$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd9aaf9a-a9fd-35a6-9371-1459c46c00da.roa File: dd9aaf9a-a9fd-35a6-9371-1459c46c00da.roa (raw, json) Hash identifier: 82IlbctNxxzoZZWjI4NClu/PUH1m8gwQrqfBjxKGzmY= Subject key identifier: 4E:55:AD:CB:53:4C:2A:94:DD:DD:B4:95:90:47:E5:33:40:A0:B1:D0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581037193E4EA67A3843F60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd9aaf9a-a9fd-35a6-9371-1459c46c00da.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:03:71:93:e4:ea:67:a3:84:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7db4d001-af7a-4f8e-a1e6-fc03e57b427a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:70:58:97:8d:44:64:e1:86:81:7e:7a:8a:e9: 17:9d:4c:d6:16:cd:78:d9:98:98:88:5b:9e:d5:34: 5c:1f:9e:75:eb:86:51:9b:92:6b:58:6c:d0:ba:09: 82:8e:9b:16:dc:b3:6b:17:95:bc:86:b3:52:6f:a2: e8:7e:cb:dc:87:4b:c1:d3:b6:e0:be:5a:d0:be:55: e9:b2:8d:57:f2:9e:31:2a:9f:8b:6e:5d:93:35:75: 76:7d:36:b9:01:78:6f:31:14:f4:b1:8b:00:e0:00: 54:c0:8b:2d:da:3e:de:9c:0b:ec:ad:16:ba:30:0b: 86:1d:df:4f:f0:4b:a0:24:c3:5b:91:cd:e7:5d:47: a3:3a:b1:63:a1:fd:fc:a5:1d:89:67:8f:3d:2c:26: ea:ee:9e:92:7e:4d:38:24:38:39:8a:0a:70:4e:e1: f9:6f:4a:4a:92:d7:16:90:68:ef:be:d9:d8:55:67: bc:b0:e2:b5:2c:f9:74:94:24:d4:ed:15:fe:88:b3: f1:1a:76:a6:2f:83:e1:a0:20:5b:39:21:d8:58:7b: 25:33:8e:9e:71:43:3d:0f:9e:0b:06:11:84:18:05: 83:a6:31:de:d9:3b:ef:c8:01:a1:29:d9:c6:48:e9: 6d:2e:9b:61:23:93:a6:43:04:d3:36:3b:9d:59:81: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:55:AD:CB:53:4C:2A:94:DD:DD:B4:95:90:47:E5:33:40:A0:B1:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd9aaf9a-a9fd-35a6-9371-1459c46c00da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5d:dc:18:77:df:12:10:ca:a2:27:f5:8a:2f:fd:e2:03:e9: 2a:d5:11:a2:ca:56:7b:31:a2:9a:f3:c1:9b:98:fc:40:66:1e: 63:1b:61:d3:c7:03:ef:1f:4b:f5:5d:a6:a1:d6:f2:9b:a9:37: f0:ec:2f:d7:55:22:6c:d6:d3:46:8b:d9:24:69:24:df:9e:7c: d8:b8:0d:46:bb:2b:68:a6:6f:c8:5e:1a:25:9f:51:43:65:b4: 83:44:d6:4d:5f:76:76:35:8a:c6:71:c6:c4:fa:42:fb:14:40: 4f:b3:ad:1e:72:82:e5:37:0b:32:a5:ce:5b:75:b2:9f:cc:ac: 01:b0:19:71:72:ea:95:b5:d7:84:d9:72:10:da:c8:74:62:46: 99:9a:b6:82:f6:a0:63:be:c8:39:6d:2e:ac:2d:3f:99:1c:cd: 9b:00:12:54:56:47:ca:2f:6a:cb:99:af:ee:07:22:22:e7:45: 28:62:f9:89:8d:1a:e9:80:71:fc:68:4b:15:6b:82:ff:55:d3: f4:90:80:12:bf:99:65:c5:34:58:64:05:d0:4f:d7:43:c9:b8: e8:35:4b:ae:d8:3b:4b:04:b4:3c:9e:1c:9d:0f:60:3c:2d:3a: 8f:e7:f3:93:df:33:05:e5:33:35:b3:6a:e3:1a:61:92:fd:47: f3:5f:5d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQNxk+TqZ6OEP2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2RiNGQwMDEtYWY3YS00ZjhlLWExZTYtZmMwM2U1N2I0MjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHBYl41EZOGGgX56iukXnUzWFs142ZiYiFue 1TRcH55164ZRm5JrWGzQugmCjpsW3LNrF5W8hrNSb6Lofsvch0vB07bgvlrQvlXp so1X8p4xKp+Lbl2TNXV2fTa5AXhvMRT0sYsA4ABUwIst2j7enAvsrRa6MAuGHd9P 8EugJMNbkc3nXUejOrFjof38pR2JZ489LCbq7p6Sfk04JDg5igpwTuH5b0pKktcW kGjvvtnYVWe8sOK1LPl0lCTU7RX+iLPxGnamL4PhoCBbOSHYWHslM46ecUM9D54L BhGEGAWDpjHe2TvvyAGhKdnGSOltLpthI5OmQwTTNjudWYHP0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5VrctTTCqU3d20lZBH5TNAoLHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGQ5YWFmOWEtYTlmZC0z NWE2LTkzNzEtMTQ1OWM0NmMwMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRd3Bh33xIQyqIn9Yov/eID6SrVEaLKVnsxoprzwZuY/EBmHmMbYdPH A+8fS/VdpqHW8pupN/DsL9dVImzW00aL2SRpJN+efNi4DUa7K2imb8heGiWfUUNl tINE1k1fdnY1isZxxsT6QvsUQE+zrR5yguU3CzKlzlt1sp/MrAGwGXFy6pW114TZ chDayHRiRpmatoL2oGO+yDltLqwtP5kczZsAElRWR8ovasuZr+4HIiLnRShi+YmN GumAcfxoSxVrgv9V0/SQgBK/mWXFNFhkBdBP10PJuOg1S67YO0sEtDyeHJ0PYDwt Oo/n85PfMwXlMzWzauMaYZL9R/NfXZo= -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:22 2025 by rpki-client