$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa File: 22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa (raw, json) Hash identifier: BpECobNp5HqMX4edX1HMpk94uyvTZSsMlmcehtMcDis= Subject key identifier: FF:0C:C1:89:2C:21:3B:E8:06:03:48:D8:22:53:B3:8B:24:70:64:10 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA568CC8CEE5E881A3ED40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:56:8c:c8:ce:e5:e8:81:a3:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d54d0e3a-0aa6-4ec7-9250-4a75c3d571ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:55:36:a6:95:88:35:7c:ab:7e:fc:8b:30: 92:05:05:23:26:1d:81:1d:3e:b0:9e:36:44:48:3d: 3b:4a:21:23:fc:54:2c:a9:df:fd:56:22:7e:f5:7a: 0b:9f:cb:2e:71:45:b3:a9:4e:61:01:00:2d:16:09: d5:04:0c:48:35:30:c8:64:55:cf:2e:4d:73:65:aa: 1f:d6:f0:34:60:6d:89:f9:75:36:b9:66:f9:83:52: ec:f4:99:11:ee:44:94:c8:50:20:ac:75:98:c8:a4: 27:b7:38:f7:56:87:31:a8:1e:1e:d5:89:cd:8e:f9: d9:1e:5d:44:2a:26:71:df:1d:d6:72:08:61:0f:e8: 5f:93:2c:fc:8b:f3:1e:1f:e7:f5:a3:a1:79:6c:d9: 0d:b3:51:36:e0:b7:78:37:5e:a7:d8:bd:22:18:17: 10:9b:59:ad:b7:61:05:01:a6:2f:91:b7:91:ad:ed: c1:37:28:55:eb:7e:f2:19:70:4b:d1:96:d4:5a:4d: 56:bc:93:43:50:04:0f:a7:08:ce:84:78:5c:41:c4: e9:ba:2c:2b:59:ff:1e:3a:da:17:6d:78:d5:49:85: 54:cd:53:e8:79:84:ce:36:39:a8:29:de:9b:71:fb: 66:1a:01:ab:54:d2:54:f4:4e:81:4f:59:c4:da:ca: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0C:C1:89:2C:21:3B:E8:06:03:48:D8:22:53:B3:8B:24:70:64:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:50:17:ad:6d:a6:0c:04:72:03:3e:e4:15:bc:7d:3d:e0:3e: 4d:ed:5a:10:d6:e3:2c:6b:12:27:03:e8:34:27:e8:e7:84:56: 3a:04:35:06:0b:63:13:d8:37:ab:9e:0b:11:c7:92:6c:36:70: ae:7f:da:63:2a:5e:d4:a1:1e:4a:4c:e1:eb:ea:43:95:f1:3f: 28:b7:ca:f5:1f:82:e3:8d:aa:e4:ff:0f:32:1a:81:c5:fb:78: e3:1e:bf:60:36:6f:4c:db:ff:14:b7:76:86:79:f6:cd:83:18: 52:a8:90:80:84:0c:64:c7:d7:33:17:4d:c0:0b:47:ab:ec:d9: ca:6e:e8:ce:27:76:0a:62:f8:84:a4:2b:1d:41:94:63:2a:1e: 09:65:bb:92:64:99:4e:3e:69:a3:7f:e5:cf:6b:6b:37:71:bb: 97:e2:6b:2f:d3:f6:79:b3:cd:ea:0b:d7:9a:51:8c:4a:3e:66: 28:e1:e8:b4:bf:1b:92:82:c8:9f:ee:a3:de:0f:d8:5f:2f:d0: 47:8e:60:0b:c9:7e:3e:d9:8b:30:8d:a6:01:3f:3c:02:a2:e3: ff:3c:8a:c8:12:6b:78:ae:97:ef:a2:8c:99:4f:6d:c6:59:2d: 2c:83:70:33:8d:c8:2b:9b:66:31:cd:2b:1e:bd:9d:8b:c1:be: 10:f5:4d:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulaMyM7l6IGj7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDU0ZDBlM2EtMGFhNi00ZWM3LTkyNTAtNGE3NWMzZDU3MWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq01VNqaViDV8q378izCSBQUjJh2BHT6wnjZE SD07SiEj/FQsqd/9ViJ+9XoLn8sucUWzqU5hAQAtFgnVBAxINTDIZFXPLk1zZaof 1vA0YG2J+XU2uWb5g1Ls9JkR7kSUyFAgrHWYyKQntzj3VocxqB4e1YnNjvnZHl1E KiZx3x3WcghhD+hfkyz8i/MeH+f1o6F5bNkNs1E24Ld4N16n2L0iGBcQm1mtt2EF AaYvkbeRre3BNyhV637yGXBL0ZbUWk1WvJNDUAQPpwjOhHhcQcTpuiwrWf8eOtoX bXjVSYVUzVPoeYTONjmoKd6bcftmGgGrVNJU9E6BT1nE2sp0QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8MwYksITvoBgNI2CJTs4skcGQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjI4NThmZGQtNGMzOC0z ZGM0LWE2OTUtZjlkODBjZjc4NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtQF61tpgwEcgM+5BW8fT3gPk3tWhDW4yxrEicD6DQn6OeEVjoENQYL YxPYN6ueCxHHkmw2cK5/2mMqXtShHkpM4evqQ5XxPyi3yvUfguONquT/DzIagcX7 eOMev2A2b0zb/xS3doZ59s2DGFKokICEDGTH1zMXTcALR6vs2cpu6M4ndgpi+ISk Kx1BlGMqHgllu5JkmU4+aaN/5c9razdxu5fiay/T9nmzzeoL15pRjEo+Zijh6LS/ G5KCyJ/uo94P2F8v0EeOYAvJfj7ZizCNpgE/PAKi4/88isgSa3iul++ijJlPbcZZ LSyDcDONyCubZjHNKx69nYvBvhD1TXo= -----END CERTIFICATE-----Generated at Sun Apr 27 23:00:06 2025 by rpki-client