$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc38943b-646d-3d87-8d19-7a4e376a9916.roa File: dc38943b-646d-3d87-8d19-7a4e376a9916.roa (raw, json) Hash identifier: cNX6zw1ewSdPfLN0QP7QfpnGJludAxAgM5KzHDzm0+0= Subject key identifier: 7F:F4:7B:CC:46:CC:F4:5D:83:62:89:EF:FC:E5:C5:AD:F3:93:73:33 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580FAADDA947920FFCDDE00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc38943b-646d-3d87-8d19-7a4e376a9916.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 70.41.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:fa:ad:da:94:79:20:ff:cd:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=83e2aa0f-a809-4ba2-a7ba-14e7673847dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:0e:4d:02:1b:c2:44:f9:e8:04:5a:33:cf: 28:eb:34:1c:39:43:cf:36:4a:a6:7c:7d:b5:2a:59: bc:60:66:72:f6:b7:6e:cd:5c:1b:7e:e6:68:11:52: 9d:b3:c1:8d:57:ba:b6:0f:0f:e2:75:ef:00:f9:80: c4:34:de:9b:36:15:ee:f5:80:77:74:b2:12:f5:9f: e9:11:bd:bc:76:d9:c3:b7:96:13:b1:d9:86:4f:43: 6c:4c:69:bd:ad:05:b2:b1:f0:8f:9a:47:20:37:6a: 67:b0:db:99:87:90:5e:6d:91:77:9f:77:14:02:d9: 07:3f:4a:b0:1b:3a:4b:5f:a6:b2:1b:ca:b1:e2:3f: af:38:bf:25:f4:6c:0e:1a:f7:2a:02:9a:94:8c:76: 29:4d:69:c2:5f:8a:5f:13:a3:8e:a2:67:1a:a8:54: 7d:c2:9a:8f:44:e0:59:8a:7c:22:af:84:b0:5f:9f: 51:63:e8:9f:57:88:c9:89:e3:d4:46:77:55:e3:3a: 16:67:a2:ed:16:69:26:be:56:ab:5e:da:8c:ba:fc: e9:2c:ed:f0:e0:03:ea:39:ad:71:97:f7:02:8d:fc: c7:00:71:9d:b0:2f:19:13:cc:ba:dc:a1:83:f8:90: 70:3d:f2:cb:c8:00:47:77:a2:01:fa:04:1c:00:e8: b4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F4:7B:CC:46:CC:F4:5D:83:62:89:EF:FC:E5:C5:AD:F3:93:73:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc38943b-646d-3d87-8d19-7a4e376a9916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1e:31:0b:3d:f9:ac:95:00:c7:48:63:98:ae:3e:7e:ec:17: 67:d8:05:ad:cf:f6:3a:45:37:d7:e2:a7:c0:91:8a:16:c7:8c: 9d:65:da:1c:1c:eb:4c:cf:53:08:34:54:4e:82:47:35:c3:03: 74:e3:9f:56:1b:b0:7d:e7:79:24:9a:a2:34:56:c4:d0:5c:20: 22:18:86:18:26:b2:33:d3:54:fd:6d:13:37:da:b3:b1:fd:e2: 1a:1e:36:0d:ad:25:a0:ca:b3:e4:63:4e:2d:e9:f8:17:df:35: a5:8b:b6:ca:ab:a1:23:9c:58:47:cf:b8:74:92:a3:f3:2e:9c: 7b:d7:0b:cc:7a:9f:2c:ad:d8:88:b1:b1:67:93:e9:c6:67:bd: 69:9a:68:ed:0a:a8:a8:c9:c1:bc:35:e0:a5:a6:9f:3c:a4:0d: 39:9c:1e:d9:84:c1:91:23:42:b1:95:73:58:95:21:9f:88:c1: 9b:43:e8:66:be:78:ef:0e:cb:55:c2:32:d6:70:08:2f:98:46: c6:a0:61:b0:38:39:70:da:8a:9d:12:68:08:e4:aa:1c:c0:75: aa:cd:a8:5a:b7:f5:ae:52:43:ab:99:7b:90:3f:11:f8:aa:3b: fe:26:4c:27:c2:cf:1d:a2:b5:5c:46:e6:d9:45:95:1e:55:77: cb:09:c8:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPqt2pR5IP/N3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODNlMmFhMGYtYTgwOS00YmEyLWE3YmEtMTRlNzY3Mzg0N2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvYOTQIbwkT56ARaM88o6zQcOUPPNkqmfH21 Klm8YGZy9rduzVwbfuZoEVKds8GNV7q2Dw/ide8A+YDENN6bNhXu9YB3dLIS9Z/p Eb28dtnDt5YTsdmGT0NsTGm9rQWysfCPmkcgN2pnsNuZh5BebZF3n3cUAtkHP0qw GzpLX6ayG8qx4j+vOL8l9GwOGvcqApqUjHYpTWnCX4pfE6OOomcaqFR9wpqPROBZ inwir4SwX59RY+ifV4jJiePURndV4zoWZ6LtFmkmvlarXtqMuvzpLO3w4APqOa1x l/cCjfzHAHGdsC8ZE8y63KGD+JBwPfLLyABHd6IB+gQcAOi0EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/0e8xGzPRdg2KJ7/zlxa3zk3MzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGMzODk0M2ItNjQ2ZC0z ZDg3LThkMTktN2E0ZTM3NmE5OTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEeMQs9+ayVAMdIY5iuPn7sF2fYBa3P9jpFN9fip8CRihbHjJ1l2hwc 60zPUwg0VE6CRzXDA3Tjn1YbsH3neSSaojRWxNBcICIYhhgmsjPTVP1tEzfas7H9 4hoeNg2tJaDKs+RjTi3p+BffNaWLtsqroSOcWEfPuHSSo/MunHvXC8x6nyyt2Iix sWeT6cZnvWmaaO0KqKjJwbw14KWmnzykDTmcHtmEwZEjQrGVc1iVIZ+IwZtD6Ga+ eO8Oy1XCMtZwCC+YRsagYbA4OXDaip0SaAjkqhzAdarNqFq39a5SQ6uZe5A/Efiq O/4mTCfCzx2itVxG5tlFlR5Vd8sJyCA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:39 2025 by rpki-client