$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbd95e4e-e548-3b39-9f40-fe44d49bdff2.roa File: cbd95e4e-e548-3b39-9f40-fe44d49bdff2.roa (raw, json) Hash identifier: O9/NjzV/aTDisUFSLtcnTPIwljWvLDPbAWNL+DJXxhM= Subject key identifier: B0:00:CC:25:C8:8C:C2:F1:4B:54:0E:0D:69:C9:E7:DA:4B:26:04:1C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58105BE525B1F1341CAEE80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbd95e4e-e548-3b39-9f40-fe44d49bdff2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:05:be:52:5b:1f:13:41:ca:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c61ea35f-14fa-4f7c-9819-4098d46eca1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:ab:15:16:48:f0:c5:7c:52:a2:02:8f:b5: ec:8a:6b:c1:4e:3c:82:c5:ff:c3:5b:c0:47:cf:98: e9:cf:86:c2:5b:36:8c:73:d2:07:99:2f:ca:99:22: e2:36:a8:55:7e:d1:6f:a0:8f:07:11:bc:1c:39:90: f7:f0:35:6b:25:bb:1b:c6:ec:be:b1:fc:39:dc:e2: e6:20:aa:84:d8:89:b5:f0:a9:bd:af:30:09:62:af: 58:7f:f7:56:1c:42:3f:82:01:40:dd:3c:72:3e:e2: 19:88:03:38:37:ff:7a:03:9d:26:4e:1a:87:cc:c8: a7:f1:19:c6:b4:29:53:3f:1c:ae:a8:b8:13:a9:c6: 0a:ad:e8:fa:e3:bd:e4:8b:88:2a:c0:f4:c0:32:d6: 88:5f:19:4d:35:62:f4:d7:21:ef:cd:ae:0a:a0:08: 6c:04:75:54:e5:7a:17:ea:1b:18:96:bd:d6:86:92: 0b:ee:fd:14:6d:82:b5:e5:b0:76:5b:51:55:df:62: d9:8d:8f:30:38:99:e9:d8:aa:7c:52:f0:cf:e1:99: 3b:f1:6a:47:3e:03:3f:52:1e:62:0d:07:60:bd:dd: 52:49:5e:a3:68:5c:be:fb:66:91:35:b9:ea:d2:9f: 9c:54:ed:7d:f7:d0:62:1d:92:c6:9d:02:81:fc:85: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:00:CC:25:C8:8C:C2:F1:4B:54:0E:0D:69:C9:E7:DA:4B:26:04:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cbd95e4e-e548-3b39-9f40-fe44d49bdff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:9b:69:fe:59:db:4e:c6:db:16:7b:e3:8f:be:51:5e:ee:b4: 0a:af:04:bd:bd:27:bf:65:0b:17:7d:73:ad:01:5e:f0:d7:9c: 1b:16:ed:42:02:6e:c1:26:14:45:f0:63:5e:1d:99:12:c7:df: 5e:c1:26:6e:7b:63:88:a1:64:2f:7c:6c:70:7c:a0:28:47:3a: e5:a4:cb:aa:6a:34:7f:6a:02:1c:21:d8:00:13:6c:ff:35:e5: 82:9a:17:9f:1e:e6:53:15:8c:cc:a9:f7:89:f8:c7:fd:e7:c3: a5:f2:a6:56:7c:33:fd:f0:82:2f:1c:ac:51:ba:a5:0a:f6:b8: a2:81:80:6c:4f:c5:84:b2:b1:ad:5f:83:c9:b1:13:d9:99:30: 41:6d:be:ed:e2:e7:3e:af:be:9c:0f:b2:64:70:b3:a1:f1:53: 14:2a:70:4b:41:98:7a:91:43:f3:43:0f:6e:56:40:fe:f7:af: e6:b5:6f:d2:52:91:b1:c5:97:9b:7b:49:97:ab:a7:58:3d:7a: 38:45:f3:f9:7a:c6:cd:ed:83:b6:f5:14:cb:f2:e9:35:15:3a: 1b:08:69:ac:8f:99:3f:99:4a:df:44:78:e7:21:87:3b:48:62: d5:8c:1c:01:1c:f0:b2:d0:0c:f9:2a:9c:3f:6e:3a:0e:b0:d7: 3f:7a:8d:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQW+UlsfE0HK7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzYxZWEzNWYtMTRmYS00ZjdjLTk4MTktNDA5OGQ0NmVjYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEyrFRZI8MV8UqICj7XsimvBTjyCxf/DW8BH z5jpz4bCWzaMc9IHmS/KmSLiNqhVftFvoI8HEbwcOZD38DVrJbsbxuy+sfw53OLm IKqE2Im18Km9rzAJYq9Yf/dWHEI/ggFA3TxyPuIZiAM4N/96A50mThqHzMin8RnG tClTPxyuqLgTqcYKrej6473ki4gqwPTAMtaIXxlNNWL01yHvza4KoAhsBHVU5XoX 6hsYlr3WhpIL7v0UbYK15bB2W1FV32LZjY8wOJnp2Kp8UvDP4Zk78WpHPgM/Uh5i DQdgvd1SSV6jaFy++2aRNbnq0p+cVO1999BiHZLGnQKB/IWvrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAAzCXIjMLxS1QODWnJ59pLJgQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2JkOTVlNGUtZTU0OC0z YjM5LTlmNDAtZmU0NGQ0OWJkZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANSbaf5Z207G2xZ744++UV7utAqvBL29J79lCxd9c60BXvDXnBsW7UIC bsEmFEXwY14dmRLH317BJm57Y4ihZC98bHB8oChHOuWky6pqNH9qAhwh2AATbP81 5YKaF58e5lMVjMyp94n4x/3nw6XyplZ8M/3wgi8crFG6pQr2uKKBgGxPxYSysa1f g8mxE9mZMEFtvu3i5z6vvpwPsmRws6HxUxQqcEtBmHqRQ/NDD25WQP73r+a1b9JS kbHFl5t7SZerp1g9ejhF8/l6xs3tg7b1FMvy6TUVOhsIaayPmT+ZSt9EeOchhztI YtWMHAEc8LLQDPkqnD9uOg6w1z96ja8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:26 2025 by rpki-client