$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2dcde161-da79-337c-ae03-8cd3d9908640.roa File: 2dcde161-da79-337c-ae03-8cd3d9908640.roa (raw, json) Hash identifier: LBQMPGuKfhkJWd4YnNMcar/IrkUsCoqa+6npFDo0E8w= Subject key identifier: 85:64:DA:0D:0C:E0:65:D7:6C:5B:4A:D3:99:29:F4:16:F8:EA:82:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5B179C23E423190D8280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2dcde161-da79-337c-ae03-8cd3d9908640.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5b:17:9c:23:e4:23:19:0d:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d93a198b-bf3d-4a87-a3d8-be8cc996447e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f8:74:e6:b1:c8:9d:7d:e7:e1:95:a1:74:b6: 98:9a:db:3e:9e:e4:03:50:08:db:6d:ab:66:49:63: 15:d8:50:8b:12:0b:db:b5:f9:9d:7b:70:f5:55:d4: eb:66:57:17:da:8c:b2:d1:a2:75:a2:1e:45:e3:e9: c7:27:85:ef:53:d1:d0:6b:56:f6:23:de:98:27:4b: 7e:a3:44:cf:90:b3:4f:82:d8:8a:31:8c:37:c4:de: a2:b0:b3:04:23:e0:cb:5a:b8:eb:29:95:22:3a:f0: 48:36:2d:73:25:cb:f5:cc:4d:4d:4a:94:ee:58:e8: 40:c6:b8:f4:12:6e:23:63:9a:1c:d2:73:73:6c:8e: 51:a1:dd:0f:9c:86:02:10:e6:88:9a:3f:07:51:dd: a9:01:b9:f4:54:c5:61:86:f4:fa:e6:74:c6:11:8c: 60:e2:e1:57:10:4c:fa:1d:49:f8:65:0f:4e:f1:52: 14:71:37:eb:92:c2:6b:ed:4e:6d:6b:2e:8c:cf:bd: f8:e5:41:d6:3f:d4:eb:47:8a:da:9c:00:67:bf:02: 52:42:ec:09:e5:38:e7:6f:c1:2f:ab:cb:02:b2:cf: 48:a2:bd:49:3f:eb:8d:1d:ff:9b:09:bd:37:35:f3: 64:0f:32:42:b7:a9:6b:9c:6d:9f:7e:d4:97:1e:d3: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:64:DA:0D:0C:E0:65:D7:6C:5B:4A:D3:99:29:F4:16:F8:EA:82:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2dcde161-da79-337c-ae03-8cd3d9908640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:df:21:2b:6d:16:c6:d0:74:50:fa:20:15:6e:45:d5:52:2d: 20:ab:54:c5:7f:e1:9c:6d:9c:35:e4:b6:ec:e7:33:c9:dc:e4: 97:56:d7:ba:ca:8d:cf:6f:23:15:6b:db:42:56:3b:60:a2:6a: 28:e6:5c:f5:f0:d1:29:54:d8:1b:c4:98:c4:a1:1e:65:31:09: 93:bb:85:e4:fc:19:6c:19:1e:5e:13:94:a4:26:0a:ef:7c:ae: 76:e3:28:1a:63:dd:df:d8:2f:d6:13:3f:78:80:07:27:d7:b1: b3:ef:c6:1b:27:5c:66:41:cf:cf:14:97:7a:f4:0b:3c:c7:d9: b8:f2:2d:04:78:b2:34:1c:9d:61:e9:b1:64:26:25:15:5f:6a: 28:db:8c:e5:2e:5a:b4:69:de:8f:bb:ef:53:f7:b1:45:94:95: 9a:16:0d:c8:87:38:e7:23:f1:33:93:98:d2:ca:1d:7e:8a:63: 38:18:5b:1f:85:c3:b3:84:90:c3:f4:39:83:d5:0f:0e:13:50: f4:f1:91:db:ec:7f:75:8a:45:0c:f2:5c:e1:ac:67:03:09:32: e2:3c:73:22:61:c3:1b:e4:6c:70:71:15:ca:20:04:5b:34:70: b7:7f:f3:1c:f8:e2:55:85:77:7c:01:b8:31:5d:58:e2:75:ec: ed:6b:c3:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulsXnCPkIxkNgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDkzYTE5OGItYmYzZC00YTg3LWEzZDgtYmU4Y2M5OTY0NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/h05rHInX3n4ZWhdLaYmts+nuQDUAjbbatm SWMV2FCLEgvbtfmde3D1VdTrZlcX2oyy0aJ1oh5F4+nHJ4XvU9HQa1b2I96YJ0t+ o0TPkLNPgtiKMYw3xN6isLMEI+DLWrjrKZUiOvBINi1zJcv1zE1NSpTuWOhAxrj0 Em4jY5oc0nNzbI5Rod0PnIYCEOaImj8HUd2pAbn0VMVhhvT65nTGEYxg4uFXEEz6 HUn4ZQ9O8VIUcTfrksJr7U5tay6Mz7345UHWP9TrR4ranABnvwJSQuwJ5Tjnb8Ev q8sCss9Ior1JP+uNHf+bCb03NfNkDzJCt6lrnG2fftSXHtMiFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVk2g0M4GXXbFtK05kp9Bb46oINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRjZGUxNjEtZGE3OS0z MzdjLWFlMDMtOGNkM2Q5OTA4NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArfISttFsbQdFD6IBVuRdVSLSCrVMV/4ZxtnDXktuznM8nc5JdW17rK jc9vIxVr20JWO2CiaijmXPXw0SlU2BvEmMShHmUxCZO7heT8GWwZHl4TlKQmCu98 rnbjKBpj3d/YL9YTP3iAByfXsbPvxhsnXGZBz88Ul3r0CzzH2bjyLQR4sjQcnWHp sWQmJRVfaijbjOUuWrRp3o+771P3sUWUlZoWDciHOOcj8TOTmNLKHX6KYzgYWx+F w7OEkMP0OYPVDw4TUPTxkdvsf3WKRQzyXOGsZwMJMuI8cyJhwxvkbHBxFcogBFs0 cLd/8xz44lWFd3wBuDFdWOJ17O1rw5U= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:08 2025 by rpki-client