$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2df3649d-8619-3594-acbb-3e761208f3ea.roa File: 2df3649d-8619-3594-acbb-3e761208f3ea.roa (raw, json) Hash identifier: K3jbKTvJongMOPC4LuFQYyxmT3LfYLdW8xnWjzH8fEk= Subject key identifier: 7A:F7:E3:8C:0A:B2:63:11:21:95:03:EE:4F:00:DC:36:AE:41:59:1E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE5E2870760720F9A4EC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2df3649d-8619-3594-acbb-3e761208f3ea.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e5:e2:87:07:60:72:0f:9a:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ff7357a5-0105-433b-9f10-a37d857d6c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:72:9a:93:88:4d:a6:1a:b9:43:40:97:9b: 89:62:3a:d7:1c:53:1f:79:fa:bd:48:dd:fd:3f:0b: 86:0a:10:08:50:cc:02:08:09:46:a9:c2:94:10:7e: 8f:cf:3e:27:42:fc:74:ea:1b:2f:ca:c2:db:18:f7: 5b:7b:94:3d:4a:dd:41:b1:e5:d3:0d:1f:12:7b:89: 87:c5:8a:90:cf:b5:cd:db:77:11:de:9e:3e:52:bc: ce:12:78:f0:de:14:e5:ea:39:b8:08:8b:76:e9:45: 09:0f:5a:5d:ef:cf:6d:ad:67:16:c7:c6:16:bb:ff: 9d:19:38:b3:36:1d:5e:23:28:12:bf:37:f3:85:ab: f1:f2:be:73:48:3d:85:67:3e:4e:dd:85:7e:05:0a: 8e:e0:5c:59:b4:35:8f:ca:ce:c8:fa:78:0b:db:8a: 98:54:da:a9:e5:bd:3e:b8:62:d0:ec:7e:17:47:bb: fa:6e:f9:04:57:3d:ef:78:a6:16:ec:8c:2b:24:8e: ae:84:18:19:3e:fc:2d:83:4a:88:80:84:8c:b0:ac: 1f:2f:c5:cd:d2:7e:70:ef:5f:bf:f7:d7:f4:23:e4: ad:48:23:a7:98:56:3b:22:e9:d1:58:7d:c8:7f:01: 85:69:ae:53:b4:01:da:48:85:c8:0b:64:2a:d7:e0: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F7:E3:8C:0A:B2:63:11:21:95:03:EE:4F:00:DC:36:AE:41:59:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2df3649d-8619-3594-acbb-3e761208f3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:2e:ff:d2:45:03:dd:d5:e9:43:7c:47:29:df:54:61:c9:01: 0c:83:b9:1a:06:4a:da:d4:97:87:3e:af:93:55:06:e1:2a:5e: 8c:d3:f6:17:65:eb:bb:17:a5:45:02:60:02:77:af:a7:83:5c: f6:75:8e:95:27:42:d5:b7:34:e2:9c:61:10:b6:98:12:10:9e: 59:77:a4:f5:b4:2b:4c:9b:35:0d:45:c5:84:a9:14:01:de:36: 14:c8:9e:bd:0f:ac:6c:f1:ca:98:a5:98:ac:78:a0:11:70:38: cf:dd:9d:26:03:09:e5:ad:00:20:83:2b:31:9b:d3:06:36:e2: 18:86:b2:89:39:f2:de:af:10:08:f3:55:f3:79:72:66:16:df: 5b:8b:ee:7f:e7:21:b0:cf:57:f5:35:72:37:5d:25:d2:c7:72: ec:6e:86:63:16:db:e7:52:bf:6b:4b:52:8c:07:b1:6e:a8:08: 9b:26:7f:07:06:c0:42:37:e2:f7:34:5b:0b:83:79:a3:c5:ad: ea:c6:d4:53:10:73:aa:d4:4a:e2:1d:5f:bb:1f:a9:32:58:e1: fd:17:5a:4b:80:e2:79:99:4d:98:07:bd:a1:34:b9:47:3d:e2: e0:34:a9:a3:10:c1:3e:ad:81:31:f8:f1:e2:15:3a:c3:fb:24: 26:a3:51:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuXihwdgcg+aTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmY3MzU3YTUtMDEwNS00MzNiLTlmMTAtYTM3ZDg1N2Q2YzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZympOITaYauUNAl5uJYjrXHFMfefq9SN39 PwuGChAIUMwCCAlGqcKUEH6Pzz4nQvx06hsvysLbGPdbe5Q9St1BseXTDR8Se4mH xYqQz7XN23cR3p4+UrzOEnjw3hTl6jm4CIt26UUJD1pd789trWcWx8YWu/+dGTiz Nh1eIygSvzfzhavx8r5zSD2FZz5O3YV+BQqO4FxZtDWPys7I+ngL24qYVNqp5b0+ uGLQ7H4XR7v6bvkEVz3veKYW7IwrJI6uhBgZPvwtg0qIgISMsKwfL8XN0n5w71+/ 99f0I+StSCOnmFY7IunRWH3IfwGFaa5TtAHaSIXIC2Qq1+BQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr344wKsmMRIZUD7k8A3DauQVkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRmMzY0OWQtODYxOS0z NTk0LWFjYmItM2U3NjEyMDhmM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARin1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsu/9JFA93V6UN8RynfVGHJAQyDuRoGStrUl4c+r5NVBuEqXozT9hdl 67sXpUUCYAJ3r6eDXPZ1jpUnQtW3NOKcYRC2mBIQnll3pPW0K0ybNQ1FxYSpFAHe NhTInr0PrGzxypilmKx4oBFwOM/dnSYDCeWtACCDKzGb0wY24hiGsok58t6vEAjz VfN5cmYW31uL7n/nIbDPV/U1cjddJdLHcuxuhmMW2+dSv2tLUowHsW6oCJsmfwcG wEI34vc0WwuDeaPFrerG1FMQc6rUSuIdX7sfqTJY4f0XWkuA4nmZTZgHvaE0uUc9 4uA0qaMQwT6tgTH48eIVOsP7JCajUdA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:12 2025 by rpki-client