$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2acef8d-3753-3089-ad8a-91356efd77a0.roa File: d2acef8d-3753-3089-ad8a-91356efd77a0.roa (raw, json) Hash identifier: HAY+UrIWd9ogkdwafp62peWjrLKzPTKk7Xmbqfp4td4= Subject key identifier: EF:92:A4:09:1D:11:1E:29:9F:E8:96:58:10:6F:EF:44:45:F9:F2:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58109E336291A333039B6C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2acef8d-3753-3089-ad8a-91356efd77a0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:09:e3:36:29:1a:33:30:39:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f8b0f382-a69f-4406-913c-ee6e0d0fd3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6c:af:f6:c4:97:a9:ba:d0:01:5c:e4:fb:16: 66:6b:23:21:c1:5c:af:b6:f2:06:57:5c:eb:8f:aa: 40:61:38:3a:dc:9d:d4:11:8a:0f:09:b5:d9:98:a4: 32:d2:4f:4b:c9:d9:88:63:3b:67:00:c8:86:75:7e: f7:3c:d1:29:0e:c1:d7:63:90:57:eb:2b:f0:4d:96: d0:3e:a4:2b:14:03:5f:47:f3:f4:6a:dd:58:4e:74: 54:e4:97:b7:50:04:01:5d:fe:d5:81:bc:88:f7:89: 66:52:ef:f3:07:99:2b:c5:55:a3:a4:9f:58:65:f6: 2f:49:6c:64:40:29:a0:14:8f:8b:6f:a7:96:80:d3: 93:93:bf:0c:18:cb:6a:1b:50:15:29:bd:f7:b6:b6: 1d:dd:3c:54:86:00:22:5d:a0:17:f7:43:39:c0:75: 73:29:ef:8a:bf:b9:b6:3e:d7:81:be:b3:35:bf:c2: 8c:17:00:6e:ba:64:08:6d:a6:dc:6b:4e:62:27:70: a5:a4:31:eb:49:48:0e:bf:a7:54:89:1f:79:f6:68: a3:d4:41:1e:fb:55:d1:eb:b3:5f:38:e1:0b:77:ce: 62:71:51:72:5b:df:ad:e5:d1:0c:bf:dd:70:56:89: 2a:9d:a7:b1:d3:47:c1:6b:f1:07:59:fa:bb:76:9c: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:92:A4:09:1D:11:1E:29:9F:E8:96:58:10:6F:EF:44:45:F9:F2:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2acef8d-3753-3089-ad8a-91356efd77a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:51:ff:01:cc:ca:72:4c:f7:1e:b8:3d:ba:bf:2b:82:aa:32: 4f:16:27:5c:03:fd:e8:ef:1c:5a:8e:49:39:f9:fc:e0:2d:2d: 07:b2:31:35:de:c0:a8:7f:32:66:45:8a:36:97:76:50:1a:db: f3:0a:59:7b:bb:71:6a:3c:43:9c:3f:be:00:68:cc:77:f5:a2: da:33:41:e2:a1:2b:3b:dd:01:1f:5c:65:31:a6:8b:b9:5c:f7: 7b:27:fe:eb:22:75:18:ea:51:09:13:48:ec:dc:8b:01:61:cb: 27:5f:c8:d9:fa:5e:af:81:a3:5b:18:ee:3c:18:17:b1:ec:65: 79:1e:49:ba:30:bd:9d:99:67:82:f7:cf:a4:77:d9:5b:32:d3: 3a:c7:b4:25:1a:96:43:af:eb:64:6d:30:44:a9:92:7b:08:19: 7f:12:e0:7a:e5:e4:db:d2:01:d9:4d:e9:2b:0b:73:6a:dd:e8: 93:ab:d0:b2:6a:97:47:5c:e8:a9:d3:21:e6:ea:05:da:d8:10: 97:62:42:90:6d:63:83:8c:61:2d:60:02:9a:2b:89:7f:d6:dc: 4d:57:e9:7b:fe:aa:37:65:cb:7f:0a:1e:e6:4f:e1:d8:9e:88: ee:92:60:3b:22:04:7b:d0:e6:71:0e:c5:35:a9:c5:da:6e:62: 86:23:8c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQnjNikaMzA5tsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjhiMGYzODItYTY5Zi00NDA2LTkxM2MtZWU2ZTBkMGZkM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWyv9sSXqbrQAVzk+xZmayMhwVyvtvIGV1zr j6pAYTg63J3UEYoPCbXZmKQy0k9LydmIYztnAMiGdX73PNEpDsHXY5BX6yvwTZbQ PqQrFANfR/P0at1YTnRU5Je3UAQBXf7VgbyI94lmUu/zB5krxVWjpJ9YZfYvSWxk QCmgFI+Lb6eWgNOTk78MGMtqG1AVKb33trYd3TxUhgAiXaAX90M5wHVzKe+Kv7m2 PteBvrM1v8KMFwBuumQIbabca05iJ3ClpDHrSUgOv6dUiR959mij1EEe+1XR67Nf OOELd85icVFyW9+t5dEMv91wVokqnaex00fBa/EHWfq7dpx+WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+SpAkdER4pn+iWWBBv70RF+fIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDJhY2VmOGQtMzc1My0z MDg5LWFkOGEtOTEzNTZlZmQ3N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdR/wHMynJM9x64Pbq/K4KqMk8WJ1wD/ejvHFqOSTn5/OAtLQeyMTXe wKh/MmZFijaXdlAa2/MKWXu7cWo8Q5w/vgBozHf1otozQeKhKzvdAR9cZTGmi7lc 93sn/usidRjqUQkTSOzciwFhyydfyNn6Xq+Bo1sY7jwYF7HsZXkeSbowvZ2ZZ4L3 z6R32Vsy0zrHtCUalkOv62RtMESpknsIGX8S4Hrl5NvSAdlN6SsLc2rd6JOr0LJq l0dc6KnTIebqBdrYEJdiQpBtY4OMYS1gAporiX/W3E1X6Xv+qjdly38KHuZP4die iO6SYDsiBHvQ5nEOxTWpxdpuYoYjjK8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:22 2025 by rpki-client