$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa File: 29bb7170-7a90-39aa-ad83-71606197544b.roa (raw, json) Hash identifier: jVpq+az6pDVQs2fgQS3fUihfa7AqhsbDDWm9uC8hSYo= Subject key identifier: 8D:F9:BC:D2:CE:7F:D0:9C:6E:FB:A9:3C:57:3A:6F:2A:F7:E8:CE:8F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE071D97F61D468DAE370 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e0:71:d9:7f:61:d4:68:da:e3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e96db455-4642-4709-a507-929f70d5d625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1d:97:0d:de:e0:34:9d:18:31:58:bf:89:74: 4e:bc:81:db:db:16:40:8e:e7:a3:e2:58:c1:82:9e: 62:bf:8b:38:10:89:66:ec:b1:4e:b9:35:cf:a1:f5: 2e:2f:48:8c:91:35:bf:71:f0:33:18:1d:48:3a:ae: 11:a5:80:72:42:3d:46:3f:ca:6e:ca:16:71:e8:e5: 0f:9d:a8:ea:64:44:e1:4f:c7:34:8e:19:fd:06:8e: 30:6c:41:94:53:fc:8f:14:86:ef:0c:38:82:1c:6a: d6:f0:eb:40:11:c9:b3:ac:ad:b8:6c:50:bb:66:19: 4c:2a:e5:0b:4d:11:dd:36:46:25:4e:4d:05:e2:57: 13:8e:cc:f4:1f:fe:e2:7c:47:11:52:6c:b0:af:21: b5:bf:0d:3c:26:91:a7:34:04:ee:3a:55:4c:fe:3b: 7e:8d:cd:95:91:ac:54:ef:98:46:61:33:70:73:58: 5e:38:ab:e1:f1:28:17:39:ec:5e:e8:37:9c:39:d4: dd:f9:1d:4b:a3:e7:db:98:5e:3b:1b:83:7d:6e:d5: 08:5d:af:c8:d1:36:73:6f:36:46:f8:cf:68:00:19: ba:ef:45:ee:d7:f6:f1:63:4e:2b:8a:a4:6f:2b:9e: 55:01:28:8b:3f:a1:48:dd:b8:96:3a:7e:5a:b9:50: 8a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F9:BC:D2:CE:7F:D0:9C:6E:FB:A9:3C:57:3A:6F:2A:F7:E8:CE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1d:46:10:d1:1a:fd:c9:ec:b6:fd:ca:a1:04:fe:82:9c:c1: af:b4:8b:96:7d:0c:3e:41:3c:aa:c1:41:de:89:c7:36:20:66: 49:e8:5b:49:54:72:f9:e4:73:3a:ad:cb:2d:63:ad:c6:72:de: 7a:56:16:e4:21:52:f9:d9:83:19:63:5e:a5:36:ce:23:8a:4f: bf:93:5f:ef:70:0c:b2:e9:78:85:ca:9c:3d:be:21:25:6b:89: b1:8c:89:d0:59:8e:9f:31:6c:b6:f1:79:b1:b4:71:b2:4f:fb: b8:13:99:e9:b9:15:5b:c7:cb:e7:6b:22:04:11:8b:7f:9a:8d: be:72:a4:39:cd:c9:bb:ef:5b:79:ee:66:9b:f3:27:a5:1e:1d: 96:5d:fc:83:76:b2:af:37:72:bb:33:2a:ac:8b:59:71:1d:b6: 5d:c1:7b:92:81:a5:d4:fc:77:a9:e3:69:8d:80:92:da:8f:06: 8a:b2:08:c0:ec:86:83:90:2c:03:f1:17:3c:99:32:e9:fb:62: 02:f1:be:98:63:1f:fc:55:8a:66:13:4c:03:2d:7b:e8:11:5d: 95:58:85:db:04:ff:87:63:ad:5b:43:9a:53:47:00:36:59:55: 4a:04:93:83:96:a4:47:e6:bd:75:82:4a:58:22:d2:65:cb:a3: dd:6d:a4:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuBx2X9h1Gja43AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTk2ZGI0NTUtNDY0Mi00NzA5LWE1MDctOTI5ZjcwZDVkNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix2XDd7gNJ0YMVi/iXROvIHb2xZAjuej4ljB gp5iv4s4EIlm7LFOuTXPofUuL0iMkTW/cfAzGB1IOq4RpYByQj1GP8puyhZx6OUP najqZEThT8c0jhn9Bo4wbEGUU/yPFIbvDDiCHGrW8OtAEcmzrK24bFC7ZhlMKuUL TRHdNkYlTk0F4lcTjsz0H/7ifEcRUmywryG1vw08JpGnNATuOlVM/jt+jc2VkaxU 75hGYTNwc1heOKvh8SgXOexe6DecOdTd+R1Lo+fbmF47G4N9btUIXa/I0TZzbzZG +M9oABm670Xu1/bxY04riqRvK55VASiLP6FI3biWOn5auVCKtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI35vNLOf9CcbvupPFc6byr36M6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjliYjcxNzAtN2E5MC0z OWFhLWFkODMtNzE2MDYxOTc1NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEdRhDRGv3J7Lb9yqEE/oKcwa+0i5Z9DD5BPKrBQd6JxzYgZknoW0lU cvnkczqtyy1jrcZy3npWFuQhUvnZgxljXqU2ziOKT7+TX+9wDLLpeIXKnD2+ISVr ibGMidBZjp8xbLbxebG0cbJP+7gTmem5FVvHy+drIgQRi3+ajb5ypDnNybvvW3nu ZpvzJ6UeHZZd/IN2sq83crszKqyLWXEdtl3Be5KBpdT8d6njaY2AktqPBoqyCMDs hoOQLAPxFzyZMun7YgLxvphjH/xVimYTTAMte+gRXZVYhdsE/4djrVtDmlNHADZZ VUoEk4OWpEfmvXWCSlgi0mXLo91tpEI= -----END CERTIFICATE-----Generated at Sun Apr 27 04:17:56 2025 by rpki-client