$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f034a254-934f-3274-9970-4bf0cd601116.roa File: f034a254-934f-3274-9970-4bf0cd601116.roa (raw, json) Hash identifier: QK3hw1MjIqzthKrAsG+PyZAQTIovIYpt31RwlZRG4E8= Subject key identifier: 9A:82:6E:72:07:30:28:D7:E3:0C:49:69:49:B2:47:E0:7B:1C:7F:7F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810966818FF930365504A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f034a254-934f-3274-9970-4bf0cd601116.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 70.41.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:09:66:81:8f:f9:30:36:55:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a42211a0-998d-436d-840c-0117bb36593b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9c:2f:c4:aa:2c:71:55:38:be:e0:ee:d1:5d: 5f:f5:6d:f6:40:37:1c:ae:2c:f9:4b:2c:7b:be:4f: 42:4f:de:63:ec:16:e7:06:27:29:48:81:25:f6:f2: dd:39:fe:08:a7:fc:85:09:06:d6:17:44:10:64:e5: a9:21:e9:ee:a6:63:8b:02:12:23:1a:10:4e:a4:f8: ea:20:06:1a:f5:af:02:24:94:57:66:4a:0e:02:85: 38:36:fc:f2:dc:bd:30:f5:7b:5e:5b:c4:7e:ee:bb: bc:07:77:44:fc:72:0e:58:db:aa:e1:9b:ee:c7:1a: b5:84:50:27:15:81:89:3d:16:5f:9e:0a:27:97:19: 95:fe:9a:73:04:49:16:ee:be:5a:82:ce:46:86:19: b0:72:33:48:48:62:35:2a:ce:f0:30:1a:16:c3:68: c2:1b:de:11:08:d2:40:2f:82:d7:8c:fc:b5:00:7d: 17:87:06:25:bb:36:e7:10:7e:af:bc:62:fe:3c:58: 9a:91:d3:cd:b7:2f:e8:07:c5:ad:59:46:5e:a7:2e: 0a:ab:48:fe:ea:f5:d1:92:a5:84:e5:90:01:4c:79: b9:d3:47:60:d7:e7:42:e2:77:b7:85:bf:0f:7f:75: 9f:73:36:ba:d6:e3:58:ee:3a:0d:e4:40:39:4f:23: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:82:6E:72:07:30:28:D7:E3:0C:49:69:49:B2:47:E0:7B:1C:7F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f034a254-934f-3274-9970-4bf0cd601116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ab:df:b9:96:f1:e6:bd:d6:55:39:98:bf:50:55:ee:d0:1b: a7:8e:3e:12:2a:14:4e:aa:30:5a:50:f5:0d:94:bb:53:ea:28: 8c:06:35:f9:93:4b:4a:2a:78:7f:97:c1:1f:15:91:48:69:e9: b4:d9:ae:4c:ae:4a:de:65:8c:4a:fc:59:8e:5a:b2:d1:b3:7e: b1:7c:71:ac:1d:7e:9f:06:4f:cc:b7:35:b6:56:3c:71:b1:9b: a2:13:82:77:f9:3f:37:e4:3b:c9:02:68:ae:fa:c1:5c:0b:f9: 00:f7:82:b4:52:3c:6b:03:a1:21:69:54:79:ea:a5:0b:b9:16: cb:a2:f9:a3:28:a9:6c:c0:a0:c1:b5:30:cb:c5:aa:af:f0:29: 3e:cf:91:40:0c:15:27:a8:b3:94:6e:6c:32:6c:0a:a6:13:66: 83:cb:08:a8:0b:c0:21:8f:7e:f2:e0:37:2c:97:d0:e6:f4:1a: 8c:ac:8a:85:6e:28:f9:30:e0:58:48:11:72:6a:d4:23:13:b2: 61:cc:17:9a:60:51:fb:57:f2:db:2c:e8:ab:1d:c6:ee:23:42: 9b:2b:1d:9d:96:c8:99:38:09:24:e4:29:21:df:98:4e:63:53: eb:1c:bd:86:11:6a:d4:1a:ea:c3:10:0b:93:37:cc:21:0f:0d: 61:3a:23:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQlmgY/5MDZVBKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTQyMjExYTAtOTk4ZC00MzZkLTg0MGMtMDExN2JiMzY1OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZwvxKoscVU4vuDu0V1f9W32QDccriz5Syx7 vk9CT95j7BbnBicpSIEl9vLdOf4Ip/yFCQbWF0QQZOWpIenupmOLAhIjGhBOpPjq IAYa9a8CJJRXZkoOAoU4Nvzy3L0w9XteW8R+7ru8B3dE/HIOWNuq4Zvuxxq1hFAn FYGJPRZfngonlxmV/ppzBEkW7r5ags5GhhmwcjNISGI1Ks7wMBoWw2jCG94RCNJA L4LXjPy1AH0XhwYluzbnEH6vvGL+PFiakdPNty/oB8WtWUZepy4Kq0j+6vXRkqWE 5ZABTHm500dg1+dC4ne3hb8Pf3Wfcza61uNY7joN5EA5TyNwKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqCbnIHMCjX4wxJaUmyR+B7HH9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjAzNGEyNTQtOTM0Zi0z Mjc0LTk5NzAtNGJmMGNkNjAxMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJar37mW8ea91lU5mL9QVe7QG6eOPhIqFE6qMFpQ9Q2Uu1PqKIwGNfmT S0oqeH+XwR8VkUhp6bTZrkyuSt5ljEr8WY5astGzfrF8cawdfp8GT8y3NbZWPHGx m6ITgnf5PzfkO8kCaK76wVwL+QD3grRSPGsDoSFpVHnqpQu5Fsui+aMoqWzAoMG1 MMvFqq/wKT7PkUAMFSeos5RubDJsCqYTZoPLCKgLwCGPfvLgNyyX0Ob0GoysioVu KPkw4FhIEXJq1CMTsmHMF5pgUftX8tss6Ksdxu4jQpsrHZ2WyJk4CSTkKSHfmE5j U+scvYYRatQa6sMQC5M3zCEPDWE6IxU= -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:14 2025 by rpki-client