$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c69e6ff-d17b-36a4-8e35-fa441dba8541.roa File: 3c69e6ff-d17b-36a4-8e35-fa441dba8541.roa (raw, json) Hash identifier: Ll7RkjGH5rpAg7n9AfXPA59JJcjV4ovrU4gnuQu/8M4= Subject key identifier: 0A:61:A5:2B:D2:FF:78:70:6D:C3:3B:98:91:87:A8:21:14:5E:F1:C0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA50A3C9CE99B797836880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c69e6ff-d17b-36a4-8e35-fa441dba8541.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 70.41.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:50:a3:c9:ce:99:b7:97:83:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b4bd8cc0-8782-4687-a22f-af5a903d4114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:e6:a5:2c:d0:6b:c9:cb:67:52:95:42:7f: 1a:21:8e:2e:d0:0f:51:71:5d:a2:72:e0:f1:d3:97: 1e:3d:16:4c:7b:d6:9e:45:d3:aa:63:d3:4e:6f:03: 3e:51:ba:a8:4a:6b:9e:d6:6f:25:01:c3:43:67:28: bb:3e:dd:86:00:ed:84:a8:d6:b3:a6:d3:5d:d5:bf: a8:0b:4b:cd:5d:a7:0b:48:cb:3c:3e:fc:d3:ba:4f: 2d:c4:a4:2b:47:94:cb:e5:5e:86:e9:3e:f0:27:a3: 9f:42:6a:19:95:16:7e:4b:cc:11:5c:7e:23:c8:78: ed:9b:bf:a7:19:a0:c6:40:1f:d3:bf:db:19:da:a6: e0:d4:91:19:50:9e:26:7c:15:1b:6a:c2:5a:60:38: 0d:42:60:4f:97:17:fd:c7:1b:ff:7b:50:b2:27:eb: 3b:9f:b9:8b:8c:0f:ef:1b:02:f7:ca:93:fc:ab:e9: cb:69:45:d8:fe:54:d1:24:e1:3e:70:03:1f:4a:34: c3:22:6f:1b:68:8f:c7:03:ac:49:b6:77:cb:b4:b6: 7f:62:57:57:b9:ce:d5:f2:d1:00:83:b4:49:8c:6e: a2:36:bb:64:b5:8e:fc:d6:35:25:9b:24:e7:41:dc: 7a:eb:22:39:f0:6d:15:08:5f:92:ce:ab:1c:fb:d7: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:61:A5:2B:D2:FF:78:70:6D:C3:3B:98:91:87:A8:21:14:5E:F1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c69e6ff-d17b-36a4-8e35-fa441dba8541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1f:af:20:d0:70:bd:46:18:51:28:ee:ac:4f:eb:41:b7:6c: c8:e9:66:d9:82:81:e5:95:42:af:38:ff:df:c7:f8:40:60:7e: 3f:b2:16:92:9e:d7:b0:61:85:9e:dc:11:5f:59:ef:55:80:12: 04:36:da:18:11:b6:2a:d1:6f:ad:ef:22:29:9b:04:aa:b8:de: 35:d4:9f:64:16:93:42:5e:7c:f3:4c:47:f8:32:a9:08:00:6a: a1:57:17:a3:30:c7:24:ea:70:58:91:5b:bb:05:79:45:7c:e4: 7e:a2:96:24:8a:20:2c:a8:7b:8e:b0:5a:5b:18:6f:35:e7:2b: d3:f8:ef:a6:1f:d6:80:18:e7:59:89:a7:5d:39:cf:7b:00:fd: 72:53:67:c2:ce:46:fe:71:d8:4a:da:b7:89:f5:5d:0d:bb:c1: db:8d:84:8a:db:04:b3:91:12:ab:9c:ff:76:2b:f7:39:cf:cf: 59:0d:cd:b1:9e:7c:ef:24:0c:4b:aa:3e:c9:41:4e:da:da:cb: 95:8a:11:5b:9a:0b:ab:6e:dc:69:58:86:06:f6:b0:69:e4:72: cd:9c:9d:e2:93:8e:d6:4e:58:99:1e:d4:ab:47:e3:50:cb:cb: 9b:b5:ed:8c:0c:26:dc:27:bc:2b:ef:01:e9:d7:59:ec:b8:e9: 25:1d:1c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulCjyc6Zt5eDaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjRiZDhjYzAtODc4Mi00Njg3LWEyMmYtYWY1YTkwM2Q0MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy7mpSzQa8nLZ1KVQn8aIY4u0A9RcV2icuDx 05cePRZMe9aeRdOqY9NObwM+UbqoSmue1m8lAcNDZyi7Pt2GAO2EqNazptNd1b+o C0vNXacLSMs8PvzTuk8txKQrR5TL5V6G6T7wJ6OfQmoZlRZ+S8wRXH4jyHjtm7+n GaDGQB/Tv9sZ2qbg1JEZUJ4mfBUbasJaYDgNQmBPlxf9xxv/e1CyJ+s7n7mLjA/v GwL3ypP8q+nLaUXY/lTRJOE+cAMfSjTDIm8baI/HA6xJtnfLtLZ/YldXuc7V8tEA g7RJjG6iNrtktY781jUlmyTnQdx66yI58G0VCF+Szqsc+9dUGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAphpSvS/3hwbcM7mJGHqCEUXvHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M2OWU2ZmYtZDE3Yi0z NmE0LThlMzUtZmE0NDFkYmE4NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAfryDQcL1GGFEo7qxP60G3bMjpZtmCgeWVQq84/9/H+EBgfj+yFpKe 17BhhZ7cEV9Z71WAEgQ22hgRtirRb63vIimbBKq43jXUn2QWk0JefPNMR/gyqQgA aqFXF6MwxyTqcFiRW7sFeUV85H6iliSKICyoe46wWlsYbzXnK9P476Yf1oAY51mJ p105z3sA/XJTZ8LORv5x2Erat4n1XQ27wduNhIrbBLOREquc/3Yr9znPz1kNzbGe fO8kDEuqPslBTtray5WKEVuaC6tu3GlYhgb2sGnkcs2cneKTjtZOWJke1KtH41DL y5u17YwMJtwnvCvvAenXWey46SUdHDQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:51 2025 by rpki-client