$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb28b1b4-bda9-34d9-94a9-9f64a615638d.roa File: cb28b1b4-bda9-34d9-94a9-9f64a615638d.roa (raw, json) Hash identifier: ux3Ohyxg3uTvn7CE4FQ5NnJW4RW4gAfsPeudhL7uEO8= Subject key identifier: 80:72:9E:A1:88:2B:72:71:D5:41:14:4B:D2:4B:D4:D4:BB:6E:7E:7B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285845453D7E103FA62836EAC0DEC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb28b1b4-bda9-34d9-94a9-9f64a615638d.roa Signing time: Wed 20 Mar 2024 13:00:33 +0000 ROA not before: Wed 20 Mar 2024 13:00:33 +0000 ROA not after: Tue 18 Jun 2024 13:00:33 +0000 asID: 7155 IP address blocks: 70.41.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:45:3d:7e:10:3f:a6:28:36:ea:c0:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 20 13:00:33 2024 GMT Not After : Jun 18 13:00:33 2024 GMT Subject: CN=5ea20510-97f9-49f7-8dd0-93ae96be1d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:b6:b8:ca:c0:ca:ac:79:cb:1b:bf:c0:6f: 80:a7:fc:dd:00:f2:a8:6b:34:46:27:2f:90:a7:eb: 27:08:81:6b:86:56:68:33:20:3d:25:64:3e:a9:69: 7f:fe:d9:88:0e:83:21:b6:fe:45:9f:db:d0:52:32: 49:29:c3:16:9a:a9:7a:33:ef:f6:e9:0b:39:02:86: e0:45:36:12:ad:93:80:5d:26:53:29:da:f2:bb:dc: 8c:8b:41:c3:27:65:78:e3:15:a2:53:1c:ea:56:3e: be:43:57:59:41:dc:f9:e7:d5:39:3f:5d:c7:9a:94: b8:a4:bc:47:8a:65:5f:3b:31:f4:e8:aa:1b:05:70: 6b:72:1a:76:7a:9d:65:01:f8:bf:69:f5:5b:7e:55: 6e:64:19:be:d1:c4:6c:91:eb:34:d6:4e:70:15:83: b6:8e:af:e4:3d:e8:e2:e0:05:8a:6c:6e:6e:44:92: 38:ed:15:bd:4e:bc:30:3f:88:4a:14:dc:e1:4c:98: 7e:59:c3:ac:a4:5e:9a:1d:a7:9f:05:65:a0:6b:23: 67:b7:83:a6:23:db:e4:22:0f:e3:39:61:20:b0:55: 5e:e1:43:f1:50:e0:00:88:9f:14:1e:e1:de:62:8e: 44:61:4c:59:a0:a9:e8:69:0f:3d:92:04:ed:50:51: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:72:9E:A1:88:2B:72:71:D5:41:14:4B:D2:4B:D4:D4:BB:6E:7E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cb28b1b4-bda9-34d9-94a9-9f64a615638d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:37:e2:fd:f6:2d:9c:a7:dc:a3:27:9f:ce:a1:0e:d5:e0:d0: ec:26:ea:20:d6:2c:cb:35:b2:12:e7:d1:78:e7:04:7f:84:21: 14:7b:52:d3:1e:fa:78:6a:00:98:4a:17:42:85:20:43:de:3e: 1a:51:44:f8:06:a5:13:03:ab:ca:e2:14:c6:07:34:db:00:e1: f4:55:86:5c:e7:8d:a7:5a:56:a6:6f:44:47:c6:72:62:84:37: df:90:94:a0:41:81:7c:19:d5:33:ba:9b:cc:b9:47:45:f4:9f: 90:21:dc:34:c1:9a:a7:26:a5:51:b4:a2:2c:55:c4:fe:6f:97: ed:7a:90:e8:5b:9f:b3:4c:3e:63:6f:9d:96:6e:50:43:ad:1c: e4:45:c3:85:69:22:77:f1:07:67:55:81:76:4a:86:80:87:ab: 77:fc:01:a0:fc:b0:79:11:9c:3c:3e:45:05:66:8b:48:ff:d6: d6:e9:bc:a6:23:c5:13:85:44:d0:5e:73:f5:af:43:71:da:01: ce:1b:92:ff:ac:52:63:e9:5e:7e:5a:0b:78:95:fa:5c:bf:aa: 41:ea:f9:67:22:94:14:a0:ba:2c:27:07:78:83:93:92:93:ed: d7:00:31:10:d2:87:a9:a6:f0:0d:83:55:01:2d:8b:fd:8f:c6: f1:e4:6f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPX4QP6YoNurA3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk NWVhMjA1MTAtOTdmOS00OWY3LThkZDAtOTNhZTk2YmUxZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaq2uMrAyqx5yxu/wG+Ap/zdAPKoazRGJy+Q p+snCIFrhlZoMyA9JWQ+qWl//tmIDoMhtv5Fn9vQUjJJKcMWmql6M+/26Qs5Aobg RTYSrZOAXSZTKdryu9yMi0HDJ2V44xWiUxzqVj6+Q1dZQdz559U5P13HmpS4pLxH imVfOzH06KobBXBrchp2ep1lAfi/afVbflVuZBm+0cRskes01k5wFYO2jq/kPeji 4AWKbG5uRJI47RW9TrwwP4hKFNzhTJh+WcOspF6aHaefBWWgayNnt4OmI9vkIg/j OWEgsFVe4UPxUOAAiJ8UHuHeYo5EYUxZoKnoaQ89kgTtUFEwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBynqGIK3Jx1UEUS9JL1NS7bn57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2IyOGIxYjQtYmRhOS0z NGQ5LTk0YTktOWY2NGE2MTU2MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG834v32LZyn3KMnn86hDtXg0Owm6iDWLMs1shLn0XjnBH+EIRR7UtMe +nhqAJhKF0KFIEPePhpRRPgGpRMDq8riFMYHNNsA4fRVhlznjadaVqZvREfGcmKE N9+QlKBBgXwZ1TO6m8y5R0X0n5Ah3DTBmqcmpVG0oixVxP5vl+16kOhbn7NMPmNv nZZuUEOtHORFw4VpInfxB2dVgXZKhoCHq3f8AaD8sHkRnDw+RQVmi0j/1tbpvKYj xROFRNBec/WvQ3HaAc4bkv+sUmPpXn5aC3iV+ly/qkHq+WcilBSguiwnB3iDk5KT 7dcAMRDSh6mm8A2DVQEti/2PxvHkb/c= -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org