$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c67c5e05-0821-3e49-89d4-7a79dd570356.roa File: c67c5e05-0821-3e49-89d4-7a79dd570356.roa (raw, json) Hash identifier: u+kjNHWG25MMkCUxKNTsj+WL9zJoBh8dmJpo6Nj/lMU= Subject key identifier: 13:E3:32:D8:0F:A6:0C:9B:1D:80:98:3F:77:D9:65:96:00:03:F3:B7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D7E55183ECBB1D937F9E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c67c5e05-0821-3e49-89d4-7a79dd570356.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 70.41.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:7e:55:18:3e:cb:b1:d9:37:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=2fff9da1-87c2-4c6e-adcf-3b99ec6cbc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:60:f5:a0:9e:a9:e4:8e:66:96:e0:47:36:7d: 4a:90:a5:cb:57:66:b2:95:e4:6a:04:98:ce:49:a5: 24:6b:c9:30:49:7a:1d:ec:4e:d6:b4:ce:51:c2:62: c6:09:65:13:e6:36:4d:e2:48:ec:99:ee:09:36:16: 14:57:10:6a:9b:27:9c:80:17:96:de:83:ab:f7:18: 79:5e:c7:c4:54:9a:b3:a2:11:86:bd:97:87:19:ed: d7:7c:ef:5b:82:b4:12:fa:39:ee:81:4e:ca:56:78: 38:6c:43:19:d1:22:fd:2a:d9:e6:f1:04:52:f4:3a: c8:54:13:07:57:8d:c8:b2:d5:3d:90:f5:56:3f:7b: b0:29:00:55:71:72:f6:8f:92:0b:5e:a1:8f:26:8a: 21:9b:37:62:40:06:bd:44:33:5f:24:b8:c6:d4:0c: 3a:14:cf:72:18:91:de:25:94:e7:b5:a1:81:2e:f1: 28:73:4b:5f:e1:9c:58:5d:d6:ff:5b:ed:d3:e2:ad: 4d:32:c4:49:6b:7a:d6:7f:a8:40:b6:96:dd:47:0b: a9:4b:96:a8:a7:27:e0:72:59:ee:68:6f:b6:a0:d2: 08:a7:9b:28:2b:79:2c:76:7f:e5:9d:89:51:a8:41: 64:4c:68:42:ab:39:e0:64:be:7a:91:30:36:57:21: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E3:32:D8:0F:A6:0C:9B:1D:80:98:3F:77:D9:65:96:00:03:F3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c67c5e05-0821-3e49-89d4-7a79dd570356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:96:dd:a6:a9:f0:dd:49:f8:4a:c1:db:f9:47:11:71:71:82: 01:ae:f7:85:e1:0e:64:75:6f:8f:16:25:26:d5:f8:10:c4:42: bf:6a:f0:9b:1a:1a:43:0d:8e:e9:f7:15:f0:fb:94:9a:6f:ae: 1f:ec:b8:0b:d6:48:40:8c:50:76:d9:0d:4f:4f:d8:0d:d4:1d: 9c:34:e9:32:ac:04:50:b6:f0:12:71:e6:a0:42:be:ed:0d:00: 53:d8:df:24:b8:bd:c2:54:7a:c0:24:7c:2d:93:0c:54:1b:de: 86:06:d8:7c:52:02:b7:de:e4:f9:55:d6:ae:28:93:0f:05:b0: 23:08:c6:9d:31:67:1e:84:fb:0f:55:4f:3d:f7:c4:8e:75:8a: 63:c2:73:bf:8f:68:00:12:a8:f1:6f:f7:52:3d:a2:11:15:e5: a5:79:cd:11:4a:40:bb:06:d6:d4:79:2a:cf:51:85:1f:36:a0: dc:7c:fa:f1:bd:7f:4d:e7:a6:66:67:bf:30:27:b1:05:3c:22: da:5b:e5:79:69:e5:3a:c0:2a:20:22:6a:82:c5:a1:3f:e4:a0: 36:af:50:17:a6:cc:0e:51:13:8d:62:2e:07:c6:0f:18:11:d7: 2d:fe:cc:53:4a:65:06:0b:2c:70:8b:5e:f1:37:d6:3e:36:c5: 7a:3d:8b:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPX5VGD7Lsdk3+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk MmZmZjlkYTEtODdjMi00YzZlLWFkY2YtM2I5OWVjNmNiYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2D1oJ6p5I5mluBHNn1KkKXLV2ayleRqBJjO SaUka8kwSXod7E7WtM5RwmLGCWUT5jZN4kjsme4JNhYUVxBqmyecgBeW3oOr9xh5 XsfEVJqzohGGvZeHGe3XfO9bgrQS+jnugU7KVng4bEMZ0SL9Ktnm8QRS9DrIVBMH V43IstU9kPVWP3uwKQBVcXL2j5ILXqGPJoohmzdiQAa9RDNfJLjG1Aw6FM9yGJHe JZTntaGBLvEoc0tf4ZxYXdb/W+3T4q1NMsRJa3rWf6hAtpbdRwupS5aopyfgclnu aG+2oNIIp5soK3ksdn/lnYlRqEFkTGhCqzngZL56kTA2VyGbHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPjMtgPpgybHYCYP3fZZZYAA/O3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzY3YzVlMDUtMDgyMS0z ZTQ5LTg5ZDQtN2E3OWRkNTcwMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqW3aap8N1J+ErB2/lHEXFxggGu94XhDmR1b48WJSbV+BDEQr9q8Jsa GkMNjun3FfD7lJpvrh/suAvWSECMUHbZDU9P2A3UHZw06TKsBFC28BJx5qBCvu0N AFPY3yS4vcJUesAkfC2TDFQb3oYG2HxSArfe5PlV1q4okw8FsCMIxp0xZx6E+w9V Tz33xI51imPCc7+PaAASqPFv91I9ohEV5aV5zRFKQLsG1tR5Ks9RhR82oNx8+vG9 f03npmZnvzAnsQU8Itpb5Xlp5TrAKiAiaoLFoT/koDavUBemzA5RE41iLgfGDxgR 1y3+zFNKZQYLLHCLXvE31j42xXo9iyw= -----END CERTIFICATE-----Generated at Sat Apr 27 17:55:47 2024 by rpki-client on console-ams.rpki-client.org