$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8eceb70-2e45-3db6-a398-9ffb1a0d1613.roa File: c8eceb70-2e45-3db6-a398-9ffb1a0d1613.roa (raw, json) Hash identifier: YhDqWX9ecd1uwYNCK1EFLssOrF0d1+7rxZB5MPLczug= Subject key identifier: 42:CD:96:D7:81:27:F7:BF:E5:2C:49:46:3A:2C:E6:B3:D3:D7:51:AB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819A63A73449A47C4E9580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8eceb70-2e45-3db6-a398-9ffb1a0d1613.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9a:63:a7:34:49:a4:7c:4e:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9587e639-8db4-4110-9c9a-db94217efbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:0a:93:6e:aa:85:2b:e8:51:ad:12:61:3d: f4:cd:c7:f7:91:41:32:cd:95:88:de:1a:40:4d:66: 96:18:79:24:db:96:ff:93:fc:d6:27:5d:58:8d:83: 85:d7:16:e7:24:ae:d9:df:67:43:d7:7b:ef:ed:6b: a8:40:eb:4a:05:c2:50:33:bb:fe:19:12:11:5a:71: 89:7f:15:c1:ec:9f:dc:8d:ea:2e:29:6a:0d:e8:a1: 17:b2:cb:eb:d1:76:d7:58:bc:76:f5:f4:ac:60:7b: 9b:6e:ce:33:33:fc:67:c0:06:95:74:a3:99:d5:38: ac:df:7a:23:d6:5d:b8:42:89:b7:53:67:fc:07:dc: db:e0:e1:45:ac:99:4c:c1:a9:f9:a8:45:67:07:97: cd:8f:f3:9a:18:4a:a7:8a:2a:94:5f:82:54:08:9a: 62:cf:fb:4c:12:32:94:7e:f5:aa:9f:54:4b:88:64: 42:72:62:7f:8c:bb:4c:59:ef:e0:10:54:ec:6b:e4: 9f:95:74:9e:26:10:cc:02:70:ef:ef:c4:da:36:fd: d1:ed:23:e5:ac:53:ff:b0:61:cd:9f:e3:ba:3e:bd: e4:47:43:d0:a7:99:d2:4a:b4:8e:8e:d6:f9:09:1d: 27:a3:af:1f:71:36:fc:f7:ad:31:07:aa:89:85:bb: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CD:96:D7:81:27:F7:BF:E5:2C:49:46:3A:2C:E6:B3:D3:D7:51:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8eceb70-2e45-3db6-a398-9ffb1a0d1613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5a:27:ad:5a:f0:2a:90:11:3a:87:42:07:b0:61:d5:c8:1a: 69:b9:8b:c3:4c:c9:36:53:2f:a7:25:fa:df:ab:fa:56:e2:ae: f4:01:87:59:e0:34:1c:5f:7a:ae:09:0b:92:85:ad:e1:cd:88: 71:2e:be:af:e6:10:3e:39:7f:af:81:35:12:42:f2:2b:6e:3a: e1:d6:d7:6a:40:e3:c2:0e:6e:6b:df:3e:e8:c9:cb:e8:df:a5: b8:fc:b1:d8:45:99:ad:50:e2:a3:b0:a6:84:9d:62:00:89:dc: 89:48:92:b9:d8:da:10:8d:b8:4c:8b:78:f1:bd:c4:02:51:b0: eb:ed:16:ed:3a:4c:24:b6:31:20:a0:0a:e4:e3:8a:a4:13:9b: c9:da:94:6a:bf:4c:95:00:e4:7e:f2:1c:16:65:c9:de:81:5e: c0:30:4d:d9:3d:57:f4:e9:e1:67:ba:63:8e:3c:67:19:3b:d4: a6:01:ce:7b:ff:c6:3e:eb:79:40:18:de:b3:77:13:99:21:66: 84:6d:e8:4f:5f:4d:b7:5c:08:31:7b:9c:95:18:fc:7a:e3:22: 46:af:1d:7b:52:9d:eb:c1:c9:2f:46:e5:11:01:62:06:89:07: ea:2c:9b:35:b4:4f:e8:74:c8:cf:f2:d1:e9:26:6f:59:c1:0d: 3a:d0:93:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZpjpzRJpHxOlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTU4N2U2MzktOGRiNC00MTEwLTljOWEtZGI5NDIxN2VmYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOoKk26qhSvoUa0SYT30zcf3kUEyzZWI3hpA TWaWGHkk25b/k/zWJ11YjYOF1xbnJK7Z32dD13vv7WuoQOtKBcJQM7v+GRIRWnGJ fxXB7J/cjeouKWoN6KEXssvr0XbXWLx29fSsYHubbs4zM/xnwAaVdKOZ1Tis33oj 1l24Qom3U2f8B9zb4OFFrJlMwan5qEVnB5fNj/OaGEqniiqUX4JUCJpiz/tMEjKU fvWqn1RLiGRCcmJ/jLtMWe/gEFTsa+SflXSeJhDMAnDv78TaNv3R7SPlrFP/sGHN n+O6Pr3kR0PQp5nSSrSOjtb5CR0no68fcTb8960xB6qJhbsSSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELNlteBJ/e/5SxJRjos5rPT11GrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzhlY2ViNzAtMmU0NS0z ZGI2LWEzOTgtOWZmYjFhMGQxNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARim+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1aJ61a8CqQETqHQgewYdXIGmm5i8NMyTZTL6cl+t+r+lbirvQBh1ng NBxfeq4JC5KFreHNiHEuvq/mED45f6+BNRJC8ituOuHW12pA48IObmvfPujJy+jf pbj8sdhFma1Q4qOwpoSdYgCJ3IlIkrnY2hCNuEyLePG9xAJRsOvtFu06TCS2MSCg CuTjiqQTm8nalGq/TJUA5H7yHBZlyd6BXsAwTdk9V/Tp4We6Y448Zxk71KYBznv/ xj7reUAY3rN3E5khZoRt6E9fTbdcCDF7nJUY/HrjIkavHXtSnevByS9G5REBYgaJ B+osmzW0T+h0yM/y0ekmb1nBDTrQk2U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:04 2025 by rpki-client