$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb373ad7-d7d1-390a-a62e-87f009262355.roa File: fb373ad7-d7d1-390a-a62e-87f009262355.roa (raw, json) Hash identifier: sY4hzeqdqeqWSvIJFgRn4CDiEv7LMYh8Yzxi917VkQA= Subject key identifier: 16:26:62:69:88:B4:96:5F:F2:4E:9B:26:0A:C5:5E:EE:8B:F3:47:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847EE8A32C1B36417FB4253A140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb373ad7-d7d1-390a-a62e-87f009262355.roa Signing time: Tue 19 Nov 2024 14:00:39 +0000 ROA not before: Tue 19 Nov 2024 14:00:39 +0000 ROA not after: Mon 17 Feb 2025 14:00:39 +0000 asID: 40306 IP address blocks: 70.41.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ee:8a:32:c1:b3:64:17:fb:42:53:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 19 14:00:39 2024 GMT Not After : Feb 17 14:00:39 2025 GMT Subject: CN=6f10f9eb-49ac-42ca-80c1-b8da008455fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:73:28:c3:41:29:07:09:f8:8d:3c:35:6d: c9:ea:86:75:15:e4:06:95:cb:cc:7b:82:d4:c8:49: c5:8e:04:31:b3:9d:0a:c2:02:07:b8:f1:50:77:68: 06:d4:6a:ef:1e:ec:a9:62:0d:ba:39:16:7e:d0:9d: af:8c:63:ee:d1:ac:70:c5:f0:40:b1:3b:b3:35:c5: a1:6b:a7:d3:9b:61:3a:e4:e2:20:83:a2:4c:83:62: 0c:a4:30:e6:23:73:f8:d6:4a:f2:95:f3:b5:c6:16: 22:1a:29:1a:a3:86:1c:a1:24:df:93:75:5b:b9:b2: 6e:47:af:ad:66:17:a6:fc:da:8c:32:21:1d:01:24: a3:7d:db:08:db:2c:0c:9b:32:d4:ec:50:f1:78:b6: ba:19:a6:46:11:3a:1a:42:ce:81:b5:24:98:22:d0: 9e:1d:13:f7:d8:65:7c:aa:7a:27:20:e9:a7:2e:5e: a0:48:b2:a5:e9:dd:12:bf:df:92:f5:59:f8:74:3b: f5:57:46:66:62:a1:44:2e:59:6b:75:94:4f:fc:ba: ba:3b:45:db:0f:7e:e8:27:0b:31:d3:24:45:0f:d6: 0e:d2:9d:a2:70:6e:d4:68:06:0f:2f:c0:1f:f6:c7: b2:75:f0:71:3d:cc:15:b7:98:91:52:03:50:96:f1: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:26:62:69:88:B4:96:5F:F2:4E:9B:26:0A:C5:5E:EE:8B:F3:47:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb373ad7-d7d1-390a-a62e-87f009262355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d9:14:34:c2:05:17:4f:c1:c0:18:92:a6:76:62:ec:c2:3d: db:4d:46:40:c6:cc:a5:6b:b5:7e:13:cd:76:24:61:c1:49:b6: 89:61:06:99:8d:ea:3e:bb:61:6a:61:50:b3:b2:20:23:69:fe: dd:9d:1f:9b:5b:c4:12:fa:56:5a:c4:dc:37:a0:f7:4d:5d:4d: a5:65:4a:ea:b7:26:d7:cb:2d:82:a1:cb:a4:78:4e:48:94:ba: 1e:ef:f1:72:2b:52:20:ba:c9:2d:73:01:0e:69:eb:93:42:99: fa:e2:4b:a8:8c:81:6b:52:7e:1c:e5:6c:a1:82:07:65:d8:28: fb:a0:48:9d:62:fa:d8:b5:77:3a:75:4a:61:bc:b5:31:b2:18: 25:a3:81:23:cf:56:c6:65:17:0e:fa:87:46:ca:56:b3:6b:37: ac:ad:57:04:02:f5:40:3b:85:68:ee:d5:2c:e7:30:e7:d9:25: 02:14:c9:85:a3:d9:16:0e:d5:a3:8b:b8:52:e3:38:28:0e:1e: 1e:c8:68:83:8a:ed:20:86:9d:ff:17:e5:bd:ef:2f:79:59:13: 35:d9:2b:05:7d:7f:57:6e:b7:fb:b1:2b:b2:ed:49:d4:9d:b5: 79:48:fa:a8:06:6a:1a:e3:45:f7:c1:74:ac:54:27:e2:64:a4: 3f:34:cb:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfuijLBs2QX+0JToUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExOTE0MDAzOVoXDTI1MDIxNzE0MDAzOVowLzEtMCsGA1UEAxMk NmYxMGY5ZWItNDlhYy00MmNhLTgwYzEtYjhkYTAwODQ1NWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPVzKMNBKQcJ+I08NW3J6oZ1FeQGlcvMe4LU yEnFjgQxs50KwgIHuPFQd2gG1GrvHuypYg26ORZ+0J2vjGPu0axwxfBAsTuzNcWh a6fTm2E65OIgg6JMg2IMpDDmI3P41krylfO1xhYiGikao4YcoSTfk3VbubJuR6+t Zhem/NqMMiEdASSjfdsI2ywMmzLU7FDxeLa6GaZGEToaQs6BtSSYItCeHRP32GV8 qnonIOmnLl6gSLKl6d0Sv9+S9Vn4dDv1V0ZmYqFELllrdZRP/Lq6O0XbD37oJwsx 0yRFD9YO0p2icG7UaAYPL8Af9seydfBxPcwVt5iRUgNQlvGEOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYmYmmItJZf8k6bJgrFXu6L80dTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmIzNzNhZDctZDdkMS0z OTBhLWE2MmUtODdmMDA5MjYyMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLZFDTCBRdPwcAYkqZ2YuzCPdtNRkDGzKVrtX4TzXYkYcFJtolhBpmN 6j67YWphULOyICNp/t2dH5tbxBL6VlrE3Deg901dTaVlSuq3JtfLLYKhy6R4TkiU uh7v8XIrUiC6yS1zAQ5p65NCmfriS6iMgWtSfhzlbKGCB2XYKPugSJ1i+ti1dzp1 SmG8tTGyGCWjgSPPVsZlFw76h0bKVrNrN6ytVwQC9UA7hWju1SznMOfZJQIUyYWj 2RYO1aOLuFLjOCgOHh7IaIOK7SCGnf8X5b3vL3lZEzXZKwV9f1dut/uxK7LtSdSd tXlI+qgGahrjRffBdKxUJ+JkpD80yyI= -----END CERTIFICATE-----Generated at Fri Nov 22 01:37:18 2024 by rpki-client on console-ams.rpki-client.org