$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa File: 3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa (raw, json) Hash identifier: qnj2amm5yFhWZgZvdVgofBVB09222LQEMMu5isWkF5I= Subject key identifier: A4:ED:84:50:53:00:04:D6:86:2D:1A:F6:D0:17:E6:25:87:13:7A:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADA19BFA0AD1FDA04B400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 70.41.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:da:19:bf:a0:ad:1f:da:04:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1ca4cb40-ef8a-40ee-bfa6-24ca54545eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:67:23:61:58:2d:c4:2f:d8:44:ac:2f:7e:74: 0d:5e:f1:3f:e4:76:b5:40:e1:2b:0d:75:36:c7:38: 0c:ed:12:a3:fd:e2:47:99:f9:8c:9c:21:fb:20:e9: 93:b0:98:40:80:2e:d8:0c:b8:b3:99:28:c4:11:72: 2e:c2:a2:9e:50:0b:ac:5f:b9:25:db:9f:70:a6:d8: a2:1b:26:25:fe:bc:62:5f:45:3d:cf:20:52:cd:5e: a9:0a:d6:3d:b3:a6:7f:71:95:17:cc:99:cb:ba:2c: 38:16:bf:5b:8d:fb:c7:7e:30:e9:73:dd:ac:23:c1: e9:50:d8:88:c6:ff:98:81:b6:25:ae:41:0d:df:b1: fb:ba:95:44:c4:bd:e9:53:b1:30:62:3d:c8:f5:64: 6f:0a:2c:40:27:f5:4c:32:90:05:84:71:b9:14:97: 18:74:8f:d1:20:f0:ed:6a:a3:79:ed:c4:dd:06:fa: 42:86:98:bf:f5:60:e1:3e:2f:8e:68:ce:6e:22:cd: 26:18:6c:2d:63:28:a4:20:7d:e4:38:49:1f:43:91: 26:dc:05:92:6a:4d:49:ee:bd:d1:7b:29:f7:bc:2a: fa:0c:8a:1e:0b:c9:b9:80:2c:64:38:f7:d7:c3:c0: cd:f2:ba:2c:31:7f:db:20:0b:50:b3:9e:46:49:c5: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:ED:84:50:53:00:04:D6:86:2D:1A:F6:D0:17:E6:25:87:13:7A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3810e7b2-d92a-360f-821a-aca8ca12f6ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0e:24:80:2e:e1:7b:6d:46:c7:c2:79:3c:f6:c9:1c:ec:50: 8e:49:c9:2a:41:cc:a4:f3:1b:5a:6b:06:96:5f:0e:c7:ea:6d: da:a6:ab:7e:7e:82:4d:22:fb:d9:e1:93:fa:77:ac:31:e4:ec: 17:23:ae:d3:67:54:1f:d3:bb:9f:df:ca:09:80:d1:ec:b5:a5: fd:bd:3e:fb:2b:51:ea:91:ae:56:c7:55:34:a0:cc:a7:de:e2: 34:d8:f4:d2:df:83:8d:60:36:75:51:7a:eb:0f:a9:10:27:d6: f7:85:34:4f:4c:43:8a:73:2b:c1:8e:57:23:cc:43:66:33:c6: ce:44:29:70:cd:30:fc:e3:d4:a7:6a:c3:e8:1f:80:a3:88:1d: 9d:1e:0e:f7:1b:ab:47:b5:11:a8:7f:4a:15:8d:21:65:41:25: 50:6e:d7:e0:39:a5:49:ca:1b:43:c2:99:ca:f4:f9:61:18:d8: 03:e6:d2:85:19:a8:a8:24:57:41:a2:83:b8:93:93:f1:0e:01: e5:a2:26:54:46:e9:d9:1a:21:af:bc:d0:8e:ba:f6:f8:82:77: 60:f7:81:77:3e:94:08:46:6a:22:81:98:d8:db:1a:30:dc:27: 54:69:dd:c7:70:3e:60:7d:c6:95:37:08:65:17:28:89:a5:99: 81:dd:e1:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutoZv6CtH9oEtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWNhNGNiNDAtZWY4YS00MGVlLWJmYTYtMjRjYTU0NTQ1ZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmcjYVgtxC/YRKwvfnQNXvE/5Ha1QOErDXU2 xzgM7RKj/eJHmfmMnCH7IOmTsJhAgC7YDLizmSjEEXIuwqKeUAusX7kl259wptii GyYl/rxiX0U9zyBSzV6pCtY9s6Z/cZUXzJnLuiw4Fr9bjfvHfjDpc92sI8HpUNiI xv+YgbYlrkEN37H7upVExL3pU7EwYj3I9WRvCixAJ/VMMpAFhHG5FJcYdI/RIPDt aqN57cTdBvpChpi/9WDhPi+OaM5uIs0mGGwtYyikIH3kOEkfQ5Em3AWSak1J7r3R eyn3vCr6DIoeC8m5gCxkOPfXw8DN8rosMX/bIAtQs55GScVE+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTthFBTAATWhi0a9tAX5iWHE3o0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzgxMGU3YjItZDkyYS0z NjBmLTgyMWEtYWNhOGNhMTJmNmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRikwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYOJIAu4XttRsfCeTz2yRzsUI5JySpBzKTzG1prBpZfDsfqbdqmq35+ gk0i+9nhk/p3rDHk7BcjrtNnVB/Tu5/fygmA0ey1pf29PvsrUeqRrlbHVTSgzKfe 4jTY9NLfg41gNnVReusPqRAn1veFNE9MQ4pzK8GOVyPMQ2Yzxs5EKXDNMPzj1Kdq w+gfgKOIHZ0eDvcbq0e1Eah/ShWNIWVBJVBu1+A5pUnKG0PCmcr0+WEY2APm0oUZ qKgkV0Gig7iTk/EOAeWiJlRG6dkaIa+80I669viCd2D3gXc+lAhGaiKBmNjbGjDc J1Rp3cdwPmB9xpU3CGUXKImlmYHd4Rs= -----END CERTIFICATE-----Generated at Sun Apr 27 14:17:52 2025 by rpki-client