$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d14f496f-135d-3316-bf2e-70d16e643666.roa File: d14f496f-135d-3316-bf2e-70d16e643666.roa (raw, json) Hash identifier: v2tyU8/PSKPYwgjFgGE328OeuTzCF5KclxxTjyQawmw= Subject key identifier: 37:4C:20:B8:E4:9F:58:EF:D2:47:1B:CE:8E:8A:76:D0:81:17:0F:7C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581995CB9B12CCED0A02F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d14f496f-135d-3316-bf2e-70d16e643666.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:99:5c:b9:b1:2c:ce:d0:a0:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=593d53f4-3399-4640-9b35-0312f48975c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:ed:87:fc:b0:79:50:c2:37:66:d5:bf:83: f9:31:f7:8a:1d:17:7d:24:1d:7c:a2:1d:04:9e:7e: 78:59:93:b7:f0:e5:34:f0:2b:67:11:48:da:2a:79: 29:2e:99:e3:25:23:4f:3c:c6:e2:15:d9:1e:6b:f1: 7e:32:f9:90:81:e5:01:45:83:d0:89:2f:be:00:c5: 0a:f1:52:39:cb:e0:cd:ef:21:8e:4a:9e:85:01:83: 02:0b:f1:f5:6f:a1:4e:18:4c:74:a1:a8:08:c2:b6: ac:78:aa:53:26:40:40:80:15:6a:eb:8b:f6:55:2a: fe:c7:81:80:f7:20:4e:95:d8:83:35:f9:f0:42:3a: 48:af:2e:9c:bb:fb:08:fd:1f:1f:6e:0e:f0:cb:1b: 79:98:d1:f6:fc:2d:cc:c7:b4:95:4c:92:fa:0b:d5: 9a:40:d3:c6:b5:94:03:60:c9:18:14:bf:20:54:9e: 20:ee:b6:f7:0e:0a:f2:0e:cf:8f:e9:6c:75:42:4e: 51:e3:15:05:b6:e9:24:1f:e2:72:e9:cf:f8:60:c1: 00:22:cf:ee:e0:21:c3:99:f0:77:37:75:f9:2f:37: 45:c0:b0:f0:da:46:08:44:43:8a:a8:a2:45:8a:99: dd:83:3e:bd:3a:69:80:7d:aa:a9:1d:70:c0:ac:42: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4C:20:B8:E4:9F:58:EF:D2:47:1B:CE:8E:8A:76:D0:81:17:0F:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d14f496f-135d-3316-bf2e-70d16e643666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:32:47:95:5f:f9:72:68:dc:9f:61:65:60:3b:8f:cf:79:6e: a1:f2:aa:1c:c3:cf:fa:54:72:35:b9:95:13:89:04:30:d1:87: ee:c4:5b:af:08:76:50:ae:e8:b2:70:81:70:87:9f:c3:bf:b5: c8:b8:b6:12:f5:86:b4:85:16:7e:be:4c:f2:76:a0:37:ba:77: 1c:e4:71:f9:bf:d2:40:b5:e7:75:a1:45:85:f2:c0:47:f8:3c: 66:78:d7:9d:2f:6b:52:80:90:95:b1:ad:8f:f9:df:58:ea:b1: 3b:dd:84:ff:97:c9:07:93:6b:a1:30:a2:2b:0e:57:10:f9:0b: bc:90:8b:38:ca:50:66:03:62:3d:76:d9:bf:30:0f:be:00:9e: 9b:ca:1c:ff:d6:23:4f:9c:23:73:6c:c4:6f:95:8d:b9:5e:97: 5b:dd:f5:b3:66:96:d3:29:23:b5:3a:3d:a3:da:98:14:f1:76: b4:88:49:e8:6b:76:f6:0e:c3:63:08:47:eb:43:9a:5c:19:2f: 6a:2b:63:3a:70:5c:1b:f6:c7:07:50:9d:ee:59:95:57:21:a3: 95:8f:d4:4f:2b:be:4a:a4:00:76:9d:6e:86:63:da:77:6d:19: 17:57:4e:e8:4a:2a:e1:57:1d:6b:6b:e3:a4:7c:e4:72:0e:48: 07:42:09:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZlcubEsztCgL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTkzZDUzZjQtMzM5OS00NjQwLTliMzUtMDMxMmY0ODk3NWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob7th/yweVDCN2bVv4P5MfeKHRd9JB18oh0E nn54WZO38OU08CtnEUjaKnkpLpnjJSNPPMbiFdkea/F+MvmQgeUBRYPQiS++AMUK 8VI5y+DN7yGOSp6FAYMCC/H1b6FOGEx0oagIwraseKpTJkBAgBVq64v2VSr+x4GA 9yBOldiDNfnwQjpIry6cu/sI/R8fbg7wyxt5mNH2/C3Mx7SVTJL6C9WaQNPGtZQD YMkYFL8gVJ4g7rb3DgryDs+P6Wx1Qk5R4xUFtukkH+Jy6c/4YMEAIs/u4CHDmfB3 N3X5LzdFwLDw2kYIREOKqKJFipndgz69OmmAfaqpHXDArEIOEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdMILjkn1jv0kcbzo6KdtCBFw98MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDE0ZjQ5NmYtMTM1ZC0z MzE2LWJmMmUtNzBkMTZlNjQzNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAyR5Vf+XJo3J9hZWA7j895bqHyqhzDz/pUcjW5lROJBDDRh+7EW68I dlCu6LJwgXCHn8O/tci4thL1hrSFFn6+TPJ2oDe6dxzkcfm/0kC153WhRYXywEf4 PGZ4150va1KAkJWxrY/531jqsTvdhP+XyQeTa6EwoisOVxD5C7yQizjKUGYDYj12 2b8wD74AnpvKHP/WI0+cI3NsxG+Vjblel1vd9bNmltMpI7U6PaPamBTxdrSISehr dvYOw2MIR+tDmlwZL2orYzpwXBv2xwdQne5ZlVcho5WP1E8rvkqkAHadboZj2ndt GRdXTuhKKuFXHWtr46R85HIOSAdCCd0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:36 2025 by rpki-client