$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca6d04c2-31bd-3cd9-8915-e32ad05546c1.roa File: ca6d04c2-31bd-3cd9-8915-e32ad05546c1.roa (raw, json) Hash identifier: CJGSp7Y+hlQ+dgNT81ZQmdEa3GHViDcj7FvhS0xODYc= Subject key identifier: 25:EE:B5:DF:31:A2:2F:B2:09:EE:EB:A2:F9:7A:02:3E:71:96:0F:8B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58199D0BA5E3438F3DEA780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca6d04c2-31bd-3cd9-8915-e32ad05546c1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:99:d0:ba:5e:34:38:f3:de:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=07e65fea-1f83-46f4-806a-fdadb2f3a1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:76:41:e6:8a:c0:80:07:7e:36:40:6c:64: fe:0d:50:af:b0:38:d1:70:11:49:45:2c:9f:bd:b8: 4a:63:ba:05:8e:ed:e9:de:02:fd:6f:14:cc:8c:8b: 8c:8b:64:6e:14:60:09:26:30:3e:ca:4c:8c:32:1c: c3:ba:35:a5:a9:53:b8:a6:b2:b2:fa:53:75:a0:94: 90:5e:82:bd:fe:8c:74:93:c1:7e:dc:8b:fa:02:1b: 82:6b:c9:b1:38:ff:80:39:ba:a6:d5:a7:c6:2e:3d: a3:cc:e5:8a:a0:f5:31:38:45:7e:f1:aa:82:8e:40: ff:25:35:16:4a:8e:93:f5:b7:1d:a5:7d:e3:95:f4: 31:83:a4:10:15:7c:f7:67:c1:ad:d7:35:9c:1a:4c: fb:ce:ce:9a:23:8a:a3:f0:8e:cb:da:e9:f0:ef:e1: fd:68:6e:16:43:8b:b3:ab:d1:64:df:5b:6c:07:5a: 48:87:f2:f9:2d:8a:be:45:ea:2c:47:f5:52:47:12: 90:f8:13:21:8e:c1:66:e5:be:e4:28:46:cc:e2:6e: df:a3:93:25:8b:52:10:a4:1a:25:ab:3f:91:f9:83: a7:e2:d7:ec:4e:ae:b8:40:78:71:a9:e0:13:72:c1: 15:9e:e1:c9:12:38:1c:b8:99:4b:88:0a:38:7c:0d: eb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EE:B5:DF:31:A2:2F:B2:09:EE:EB:A2:F9:7A:02:3E:71:96:0F:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ca6d04c2-31bd-3cd9-8915-e32ad05546c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e2:87:75:9a:40:61:38:d7:98:5b:4a:c1:61:5d:65:af:1e: b8:5a:7b:d4:c4:30:2b:54:ab:15:a6:91:4f:b3:2f:f6:fb:3e: 2d:81:32:26:f4:f5:46:7d:57:c2:d5:0d:aa:bd:5c:83:a8:9d: 5d:cb:ae:b1:63:d9:f6:2b:d5:02:94:28:50:5c:01:09:e7:61: 43:60:eb:ac:15:a6:32:01:2b:0b:b4:94:83:07:05:1e:1b:79: 82:8c:ce:df:b6:4f:17:84:80:49:9b:f3:0a:da:72:5a:85:49: 70:74:25:6c:9f:62:5a:78:a0:b7:51:42:da:05:29:75:fb:c8: d4:d8:89:94:34:fc:74:38:dc:94:5b:a2:b7:21:c6:f8:7f:22: 64:90:3e:83:ba:06:66:0b:82:19:18:83:ac:19:c9:ee:d7:94: f6:b7:7a:83:73:c3:af:c5:b5:16:68:bd:22:11:89:74:ce:69: 96:35:77:6a:c1:86:53:bd:cf:cd:46:97:4c:bb:c4:03:69:6e: 0b:17:48:a6:8f:69:44:e8:34:6e:c1:94:c6:9d:11:6d:57:5d: 58:ff:b0:cb:75:60:f6:69:88:2d:f1:2e:2a:10:5c:99:dc:b1: 21:1c:17:3d:c3:ae:73:37:74:99:69:fd:1c:c8:30:16:88:d9: af:0c:45:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZnQul40OPPep4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MDdlNjVmZWEtMWY4My00NmY0LTgwNmEtZmRhZGIyZjNhMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbl2QeaKwIAHfjZAbGT+DVCvsDjRcBFJRSyf vbhKY7oFju3p3gL9bxTMjIuMi2RuFGAJJjA+ykyMMhzDujWlqVO4prKy+lN1oJSQ XoK9/ox0k8F+3Iv6AhuCa8mxOP+AObqm1afGLj2jzOWKoPUxOEV+8aqCjkD/JTUW So6T9bcdpX3jlfQxg6QQFXz3Z8Gt1zWcGkz7zs6aI4qj8I7L2unw7+H9aG4WQ4uz q9Fk31tsB1pIh/L5LYq+ReosR/VSRxKQ+BMhjsFm5b7kKEbM4m7fo5Mli1IQpBol qz+R+YOn4tfsTq64QHhxqeATcsEVnuHJEjgcuJlLiAo4fA3r2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXutd8xoi+yCe7rovl6Aj5xlg+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2E2ZDA0YzItMzFiZC0z Y2Q5LTg5MTUtZTMyYWQwNTU0NmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLih3WaQGE415hbSsFhXWWvHrhae9TEMCtUqxWmkU+zL/b7Pi2BMib0 9UZ9V8LVDaq9XIOonV3LrrFj2fYr1QKUKFBcAQnnYUNg66wVpjIBKwu0lIMHBR4b eYKMzt+2TxeEgEmb8wraclqFSXB0JWyfYlp4oLdRQtoFKXX7yNTYiZQ0/HQ43JRb orchxvh/ImSQPoO6BmYLghkYg6wZye7XlPa3eoNzw6/FtRZovSIRiXTOaZY1d2rB hlO9z81Gl0y7xANpbgsXSKaPaUToNG7BlMadEW1XXVj/sMt1YPZpiC3xLioQXJnc sSEcFz3DrnM3dJlp/RzIMBaI2a8MRWs= -----END CERTIFICATE-----Generated at Fri Apr 11 23:19:46 2025 by rpki-client