$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a9ea856-bbaf-3c9b-9a0c-a79a5d73b906.roa File: 1a9ea856-bbaf-3c9b-9a0c-a79a5d73b906.roa (raw, json) Hash identifier: 9XgQgxu9aYLKVTcSb4n1y4mcW4GtzRlLa+5+A9E5t5g= Subject key identifier: EA:00:DB:B1:CD:C0:57:AF:72:EC:DE:7B:53:FF:10:8B:34:B6:D9:D6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE53374DD64AE2CEF6C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a9ea856-bbaf-3c9b-9a0c-a79a5d73b906.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e5:33:74:dd:64:ae:2c:ef:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0a7ac5d7-0985-492a-acbb-705d2a1c24eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:de:0d:04:da:62:3d:d7:82:af:6e:b8:b9: 49:69:92:76:0c:f9:a2:0f:be:60:ac:d8:8b:97:c4: 46:6b:af:5d:e3:83:4d:28:1a:6e:9f:2c:fa:3a:d9: cd:9e:11:e1:21:43:20:90:d8:74:ee:f7:b8:41:4a: 9c:f6:94:e9:b1:c6:49:ea:4d:ba:58:91:d2:cd:3d: f8:59:96:ed:34:70:d6:a6:da:05:34:59:4c:12:fb: b6:15:91:13:db:1b:7d:46:26:76:4e:b1:a2:9f:3d: 28:67:b4:94:39:22:4a:a3:d5:49:a8:37:b4:0c:e1: 3c:e5:d3:85:db:5a:bc:7b:39:48:bd:29:04:3d:ad: 5b:05:c6:79:7f:dd:0a:4d:fa:64:a3:ad:e9:86:27: cf:73:59:fc:72:8a:e6:ce:96:55:f8:4d:30:65:27: 7a:b6:ee:e6:fd:0d:d0:be:8b:79:15:b6:1a:05:2d: 46:a6:6a:07:c8:2b:94:cf:a4:87:da:4e:c6:7f:c9: a1:99:5d:63:65:fd:aa:ef:04:c0:85:26:8d:37:1f: 94:4e:0d:f6:2f:1d:5a:34:05:66:1b:15:c1:e5:99: 7b:ae:bf:e9:3d:55:39:52:f2:5e:af:7d:dc:fc:3a: 69:2d:ed:f7:cf:12:fa:95:1a:08:19:4f:54:b7:0f: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:00:DB:B1:CD:C0:57:AF:72:EC:DE:7B:53:FF:10:8B:34:B6:D9:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a9ea856-bbaf-3c9b-9a0c-a79a5d73b906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7b:05:34:eb:7f:d4:c0:4f:3f:e4:99:35:fd:74:eb:21:50: 23:b6:45:e4:a4:81:73:d6:e9:8a:b5:ff:02:51:db:cf:6a:ed: ed:7f:ab:ab:6e:f6:10:6a:9e:30:a6:54:22:df:b3:ec:45:64: b3:83:fc:14:37:47:d7:93:f6:16:8d:af:fa:6f:d5:b5:5b:c1: 4d:14:07:11:1c:8f:63:91:5c:40:e6:a8:1c:e1:c5:75:11:24: fc:59:d4:f4:1c:e8:70:73:00:f5:d3:83:c4:23:e0:06:2e:38: 06:01:e1:19:dd:63:30:3b:65:5a:6c:52:25:e7:99:9c:9d:71: df:e1:62:fb:9c:13:fc:08:9d:7e:a5:56:c7:af:c3:8f:68:b7: cc:0b:39:d6:68:a8:62:9d:71:08:47:15:d2:33:75:35:ed:d6: 19:ff:7f:c0:3f:28:17:d8:4b:e8:79:89:6a:6f:fe:86:64:35: aa:df:4d:4f:77:77:ef:01:cc:bb:a4:fd:b7:31:60:c9:7b:f6: 8e:5b:92:b6:76:e1:0b:66:f3:7c:05:98:ed:4d:11:a7:09:96: d8:ea:2b:bf:09:68:33:d4:c8:94:30:de:a1:99:28:a1:00:f3: 45:0a:78:28:a2:15:3c:e5:e5:30:8f:fa:4d:90:83:4f:9e:aa: 13:b8:f8:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuUzdN1krizvbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGE3YWM1ZDctMDk4NS00OTJhLWFjYmItNzA1ZDJhMWMyNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHzeDQTaYj3Xgq9uuLlJaZJ2DPmiD75grNiL l8RGa69d44NNKBpunyz6OtnNnhHhIUMgkNh07ve4QUqc9pTpscZJ6k26WJHSzT34 WZbtNHDWptoFNFlMEvu2FZET2xt9RiZ2TrGinz0oZ7SUOSJKo9VJqDe0DOE85dOF 21q8ezlIvSkEPa1bBcZ5f90KTfpko63phifPc1n8cormzpZV+E0wZSd6tu7m/Q3Q vot5FbYaBS1GpmoHyCuUz6SH2k7Gf8mhmV1jZf2q7wTAhSaNNx+UTg32Lx1aNAVm GxXB5Zl7rr/pPVU5UvJer33c/DppLe33zxL6lRoIGU9Utw/bfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoA27HNwFevcuzee1P/EIs0ttnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWE5ZWE4NTYtYmJhZi0z YzliLTlhMGMtYTc5YTVkNzNiOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARincMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ7BTTrf9TATz/kmTX9dOshUCO2ReSkgXPW6Yq1/wJR289q7e1/q6tu 9hBqnjCmVCLfs+xFZLOD/BQ3R9eT9haNr/pv1bVbwU0UBxEcj2ORXEDmqBzhxXUR JPxZ1PQc6HBzAPXTg8Qj4AYuOAYB4RndYzA7ZVpsUiXnmZydcd/hYvucE/wInX6l Vsevw49ot8wLOdZoqGKdcQhHFdIzdTXt1hn/f8A/KBfYS+h5iWpv/oZkNarfTU93 d+8BzLuk/bcxYMl79o5bkrZ24Qtm83wFmO1NEacJltjqK78JaDPUyJQw3qGZKKEA 80UKeCiiFTzl5TCP+k2Qg0+eqhO4+AE= -----END CERTIFICATE-----Generated at Mon Apr 28 01:57:46 2025 by rpki-client