$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2d6692d-830c-35e7-8cae-82c2fc4bb687.roa File: f2d6692d-830c-35e7-8cae-82c2fc4bb687.roa (raw, json) Hash identifier: 6wICnBe9JygxLPUIWg0nPRKJnywLMbOREIGc13OD8MI= Subject key identifier: 52:BE:51:90:95:EF:C1:C9:EC:AD:A9:AF:F2:C2:86:05:D4:16:39:41 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580FA9E23AA5FB5B4F03F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2d6692d-830c-35e7-8cae-82c2fc4bb687.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 70.41.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:fa:9e:23:aa:5f:b5:b4:f0:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5d1a7378-cdaf-4c9f-be80-e2c2f48da615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6d:13:14:61:13:ae:ec:1f:5e:16:fb:c8:fd: 27:61:dd:25:65:45:06:9a:ef:b6:6f:64:9b:6b:6e: 92:01:9b:93:80:05:b0:fe:91:9a:9e:31:da:6d:43: 29:a9:80:5a:44:a7:de:c5:6b:cc:06:91:33:49:b9: a8:42:41:82:05:74:50:18:ea:ee:a6:a4:70:9b:f2: ff:fa:0a:f7:24:82:70:88:d7:fb:a1:6a:7a:48:e1: 72:0c:33:9a:ea:61:55:ee:2f:79:68:d1:a2:59:c3: 75:51:04:32:74:2b:95:8d:ee:00:cd:06:4a:5b:97: da:e9:22:67:6c:3c:24:0a:ad:99:18:8e:dd:87:56: 03:8d:5e:a0:a1:59:30:7d:a6:5b:87:53:6b:85:a8: 25:42:de:a2:2e:99:d5:1f:96:18:19:be:76:8e:0b: f7:1c:6e:b9:eb:3e:c3:be:dc:f8:75:ab:80:d9:53: e7:34:3b:73:79:b4:3a:f3:50:81:d5:a5:06:ff:ae: 09:1d:a4:ac:8e:9a:f4:74:28:42:c5:80:b4:d6:f8: 32:85:2d:8b:a8:2f:6d:a7:1f:a8:72:56:0a:cf:8b: d3:94:a0:58:7d:95:51:b6:63:62:c8:f0:86:80:e9: 45:b5:cf:2a:9b:6c:c4:fc:7b:ac:dd:8f:22:c3:06: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BE:51:90:95:EF:C1:C9:EC:AD:A9:AF:F2:C2:86:05:D4:16:39:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2d6692d-830c-35e7-8cae-82c2fc4bb687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d3:da:69:eb:96:42:32:9e:2c:c4:c9:77:7b:76:af:73:27: 4e:f8:3f:32:62:a3:fe:2e:bf:d2:7a:df:c7:0e:8e:34:33:88: ad:be:f4:1f:0b:78:d8:73:21:6c:e5:df:82:0c:3d:df:ab:14: df:5f:e0:21:df:8f:0a:96:8a:e5:ce:62:ff:83:92:2c:f5:64: e5:9d:fb:c6:77:55:26:93:84:13:b9:d7:38:1b:83:ea:ae:e8: 6a:b4:62:3c:7f:61:7d:23:36:f1:42:6a:9f:bd:3f:4f:5d:f6: 8a:d9:5b:cd:3d:28:36:22:44:e4:cb:8e:e1:96:5e:29:d2:5c: e7:e5:39:43:fa:20:2d:9a:13:ab:db:d8:c2:30:2a:f4:f8:e3: 27:d3:ad:93:80:a8:7e:d9:47:40:7f:37:f1:18:bc:03:13:cc: 4e:f6:61:96:7e:df:f2:19:ec:0b:ea:4c:35:89:89:ec:2b:33: 31:06:b7:c6:f8:1e:c2:8f:cb:7f:b9:dc:fd:9a:d7:d8:a4:e1: 05:18:35:9b:41:56:dc:1c:cd:58:3d:b3:c3:dd:33:d8:dc:15: d9:0a:be:bb:ff:c9:d0:9a:f9:99:b2:ea:f8:f4:27:5f:8a:15: 1f:64:09:2e:27:0d:6a:71:49:e9:a6:e7:59:6d:f5:d0:cb:7e: 02:1d:ea:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPqeI6pftbTwP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWQxYTczNzgtY2RhZi00YzlmLWJlODAtZTJjMmY0OGRhNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm0TFGETruwfXhb7yP0nYd0lZUUGmu+2b2Sb a26SAZuTgAWw/pGanjHabUMpqYBaRKfexWvMBpEzSbmoQkGCBXRQGOrupqRwm/L/ +gr3JIJwiNf7oWp6SOFyDDOa6mFV7i95aNGiWcN1UQQydCuVje4AzQZKW5fa6SJn bDwkCq2ZGI7dh1YDjV6goVkwfaZbh1NrhaglQt6iLpnVH5YYGb52jgv3HG656z7D vtz4dauA2VPnNDtzebQ681CB1aUG/64JHaSsjpr0dChCxYC01vgyhS2LqC9tpx+o clYKz4vTlKBYfZVRtmNiyPCGgOlFtc8qm2zE/Hus3Y8iwwa/4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK+UZCV78HJ7K2pr/LChgXUFjlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjJkNjY5MmQtODMwYy0z NWU3LThjYWUtODJjMmZjNGJiNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLT2mnrlkIynizEyXd7dq9zJ074PzJio/4uv9J638cOjjQziK2+9B8L eNhzIWzl34IMPd+rFN9f4CHfjwqWiuXOYv+Dkiz1ZOWd+8Z3VSaThBO51zgbg+qu 6Gq0Yjx/YX0jNvFCap+9P09d9orZW809KDYiROTLjuGWXinSXOflOUP6IC2aE6vb 2MIwKvT44yfTrZOAqH7ZR0B/N/EYvAMTzE72YZZ+3/IZ7AvqTDWJiewrMzEGt8b4 HsKPy3+53P2a19ik4QUYNZtBVtwczVg9s8PdM9jcFdkKvrv/ydCa+Zmy6vj0J1+K FR9kCS4nDWpxSemm51lt9dDLfgId6mo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:55:02 2025 by rpki-client