$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/130119ac-e2ef-3530-8627-f92f8fe44217.roa File: 130119ac-e2ef-3530-8627-f92f8fe44217.roa (raw, json) Hash identifier: feu8pAvJd3Go3vbztv15GeEzwlupHv+iG6EVvozL8Ns= Subject key identifier: 88:23:49:62:FC:9D:08:56:C5:A3:7B:BA:36:00:3E:CF:C7:14:81:D0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADB7057EC4BE9B03CF2C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/130119ac-e2ef-3530-8627-f92f8fe44217.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 70.41.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:db:70:57:ec:4b:e9:b0:3c:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fa2877a9-1b89-43bb-9571-4c8da8245ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3a:0e:d8:09:34:b9:73:e1:25:80:d8:76:02: ad:6c:b4:72:d7:ce:48:b3:a9:3d:e8:4e:8f:e9:b2: e2:26:54:17:92:14:07:00:8b:cb:c8:08:57:70:a1: f8:57:ae:2d:53:7b:68:4b:01:43:9b:6c:52:42:7a: ef:bf:ad:3c:79:ab:ee:46:84:e0:4c:3d:d8:c6:d8: 24:44:21:6f:2a:6c:fe:50:4e:c0:d9:6f:0c:ca:79: e9:7a:08:b9:d1:65:a2:ee:e9:1c:85:46:17:33:59: 0d:92:cc:7f:3d:0c:53:19:ce:2b:b9:45:ff:c1:9c: ac:4e:26:4b:29:f3:d6:7e:07:94:91:cf:ab:ae:72: 2e:86:b0:80:5d:53:9f:a5:af:72:5b:8a:16:3a:e4: 4a:a5:45:33:8b:96:97:82:d7:8b:c8:fb:41:1f:92: 39:00:94:b0:c0:88:b5:6b:a9:bc:d3:22:9c:e9:3f: 67:5c:c9:98:3a:70:bb:f8:87:05:74:fd:c0:9b:65: 84:f1:22:31:6c:6d:cb:f4:2d:6e:e9:43:89:1b:73: 75:da:bb:1e:1a:fb:ba:6b:ee:05:09:79:e9:fb:c6: f0:b0:94:e9:4e:2c:17:5b:06:f1:4a:8a:9a:1e:b6: 16:29:ce:47:4e:f7:53:33:29:ad:aa:c2:0c:d2:b4: ab:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:23:49:62:FC:9D:08:56:C5:A3:7B:BA:36:00:3E:CF:C7:14:81:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/130119ac-e2ef-3530-8627-f92f8fe44217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:58:75:90:a5:4f:c7:e6:7a:62:50:d2:57:59:89:54:48:c7: 72:97:a5:d0:2e:6e:e6:dc:60:bf:75:93:d6:ed:b0:6e:f8:5f: 6f:3d:fb:a3:a9:2c:fb:42:ea:d0:a9:65:95:99:a6:14:b9:e1: ab:72:41:61:d7:d2:b6:6b:3f:14:c5:64:a6:d1:d6:88:13:6a: a7:0b:ee:7a:2e:f7:f5:3e:96:05:0d:5e:3b:57:c0:92:37:b6: 6b:84:02:ea:c6:b1:e9:8d:b7:e3:69:ef:7c:c8:99:b0:e5:1e: e3:25:e7:75:14:cc:bb:89:f8:a7:ae:99:c5:40:49:83:8b:e7: a6:39:49:9f:c3:75:e6:35:fa:da:00:79:84:38:8a:29:0f:2c: ae:aa:69:83:bc:7e:79:84:b6:35:0a:9d:6a:ce:c1:eb:e4:b9: a8:79:ec:ed:4d:1f:59:04:de:0f:92:96:7b:21:51:16:58:0c: ba:88:44:6d:e4:2e:56:2f:c9:ca:44:e5:64:8f:d1:50:97:9f: 0b:a1:57:6e:80:1c:9e:45:48:0a:90:d6:77:fb:2d:ed:06:ab: 2c:6e:ac:5a:ea:6e:a9:75:41:0b:8e:5d:91:01:25:40:b4:93: c4:19:15:ea:39:fc:e0:56:64:54:8d:0d:9b:af:e5:2e:09:32: be:f9:c1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuttwV+xL6bA88sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmEyODc3YTktMWI4OS00M2JiLTk1NzEtNGM4ZGE4MjQ1Y2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzoO2Ak0uXPhJYDYdgKtbLRy185Is6k96E6P 6bLiJlQXkhQHAIvLyAhXcKH4V64tU3toSwFDm2xSQnrvv608eavuRoTgTD3Yxtgk RCFvKmz+UE7A2W8Mynnpegi50WWi7ukchUYXM1kNksx/PQxTGc4ruUX/wZysTiZL KfPWfgeUkc+rrnIuhrCAXVOfpa9yW4oWOuRKpUUzi5aXgteLyPtBH5I5AJSwwIi1 a6m80yKc6T9nXMmYOnC7+IcFdP3Am2WE8SIxbG3L9C1u6UOJG3N12rseGvu6a+4F CXnp+8bwsJTpTiwXWwbxSoqaHrYWKc5HTvdTMymtqsIM0rSrgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgjSWL8nQhWxaN7ujYAPs/HFIHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTMwMTE5YWMtZTJlZi0z NTMwLTg2MjctZjkyZjhmZTQ0MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpYdZClT8fmemJQ0ldZiVRIx3KXpdAububcYL91k9btsG74X289+6Op LPtC6tCpZZWZphS54atyQWHX0rZrPxTFZKbR1ogTaqcL7nou9/U+lgUNXjtXwJI3 tmuEAurGsemNt+Np73zImbDlHuMl53UUzLuJ+KeumcVASYOL56Y5SZ/DdeY1+toA eYQ4iikPLK6qaYO8fnmEtjUKnWrOwevkuah57O1NH1kE3g+SlnshURZYDLqIRG3k LlYvycpE5WSP0VCXnwuhV26AHJ5FSAqQ1nf7Le0GqyxurFrqbql1QQuOXZEBJUC0 k8QZFeo5/OBWZFSNDZuv5S4JMr75wQ0= -----END CERTIFICATE-----Generated at Tue Apr 29 07:48:59 2025 by rpki-client