$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa File: d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa (raw, json) Hash identifier: TzHAdYHQJSbCgcFaOBVuZNZW+Y1QLUJrEeppIQBkvaE= Subject key identifier: 3E:37:B8:06:29:19:3C:60:3E:82:75:CB:E1:F0:F5:1E:58:CB:EE:3C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581991EF1708F4887501980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:99:1e:f1:70:8f:48:87:50:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d154f93b-37c7-4bcf-91f8-051205847c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1f:ed:54:8c:fe:aa:7d:21:74:5a:4d:f9:9b: cd:a7:8b:65:96:e6:6e:34:20:04:4d:61:6a:3d:84: c5:32:ad:54:d1:3f:51:61:04:7c:1c:c2:69:f7:58: f6:be:ba:53:63:89:c8:f9:9d:97:06:f3:87:dc:a1: 8e:cf:b2:68:5d:e0:ff:31:bd:9f:8d:c4:ec:eb:9a: e4:93:b1:e1:ab:23:45:bd:60:62:5c:22:cd:8c:f7: 28:84:f6:72:84:fb:78:c9:a7:92:b5:6d:43:b5:ad: 91:05:e2:aa:de:6a:68:b1:fa:73:07:56:f9:02:2f: 68:a6:f5:0c:6d:9e:59:a4:7f:d0:59:2b:da:48:db: ce:a2:32:4a:66:44:9f:6f:29:42:af:67:a7:83:b8: a0:ab:70:82:57:4b:a7:2d:51:d2:d8:29:da:5d:15: 0d:bd:d9:1d:69:d6:3b:a7:f5:b3:36:78:c8:58:15: 62:13:db:3b:4e:e6:c1:30:d9:67:d7:68:03:e9:7e: dd:27:ac:b5:ff:5c:0f:09:3f:0f:74:18:ce:6a:a8: ca:51:03:b9:ca:d2:17:8b:4d:01:ff:00:4b:f3:53: 6d:0d:4f:6f:d2:b2:1e:34:d8:7f:75:d1:a0:67:3b: 45:74:1c:62:dd:dd:31:0a:f6:47:f3:91:74:28:81: f5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:37:B8:06:29:19:3C:60:3E:82:75:CB:E1:F0:F5:1E:58:CB:EE:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:43:2d:09:b4:7d:46:b2:2a:9b:16:fd:ed:61:33:c0:df:16: fd:86:a2:df:ab:cb:77:e9:c8:a6:73:7e:84:84:2a:3e:19:dc: eb:5f:7b:6c:25:a0:73:b5:cd:3b:93:7d:84:02:4f:66:3f:87: 73:2c:83:93:c8:30:ab:0a:e5:07:05:7f:d8:a8:89:5e:32:80: f3:e1:fa:c4:25:a5:1e:c7:40:7b:49:3e:b5:a4:a7:04:e4:6d: 6e:51:11:fa:7a:16:5e:91:0b:e2:d7:8b:2b:31:4d:8c:a4:0d: aa:9f:6d:05:b2:9c:a9:00:eb:c0:0a:6a:a1:26:ae:76:51:4b: a1:8f:64:e7:00:0e:3b:cf:80:bf:f8:50:d1:d0:e8:79:48:43: 44:ff:c4:d5:bc:60:dc:22:7f:99:78:eb:e8:7e:10:08:1a:65: 1d:65:c3:7a:e9:61:f1:ab:59:7b:6e:0f:df:de:af:c8:cc:59: ca:a8:f5:90:67:e4:c1:36:c5:ed:51:07:2e:32:8c:fe:25:44: 1b:83:ae:e6:9a:42:ab:b8:66:97:ac:f8:34:99:45:8b:ec:93: 85:52:77:55:9f:41:20:19:e0:bb:d8:ab:ba:40:c6:7c:91:97: 7d:53:ff:3e:c8:81:d1:df:5e:5f:41:e1:fe:4e:67:91:78:59: c2:6f:b6:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZke8XCPSIdQGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDE1NGY5M2ItMzdjNy00YmNmLTkxZjgtMDUxMjA1ODQ3YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh/tVIz+qn0hdFpN+ZvNp4tlluZuNCAETWFq PYTFMq1U0T9RYQR8HMJp91j2vrpTY4nI+Z2XBvOH3KGOz7JoXeD/Mb2fjcTs65rk k7HhqyNFvWBiXCLNjPcohPZyhPt4yaeStW1Dta2RBeKq3mposfpzB1b5Ai9opvUM bZ5ZpH/QWSvaSNvOojJKZkSfbylCr2eng7igq3CCV0unLVHS2CnaXRUNvdkdadY7 p/WzNnjIWBViE9s7TubBMNln12gD6X7dJ6y1/1wPCT8PdBjOaqjKUQO5ytIXi00B /wBL81NtDU9v0rIeNNh/ddGgZztFdBxi3d0xCvZH85F0KIH1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD43uAYpGTxgPoJ1y+Hw9R5Yy+48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY4OGI0NWItNDU4ZS0z YTdiLWIyOWEtZjBkZDNiOTY2ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVDLQm0fUayKpsW/e1hM8DfFv2Got+ry3fpyKZzfoSEKj4Z3Otfe2wl oHO1zTuTfYQCT2Y/h3Msg5PIMKsK5QcFf9ioiV4ygPPh+sQlpR7HQHtJPrWkpwTk bW5REfp6Fl6RC+LXiysxTYykDaqfbQWynKkA68AKaqEmrnZRS6GPZOcADjvPgL/4 UNHQ6HlIQ0T/xNW8YNwif5l46+h+EAgaZR1lw3rpYfGrWXtuD9/er8jMWcqo9ZBn 5ME2xe1RBy4yjP4lRBuDruaaQqu4Zpes+DSZRYvsk4VSd1WfQSAZ4LvYq7pAxnyR l31T/z7IgdHfXl9B4f5OZ5F4WcJvto0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:45 2025 by rpki-client