$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5291b8b-39a0-3828-8968-405ce152d393.roa File: d5291b8b-39a0-3828-8968-405ce152d393.roa (raw, json) Hash identifier: 83Q8scB1dWnX3HcmEv5x9Fw+Eks2lxrx1ldD8EVxzr4= Subject key identifier: 9B:C6:57:7E:74:F1:02:3B:A8:DE:05:04:09:21:30:E2:AF:98:00:F3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847EE8A309E2C5F2516DB7D3F20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5291b8b-39a0-3828-8968-405ce152d393.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 7155 IP address blocks: 70.41.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:30:9e:2c:5f:25:16:db:7d:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=14aeb3ef-767a-42e6-b22c-0ac45b981532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:9d:9f:bc:f4:64:f6:6d:0e:6e:b1:39:b5: ef:b6:8a:18:fb:a2:1f:b6:a7:3c:a1:3c:fc:4e:2c: fc:63:29:24:9b:6e:9f:2e:23:d7:fe:2f:12:78:9e: 22:e9:b3:01:4d:35:88:02:cb:5c:46:b2:81:7d:56: 0e:fc:65:bd:13:1e:da:49:89:e9:19:b3:40:26:e4: e4:99:76:72:9b:be:a0:b9:11:66:fb:df:e4:58:a2: a8:7e:eb:18:73:f8:cb:df:11:2c:bd:69:82:14:45: 83:ba:c1:23:19:ae:94:93:67:15:77:85:6d:a3:56: e9:58:4a:91:c2:4b:ed:f2:84:0f:c6:05:f9:77:f2: ea:20:31:1f:fc:84:07:81:94:d0:ad:3c:96:6f:1d: df:45:b5:3a:9e:fa:71:36:4c:eb:77:62:7e:74:c6: 70:77:8f:bc:77:c8:33:d4:3e:fd:2f:3c:d5:95:a4: 6e:57:1b:be:1b:a9:c5:02:b9:76:a8:6b:fa:1a:61: 66:cf:a7:d5:79:1e:be:f2:40:7d:5e:4d:8d:fe:43: b0:db:6c:57:27:01:15:07:75:eb:73:15:44:a2:de: 21:29:90:7b:1c:30:83:2c:75:e8:a3:4b:b1:ab:f6: c5:13:fa:14:5d:f2:9e:5c:6b:a8:ff:8d:85:07:fe: 92:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:57:7E:74:F1:02:3B:A8:DE:05:04:09:21:30:E2:AF:98:00:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d5291b8b-39a0-3828-8968-405ce152d393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e9:a4:28:64:68:43:b8:59:b0:f7:4e:09:59:61:34:c5:b5: aa:62:d0:8f:3b:e4:91:64:79:3c:be:02:32:c1:5b:e4:26:66: cf:02:97:a2:e1:cb:4a:12:8a:d2:c5:2f:18:0c:5a:47:be:4e: 8f:2a:37:87:2d:57:55:39:2f:44:b5:65:de:79:fb:74:04:e5: 96:80:b5:dd:ac:3a:7f:35:f4:2b:b5:5d:e1:03:0d:ae:b1:36: 50:e6:79:9d:0b:85:d6:8f:32:ac:e2:69:51:61:0b:ca:96:60: ac:c3:6a:80:42:36:ef:1f:b2:c5:39:78:58:c3:dd:06:ef:0a: 6e:87:d3:00:ff:66:29:d3:0f:91:1f:9c:65:8a:f1:d1:ee:06: 9c:bd:2c:fc:37:8b:89:cf:60:3b:64:df:21:8d:78:88:ab:09: 5b:ab:84:27:f9:65:f6:58:17:f5:9a:d7:5c:22:64:98:cb:5d: 78:18:cd:3b:06:95:3f:34:28:7b:d8:d5:dc:6a:4c:3f:a4:53: 0b:f8:8b:cf:5b:54:ca:90:7f:0e:b5:94:0f:47:56:12:6e:b5: a1:27:78:a0:02:0c:93:29:58:53:00:d7:ec:72:9c:66:87:1e: 34:ab:3e:cb:08:35:2c:f3:08:02:a8:13:d4:16:4a:c2:91:09: 47:ea:b4:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijCeLF8lFtt9PyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk MTRhZWIzZWYtNzY3YS00MmU2LWIyMmMtMGFjNDViOTgxNTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDGdn7z0ZPZtDm6xObXvtooY+6Iftqc8oTz8 Tiz8Yykkm26fLiPX/i8SeJ4i6bMBTTWIAstcRrKBfVYO/GW9Ex7aSYnpGbNAJuTk mXZym76guRFm+9/kWKKofusYc/jL3xEsvWmCFEWDusEjGa6Uk2cVd4Vto1bpWEqR wkvt8oQPxgX5d/LqIDEf/IQHgZTQrTyWbx3fRbU6nvpxNkzrd2J+dMZwd4+8d8gz 1D79LzzVlaRuVxu+G6nFArl2qGv6GmFmz6fVeR6+8kB9Xk2N/kOw22xXJwEVB3Xr cxVEot4hKZB7HDCDLHXoo0uxq/bFE/oUXfKeXGuo/42FB/6SzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvGV3508QI7qN4FBAkhMOKvmADzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDUyOTFiOGItMzlhMC0z ODI4LTg5NjgtNDA1Y2UxNTJkMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRikEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHppChkaEO4WbD3TglZYTTFtapi0I875JFkeTy+AjLBW+QmZs8Cl6Lh y0oSitLFLxgMWke+To8qN4ctV1U5L0S1Zd55+3QE5ZaAtd2sOn819Cu1XeEDDa6x NlDmeZ0LhdaPMqziaVFhC8qWYKzDaoBCNu8fssU5eFjD3QbvCm6H0wD/ZinTD5Ef nGWK8dHuBpy9LPw3i4nPYDtk3yGNeIirCVurhCf5ZfZYF/Wa11wiZJjLXXgYzTsG lT80KHvY1dxqTD+kUwv4i89bVMqQfw61lA9HVhJutaEneKACDJMpWFMA1+xynGaH HjSrPssINSzzCAKoE9QWSsKRCUfqtF0= -----END CERTIFICATE-----Generated at Mon Nov 25 02:51:02 2024 by rpki-client on console-ams.rpki-client.org