$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/29905d1b-b2ec-374e-8a34-ae357a2d648d.roa File: 29905d1b-b2ec-374e-8a34-ae357a2d648d.roa (raw, json) Hash identifier: YsftdjXg2JjebLPhB9/TES6BBDwvjN4vlLBN47HHmOg= Subject key identifier: D8:14:88:3C:12:85:00:62:E5:52:A0:ED:E1:B0:91:16:86:52:71:8E Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285848EC967F675EAAAFD5CF2FF580 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/29905d1b-b2ec-374e-8a34-ae357a2d648d.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 42 IP address blocks: 70.40.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:7f:67:5e:aa:af:d5:cf:2f:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=9bc0686c-7299-410b-a84c-7dca82449499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:9f:f6:aa:17:14:ab:a1:62:36:a3:e7:26: 4a:b6:f1:04:95:ff:c3:e9:aa:ba:a9:13:5c:8f:3f: 0b:77:3d:e3:47:ea:55:37:3e:34:ee:ea:bd:16:b3: ce:4a:40:24:01:76:ad:9c:d9:25:c1:c1:5d:27:eb: 0b:db:af:b4:50:ae:79:6d:10:67:82:93:13:6c:eb: 11:6d:e0:c6:03:33:c1:15:49:0f:90:95:15:16:ef: 05:a8:ba:de:7c:8c:f1:3f:ed:1b:66:3f:52:f3:73: 66:54:f5:12:82:ac:98:49:af:d9:d9:bd:b6:e0:e4: 8e:b7:95:ba:c2:eb:b6:7e:4e:92:a7:4d:c8:84:53: be:89:bd:c2:4a:8d:f5:c2:bf:83:9d:de:f6:5c:f1: a6:1c:de:ca:0b:f0:5a:cc:3a:dd:7d:ca:5d:7e:32: 72:d3:85:02:c4:0d:ff:f4:73:a3:c1:9f:3b:ba:3c: 38:14:53:ba:96:be:fd:b1:4b:80:10:10:97:f4:de: ae:4c:4b:70:a9:e1:98:89:b8:51:45:48:31:9f:15: a2:0c:95:ef:c1:92:6d:f8:42:c8:0f:64:83:96:27: 92:d4:b2:f0:a1:6e:81:a3:9e:38:4a:0e:30:8e:65: 89:38:69:96:32:22:7b:03:97:36:e4:e5:67:7c:36: 8b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:14:88:3C:12:85:00:62:E5:52:A0:ED:E1:B0:91:16:86:52:71:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/29905d1b-b2ec-374e-8a34-ae357a2d648d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 70.40.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b9:bf:9a:81:a5:95:bc:3e:8e:19:c2:c3:4a:90:0d:94:30: 15:ed:0c:da:ab:10:f8:22:14:8a:3b:39:45:b8:2f:8c:09:f5: 1b:85:cd:e8:9b:e0:cb:61:0a:fd:93:0a:83:89:78:ea:44:63: c2:af:14:23:1f:83:25:d2:13:cf:cd:4b:49:bc:19:b0:a1:59: 25:d2:c2:64:5b:b1:4f:a0:f1:40:28:11:83:a4:fa:e9:68:88: b8:5c:a3:45:8b:b9:3c:e1:da:3f:4a:de:4e:71:99:ab:bc:eb: 8c:57:d6:4a:f9:9c:30:a0:f0:21:c0:5f:8b:2d:b2:bf:63:de: a1:37:7c:ba:8e:54:58:96:33:7f:27:3b:49:12:ef:80:ec:b3: a1:77:14:5e:f8:45:7f:a3:43:48:1e:be:a6:01:d3:13:78:98: ae:02:e6:b4:77:95:d7:7a:d3:85:8f:98:20:f4:a8:97:bc:29: 00:78:80:0a:cd:bb:aa:d8:66:7b:f2:61:5c:d3:29:a5:7b:ca: 99:e6:4d:51:c3:40:44:a0:fd:c1:c0:bf:41:d9:88:68:01:c3: f3:49:c1:ba:33:08:da:f3:d5:e3:fc:25:30:a3:31:c0:1b:32: f4:c2:5e:6a:14:f2:09:03:c5:26:b4:00:f7:92:d3:43:03:c8: 8f:0c:d3:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsln9nXqqv1c8v9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk OWJjMDY4NmMtNzI5OS00MTBiLWE4NGMtN2RjYTgyNDQ5NDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyKf9qoXFKuhYjaj5yZKtvEElf/D6aq6qRNc jz8Ldz3jR+pVNz407uq9FrPOSkAkAXatnNklwcFdJ+sL26+0UK55bRBngpMTbOsR beDGAzPBFUkPkJUVFu8FqLrefIzxP+0bZj9S83NmVPUSgqyYSa/Z2b224OSOt5W6 wuu2fk6Sp03IhFO+ib3CSo31wr+Dnd72XPGmHN7KC/BazDrdfcpdfjJy04UCxA3/ 9HOjwZ87ujw4FFO6lr79sUuAEBCX9N6uTEtwqeGYibhRRUgxnxWiDJXvwZJt+ELI D2SDlieS1LLwoW6Bo544Sg4wjmWJOGmWMiJ7A5c25OVnfDaLSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgUiDwShQBi5VKg7eGwkRaGUnGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMjk5MDVkMWItYjJlYy0z NzRlLThhMzQtYWUzNTdhMmQ2NDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRigAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK5v5qBpZW8Po4ZwsNKkA2UMBXtDNqrEPgiFIo7OUW4L4wJ9RuFzeib 4MthCv2TCoOJeOpEY8KvFCMfgyXSE8/NS0m8GbChWSXSwmRbsU+g8UAoEYOk+ulo iLhco0WLuTzh2j9K3k5xmau864xX1kr5nDCg8CHAX4stsr9j3qE3fLqOVFiWM38n O0kS74Dss6F3FF74RX+jQ0gevqYB0xN4mK4C5rR3ldd604WPmCD0qJe8KQB4gArN u6rYZnvyYVzTKaV7ypnmTVHDQESg/cHAv0HZiGgBw/NJwbozCNrz1eP8JTCjMcAb MvTCXmoU8gkDxSa0APeS00MDyI8M014= -----END CERTIFICATE-----Generated at Fri Mar 14 13:18:46 2025 by rpki-client