$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5291b8b-39a0-3828-8968-405ce152d393.roa File: d5291b8b-39a0-3828-8968-405ce152d393.roa (raw, json) Hash identifier: aR//KUBkQZ7wQUCdFH5lzKlcAgHUD+WPTdouqrgrXjw= Subject key identifier: 71:30:70:7A:71:44:E5:DD:AF:3F:69:53:83:26:6F:12:5F:C6:FB:2A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848CDE1146A2180FAEC4BE41F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5291b8b-39a0-3828-8968-405ce152d393.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7155 IP address blocks: 70.41.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:14:6a:21:80:fa:ec:4b:e4:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=998eb9e7-8ec1-46d8-bcf0-a9c21d71915b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:b2:14:c1:ed:97:10:ab:c4:b6:32:21:e4: 39:aa:ab:70:fd:ce:43:97:43:1b:3e:6f:b3:c4:31: 0a:86:01:2a:8b:bf:2a:b4:9a:db:31:b3:02:3f:ed: 17:24:3d:f8:3c:22:f4:3a:af:77:2b:56:11:1c:56: b7:ef:4d:45:b4:31:7e:45:84:12:52:78:73:98:eb: 09:ea:1a:ed:59:96:22:e2:84:42:d1:a3:81:73:6c: 48:f8:95:ca:43:6b:a3:cf:cd:57:67:b9:97:23:71: a7:48:89:e4:86:ed:9c:6b:a1:38:ee:b3:f7:03:83: 44:35:b8:c8:3b:90:a7:b2:b2:88:c2:ae:b1:8d:83: a5:b2:e0:0f:5c:ed:c3:58:d4:f3:62:1e:b9:8f:72: 94:86:86:9d:4f:c1:b7:ec:43:d9:8e:07:4e:50:27: 93:b0:38:e5:6b:c8:63:ef:5f:22:36:f3:1d:57:1e: 71:9c:1d:1b:f0:44:ad:8e:91:05:46:18:2d:45:75: 3a:4a:ce:ed:e6:b5:b5:8a:e5:31:d4:fb:4e:4c:34: 5d:0e:3c:8b:7a:64:e3:03:0b:37:56:47:77:68:99: 3c:ef:54:11:71:2a:0e:25:c1:80:88:66:06:88:f5: 4a:65:c9:c0:ac:dc:de:b5:78:ea:67:ab:2c:a8:82: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:70:7A:71:44:E5:DD:AF:3F:69:53:83:26:6F:12:5F:C6:FB:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5291b8b-39a0-3828-8968-405ce152d393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:c5:fc:ea:7c:d0:5d:1e:39:b6:2c:eb:78:c8:ae:7d:00:16: 07:b8:7f:27:6c:f3:06:72:04:12:80:0d:18:8e:42:4d:18:e9: 43:87:3b:99:9d:ac:34:48:78:5b:0a:1a:9e:7a:a6:97:24:f7: ba:e6:c1:f5:d9:33:18:9e:9c:93:5a:40:ab:39:a6:9f:8e:ff: 4b:77:c0:a7:0c:57:cc:57:74:57:5e:3f:d5:ca:cd:a4:1a:85: 0b:ed:80:31:7d:31:e4:61:6b:a6:9a:db:73:ee:5c:ca:51:39: ca:18:22:77:a6:51:f7:41:ee:f3:85:58:3d:25:b9:d1:31:24: f7:86:a6:7f:a4:9e:50:1f:06:c5:68:f7:2e:78:6c:38:6a:19: 90:c8:55:29:bb:91:fa:cf:ae:72:ec:46:e2:67:cb:c0:e1:93: 1b:9a:20:d5:e5:d3:e4:41:b0:24:9f:46:b6:fc:3d:33:36:6e: 1e:43:0a:76:a6:f8:86:fa:a9:3e:74:ea:44:a2:b7:5c:72:46: 93:84:51:5b:e9:f9:6f:91:27:db:0d:3c:d6:8a:7b:8c:fb:20: e7:71:73:50:e6:b9:24:01:f5:ef:09:a2:36:6a:f3:c0:20:07: 18:71:99:ca:fd:19:49:9c:93:3d:1c:35:7a:91:18:bf:0b:d2: 48:6c:a6:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RRqIYD67EvkHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OTk4ZWI5ZTctOGVjMS00NmQ4LWJjZjAtYTljMjFkNzE5MTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu2yFMHtlxCrxLYyIeQ5qqtw/c5Dl0MbPm+z xDEKhgEqi78qtJrbMbMCP+0XJD34PCL0Oq93K1YRHFa3701FtDF+RYQSUnhzmOsJ 6hrtWZYi4oRC0aOBc2xI+JXKQ2ujz81XZ7mXI3GnSInkhu2ca6E47rP3A4NENbjI O5CnsrKIwq6xjYOlsuAPXO3DWNTzYh65j3KUhoadT8G37EPZjgdOUCeTsDjla8hj 718iNvMdVx5xnB0b8EStjpEFRhgtRXU6Ss7t5rW1iuUx1PtOTDRdDjyLemTjAws3 Vkd3aJk871QRcSoOJcGAiGYGiPVKZcnArNzetXjqZ6ssqIKQGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEwcHpxROXdrz9pU4MmbxJfxvsqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDUyOTFiOGItMzlhMC0z ODI4LTg5NjgtNDA1Y2UxNTJkMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRikEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7F/Op80F0eObYs63jIrn0AFge4fyds8wZyBBKADRiOQk0Y6UOHO5md rDRIeFsKGp56ppck97rmwfXZMxienJNaQKs5pp+O/0t3wKcMV8xXdFdeP9XKzaQa hQvtgDF9MeRha6aa23PuXMpROcoYInemUfdB7vOFWD0ludExJPeGpn+knlAfBsVo 9y54bDhqGZDIVSm7kfrPrnLsRuJny8DhkxuaINXl0+RBsCSfRrb8PTM2bh5DCnam +Ib6qT506kSit1xyRpOEUVvp+W+RJ9sNPNaKe4z7IOdxc1DmuSQB9e8JojZq88Ag Bxhxmcr9GUmckz0cNXqRGL8L0khspok= -----END CERTIFICATE-----Generated at Fri Apr 11 23:26:15 2025 by rpki-client