$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de4709e8-4c72-3636-a934-4a2296d5f322.roa File: de4709e8-4c72-3636-a934-4a2296d5f322.roa (raw, json) Hash identifier: bYW4VN5ghjTuelQ1TlJa3aK46lkr7IZbjL+1GM7ce8U= Subject key identifier: A2:6D:6F:44:B8:07:81:31:3B:FD:51:EB:BD:D5:3A:18:E6:2E:11:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810A2BDEE99BDDAD363F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de4709e8-4c72-3636-a934-4a2296d5f322.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0a:2b:de:e9:9b:dd:ad:36:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cc032794-215c-4efc-b03a-5fca1e1cd557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a9:22:0b:67:4a:c4:dd:17:0e:90:98:b4:8c: 53:a4:d4:58:6d:78:c8:7e:67:4e:e2:7c:27:58:44: 25:b4:31:e2:48:b8:bd:24:f5:6b:62:5e:c7:f3:bd: ed:d2:19:3d:33:58:20:77:c3:a5:71:5d:10:12:1b: d7:b4:f5:ae:1b:2b:4a:bf:4d:46:7a:9d:77:47:a8: 93:7a:c5:4b:84:33:29:6e:18:a8:bc:21:9e:08:5a: 63:e8:bd:21:36:57:98:5c:7d:c1:b6:49:04:99:3a: 71:61:b9:96:01:5b:71:90:43:ac:34:20:75:de:2a: e8:cc:d1:d6:66:5d:05:07:60:e6:45:e9:b1:63:bf: ad:0c:d6:5e:4f:3e:c2:45:ec:d9:ff:c8:32:1f:33: ff:e4:0b:b4:46:ff:8a:9c:da:34:af:4a:80:0c:ed: c0:8c:e4:3b:98:c9:6a:f4:da:d3:85:4f:06:7e:65: 6a:b9:60:6f:20:e9:ad:3b:3d:2a:1a:60:bb:66:4d: 31:99:e4:33:0a:d7:e2:a9:ca:c7:ed:35:a8:b5:ab: 5e:bd:dd:dd:92:69:ca:30:51:45:48:f8:56:6e:f8: ab:0b:28:1b:e4:f9:36:08:f4:15:9f:a0:7f:05:eb: a6:a4:2b:44:3b:b9:61:2c:7e:00:89:fe:e9:df:66: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6D:6F:44:B8:07:81:31:3B:FD:51:EB:BD:D5:3A:18:E6:2E:11:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de4709e8-4c72-3636-a934-4a2296d5f322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:5b:06:78:fd:c3:5f:65:12:5e:9e:37:6c:53:f5:5b:1b:38: d2:a4:56:73:4a:df:72:51:5c:39:f2:ff:72:95:b5:37:f0:30: 00:5b:f2:91:51:e7:e6:5b:0a:30:15:c9:77:56:55:30:17:a4: d1:e2:09:0e:7a:53:97:33:ac:60:bf:01:27:c4:37:bf:67:af: 2f:09:8a:c0:e6:9b:55:08:2d:bd:64:8a:47:4d:7e:55:82:7f: a8:d2:c0:64:ba:1f:e2:9a:98:05:96:42:63:41:fb:dc:cf:17: 12:db:4b:34:9e:dd:eb:8d:68:84:08:67:e8:ea:6f:f7:0e:16: b5:af:0c:57:8c:39:be:49:c3:59:4b:b1:63:d1:0d:a1:16:91: a3:ee:93:fa:3a:7b:28:4b:0f:f8:8e:72:28:6f:2e:34:6c:cf: 80:42:9e:47:47:b5:85:24:44:96:b0:2a:61:e4:84:11:ff:3e: 9d:ae:c5:48:8a:35:b9:e1:64:2e:7e:82:50:7c:71:21:ab:85: 8d:3c:76:a0:c1:c4:46:78:bd:61:af:3d:f6:86:7f:fa:c5:82: 82:e9:9b:31:d7:be:f7:af:96:b0:75:6e:f4:c9:ce:27:8a:f4: 52:2a:3d:70:e4:5f:58:b1:e1:d5:3e:ba:f0:61:fc:c5:a3:fa: d6:30:e6:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQor3umb3a02P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2MwMzI3OTQtMjE1Yy00ZWZjLWIwM2EtNWZjYTFlMWNkNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2akiC2dKxN0XDpCYtIxTpNRYbXjIfmdO4nwn WEQltDHiSLi9JPVrYl7H873t0hk9M1ggd8OlcV0QEhvXtPWuGytKv01Gep13R6iT esVLhDMpbhiovCGeCFpj6L0hNleYXH3BtkkEmTpxYbmWAVtxkEOsNCB13irozNHW Zl0FB2DmRemxY7+tDNZeTz7CRezZ/8gyHzP/5Au0Rv+KnNo0r0qADO3AjOQ7mMlq 9NrThU8GfmVquWBvIOmtOz0qGmC7Zk0xmeQzCtfiqcrH7TWotatevd3dkmnKMFFF SPhWbvirCygb5Pk2CPQVn6B/BeumpCtEO7lhLH4Aif7p32aowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJtb0S4B4ExO/1R673VOhjmLhE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGU0NzA5ZTgtNGM3Mi0z NjM2LWE5MzQtNGEyMjk2ZDVmMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARim3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhbBnj9w19lEl6eN2xT9VsbONKkVnNK33JRXDny/3KVtTfwMABb8pFR 5+ZbCjAVyXdWVTAXpNHiCQ56U5czrGC/ASfEN79nry8JisDmm1UILb1kikdNflWC f6jSwGS6H+KamAWWQmNB+9zPFxLbSzSe3euNaIQIZ+jqb/cOFrWvDFeMOb5Jw1lL sWPRDaEWkaPuk/o6eyhLD/iOcihvLjRsz4BCnkdHtYUkRJawKmHkhBH/Pp2uxUiK NbnhZC5+glB8cSGrhY08dqDBxEZ4vWGvPfaGf/rFgoLpmzHXvvevlrB1bvTJzieK 9FIqPXDkX1ix4dU+uvBh/MWj+tYw5sg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:41 2025 by rpki-client