$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e8c171c-e1ec-33c8-ba22-e96d3e6660f4.roa File: 1e8c171c-e1ec-33c8-ba22-e96d3e6660f4.roa (raw, json) Hash identifier: 8ZWeTQm48S0f6Tfv73RGLXr/rB9DUJeUNiGs0PSUW7w= Subject key identifier: EE:F9:C0:01:CB:32:78:16:27:9E:40:35:72:02:A6:76:B9:27:09:C9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE54A37C9EEAA2320E180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e8c171c-e1ec-33c8-ba22-e96d3e6660f4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e5:4a:37:c9:ee:aa:23:20:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3193e749-1805-48d9-a951-df94349ce67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0f:66:9e:93:ba:a6:73:dc:6b:21:2d:c8:d3: 38:5b:9b:4e:e1:c2:d4:88:9a:db:89:e2:fc:92:f7: a4:b6:f4:dd:df:86:f4:8f:34:ce:6b:44:f1:37:ba: 88:a8:2d:a1:9e:4a:56:6e:54:c4:37:3a:4f:f8:d6: 8e:64:08:e3:02:6b:84:8a:81:95:59:4f:cd:08:bb: 84:d8:02:f6:e0:12:23:5a:6b:68:3e:b0:93:ca:9e: d3:83:49:ba:0f:c6:75:ca:8d:51:a2:6f:37:88:85: 62:57:fe:cd:64:0a:05:d0:6b:36:d6:e1:3e:48:cf: ba:b8:4c:8b:5b:a2:b2:e1:99:f0:2c:43:98:88:97: 99:78:7e:c8:ca:54:30:0f:fa:54:8f:f4:12:55:70: 15:51:8b:71:a4:4b:21:40:74:fc:8b:c9:00:70:2e: 9d:0c:ae:76:1b:d5:de:4a:d6:55:94:f5:21:29:03: ef:3e:59:c5:48:24:3c:01:c8:d0:42:5f:b3:35:e6: 1f:de:fc:9b:c1:68:e7:ef:0c:b5:58:0c:f3:e9:78: a8:62:e9:79:a1:7e:cb:85:c5:1d:69:e9:47:39:44: 1d:29:2e:b4:c5:3f:fe:e3:ce:d8:df:bb:12:8f:81: 17:40:65:1e:cc:60:5c:4a:66:04:22:88:ab:54:38: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F9:C0:01:CB:32:78:16:27:9E:40:35:72:02:A6:76:B9:27:09:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e8c171c-e1ec-33c8-ba22-e96d3e6660f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:b2:e1:67:db:9b:95:19:83:ae:47:92:5b:29:5d:2f:43:ea: e0:36:d3:5a:b9:15:b5:b2:5c:40:50:d8:8e:4a:50:4f:07:8d: cc:59:5a:46:8c:17:8b:23:0c:36:65:84:0d:31:b3:de:1d:b1: 8a:3f:e1:2d:17:9e:9b:29:4e:86:bf:40:6f:3b:2c:c3:cd:de: e5:79:ba:cd:7d:99:8d:2b:9e:f9:fe:16:1e:11:e0:69:55:a9: 02:c5:8a:2e:eb:8e:48:4d:40:40:5b:90:50:fe:49:e2:54:d5: 70:0e:d1:96:06:52:ef:46:b7:70:0b:d8:c7:aa:f5:6f:e1:be: 15:3c:72:1d:09:c7:eb:e6:c5:40:cc:07:49:a1:2f:6d:09:de: 20:1e:ac:fd:4c:33:ab:df:d0:de:96:d4:aa:93:29:c5:31:a2: 0f:82:12:24:a8:dc:55:9c:02:50:be:9c:2b:e3:60:ce:5b:58: c7:8a:45:a5:a7:02:75:50:96:1b:20:54:7f:2b:9d:e0:0c:42: dc:fc:3e:7b:10:49:8d:2f:9e:63:cf:6b:27:77:2f:36:62:a7: 05:88:a4:3b:8f:30:1c:d4:fa:96:f5:5e:bc:f5:71:92:24:05: f0:a5:fc:c2:ce:e4:55:3d:94:f0:e6:70:15:f9:50:ba:84:0d: f5:91:78:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuVKN8nuqiMg4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzE5M2U3NDktMTgwNS00OGQ5LWE5NTEtZGY5NDM0OWNlNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ9mnpO6pnPcayEtyNM4W5tO4cLUiJrbieL8 kvektvTd34b0jzTOa0TxN7qIqC2hnkpWblTENzpP+NaOZAjjAmuEioGVWU/NCLuE 2AL24BIjWmtoPrCTyp7Tg0m6D8Z1yo1Rom83iIViV/7NZAoF0Gs21uE+SM+6uEyL W6Ky4ZnwLEOYiJeZeH7IylQwD/pUj/QSVXAVUYtxpEshQHT8i8kAcC6dDK52G9Xe StZVlPUhKQPvPlnFSCQ8AcjQQl+zNeYf3vybwWjn7wy1WAzz6XioYul5oX7LhcUd aelHOUQdKS60xT/+487Y37sSj4EXQGUezGBcSmYEIoirVDhX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO75wAHLMngWJ55ANXICpna5JwnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWU4YzE3MWMtZTFlYy0z M2M4LWJhMjItZTk2ZDNlNjY2MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARineMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANOy4Wfbm5UZg65HklspXS9D6uA201q5FbWyXEBQ2I5KUE8HjcxZWkaM F4sjDDZlhA0xs94dsYo/4S0XnpspToa/QG87LMPN3uV5us19mY0rnvn+Fh4R4GlV qQLFii7rjkhNQEBbkFD+SeJU1XAO0ZYGUu9Gt3AL2Meq9W/hvhU8ch0Jx+vmxUDM B0mhL20J3iAerP1MM6vf0N6W1KqTKcUxog+CEiSo3FWcAlC+nCvjYM5bWMeKRaWn AnVQlhsgVH8rneAMQtz8PnsQSY0vnmPPayd3LzZipwWIpDuPMBzU+pb1Xrz1cZIk BfCl/MLO5FU9lPDmcBX5ULqEDfWRePU= -----END CERTIFICATE-----Generated at Sun Apr 27 03:39:17 2025 by rpki-client