxG7cJp7GlcHTQYz51GQzplVn4N0q1LWqUxHMJUdrdevj aWzKg3m3qJHFrrb9kelr9EpQRZuSBWUWcW0hbQCawZ8wb9YZqzTjm8RqB7Tn2FqV xlJJVIyOafB5WN2/veeE/HbGBrkCcAM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:58 2025 by rpki-client