$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa File: 3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa (raw, json) Hash identifier: 5rdaX7SeN8FD+ksFwIg8SCmkv7OpK/okPOfBMB+YZPA= Subject key identifier: 12:6A:9C:AD:2E:59:B7:B1:A0:DA:5D:8E:87:93:5D:F5:94:BB:87:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5A5AEE02C1B5526F56A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5a:5a:ee:02:c1:b5:52:6f:56:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3b807eab-2cb1-4b1e-b596-0c761b9f6561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ba:16:f7:5f:06:ad:b5:fa:61:a8:cf:c8:84: 3a:cf:bc:c9:c6:b0:66:fb:c9:b0:ae:82:a4:9e:46: d2:75:80:44:d2:29:db:6a:42:cc:5c:53:d9:fe:9c: 5a:ac:1d:bc:3d:53:8c:61:1c:70:fd:1b:a1:d3:17: 05:ed:e1:25:07:5d:d4:9f:d5:1c:57:5d:30:62:27: 33:73:78:52:c8:8d:98:7f:16:17:18:7c:12:60:4c: 7f:0b:84:4a:1d:99:d8:4a:85:c5:ab:7e:50:3a:9e: 28:db:9c:d1:6e:90:5f:3f:6f:74:5d:2e:58:c3:7e: 0c:c6:8f:f9:e7:4d:78:eb:7e:7a:7b:07:8a:65:24: c9:a6:54:08:4f:e6:5e:3e:c4:fd:bd:19:a4:c7:43: f4:86:47:02:08:60:99:f2:6c:f8:ad:81:bd:5d:0f: 86:45:68:cd:43:42:be:48:15:56:63:23:44:dc:12: 50:59:4b:e8:45:ae:97:e4:11:85:e3:49:78:2d:62: 7b:e9:5a:47:59:e9:68:00:07:01:5b:da:9d:b0:c8: 37:6a:a0:eb:45:3f:ff:83:33:29:2a:ed:fa:43:9f: 84:61:04:df:43:5d:c1:95:21:76:49:a9:28:00:fe: 40:97:19:79:55:f3:a7:9e:f0:65:c3:5b:1a:ed:06: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6A:9C:AD:2E:59:B7:B1:A0:DA:5D:8E:87:93:5D:F5:94:BB:87:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:13:32:89:cd:c5:53:5b:39:44:2a:d2:21:aa:fc:eb:25:84: 52:61:8e:f1:a8:fc:63:1a:6b:1d:ef:04:ec:d3:d3:40:1b:4e: e6:00:60:69:f1:c6:08:2e:54:f1:f5:86:8e:8d:09:13:fe:27: 6f:84:b0:b4:48:7d:ad:56:86:58:1b:a6:5c:79:1d:25:65:7c: 69:bb:3a:ca:b7:ba:30:85:0a:ce:02:bb:13:e3:30:52:98:02: 23:e6:5d:fb:ec:c0:cd:f5:a1:8c:2c:89:6d:7c:7c:b0:d3:9f: 39:3b:50:9b:91:6c:4d:46:d8:f1:be:79:17:bc:95:8a:28:28: 61:74:db:f9:b6:a2:75:52:bd:c1:fa:1d:34:0a:b8:a3:a6:a4: 3c:89:39:fa:32:26:16:a8:2a:7b:b2:e2:6f:8c:76:9b:f2:89: 04:a9:dc:12:4a:bd:c6:d4:40:eb:07:7f:42:12:37:09:16:70: 74:c0:79:ff:fa:ab:63:78:96:98:0f:e5:d5:5c:f8:5b:69:74: 5b:ac:0e:9d:12:13:ea:9c:b0:8f:7b:de:6b:1f:08:ac:49:4a: 54:88:b5:8c:58:e6:e8:f8:93:2c:15:76:3f:7a:98:c4:3b:42: 89:fc:50:28:f6:4c:4c:a6:f4:0f:b2:08:46:2c:86:ca:6d:74: 57:6e:3d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulpa7gLBtVJvVqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2I4MDdlYWItMmNiMS00YjFlLWI1OTYtMGM3NjFiOWY2NTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7oW918GrbX6YajPyIQ6z7zJxrBm+8mwroKk nkbSdYBE0inbakLMXFPZ/pxarB28PVOMYRxw/Ruh0xcF7eElB13Un9UcV10wYicz c3hSyI2YfxYXGHwSYEx/C4RKHZnYSoXFq35QOp4o25zRbpBfP290XS5Yw34Mxo/5 50146356eweKZSTJplQIT+ZePsT9vRmkx0P0hkcCCGCZ8mz4rYG9XQ+GRWjNQ0K+ SBVWYyNE3BJQWUvoRa6X5BGF40l4LWJ76VpHWeloAAcBW9qdsMg3aqDrRT//gzMp Ku36Q5+EYQTfQ13BlSF2SakoAP5Alxl5VfOnnvBlw1sa7QavswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJqnK0uWbexoNpdjoeTXfWUu4cdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FjYjVjZjAtN2IwZC0z OGFmLTllMjMtODYwZWUxYTliMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsTMonNxVNbOUQq0iGq/OslhFJhjvGo/GMaax3vBOzT00AbTuYAYGnx xgguVPH1ho6NCRP+J2+EsLRIfa1Whlgbplx5HSVlfGm7Osq3ujCFCs4CuxPjMFKY AiPmXfvswM31oYwsiW18fLDTnzk7UJuRbE1G2PG+eRe8lYooKGF02/m2onVSvcH6 HTQKuKOmpDyJOfoyJhaoKnuy4m+MdpvyiQSp3BJKvcbUQOsHf0ISNwkWcHTAef/6 q2N4lpgP5dVc+FtpdFusDp0SE+qcsI973msfCKxJSlSItYxY5uj4kywVdj96mMQ7 Qon8UCj2TEym9A+yCEYshsptdFduPWY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:34:26 2025 by rpki-client