$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40a74105-ddbb-35f4-ab94-4d60f3d8ddd3.roa File: 40a74105-ddbb-35f4-ab94-4d60f3d8ddd3.roa (raw, json) Hash identifier: mWSOv6GxnrJjizqJ/dwWScrojeCC1nq5Dcg9IQ6/QQo= Subject key identifier: AF:2B:81:A3:8C:9C:06:56:41:F1:A9:B0:0C:3F:57:86:01:A7:A3:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE1901DEEC92279D20980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40a74105-ddbb-35f4-ab94-4d60f3d8ddd3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e1:90:1d:ee:c9:22:79:d2:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2de28629-f806-4a5d-b8f6-a4fd781a654b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:6d:6b:b1:70:52:28:72:23:b8:9a:61:da: bd:b9:61:b6:62:c4:fe:3e:aa:56:4d:8b:34:f3:04: 2d:23:74:49:0b:38:e9:33:ff:b1:ee:f5:c1:9a:43: 5e:a0:b4:d8:09:c8:8b:7b:62:36:51:08:86:8a:26: d9:27:3b:c4:c2:58:93:1e:38:de:c8:41:4c:50:b4: 87:ff:91:47:c9:9d:7a:2b:8a:ca:2f:80:32:a5:ad: bb:f9:c9:39:7c:71:08:4a:ba:a2:92:9e:14:ca:3d: 31:c8:e8:6c:1d:2d:54:61:23:ac:1a:22:d6:48:7a: 6d:d2:ee:4f:18:e3:f5:e2:6b:6b:cf:bd:e4:51:7b: 24:da:f7:17:00:26:68:9c:da:23:fd:a0:d5:1c:a9: ae:af:f4:33:f6:79:4a:23:b4:c2:c8:3d:10:29:cd: 32:07:c0:92:02:af:81:ce:fd:e0:08:a8:d2:22:08: d6:12:19:dc:d8:da:ed:5e:cf:12:ae:4f:68:a9:21: da:f6:44:bd:c9:58:08:be:81:c4:6d:1e:e9:27:1e: 59:92:19:1f:2a:1a:29:fc:06:c5:4f:69:f4:37:56: 0e:73:b4:69:e8:c1:e2:71:68:23:21:cf:71:5b:b2: ab:8e:82:d5:ae:fb:2b:63:63:2d:1b:03:1b:c4:5c: 54:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:81:A3:8C:9C:06:56:41:F1:A9:B0:0C:3F:57:86:01:A7:A3:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40a74105-ddbb-35f4-ab94-4d60f3d8ddd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:59:cc:17:1b:02:e2:04:18:32:3d:8e:fb:68:19:d9:d4:37: 83:8d:40:49:d2:3d:16:e4:34:78:0b:42:f0:41:0e:a4:dd:5c: da:52:02:3d:bb:4b:5a:f3:80:d0:9e:f7:79:6d:0a:5e:bd:99: 09:fe:5f:b9:bf:61:48:a9:c2:9b:c0:a5:08:5f:d2:a5:39:a5: 2e:8e:68:e1:89:4d:32:57:bb:29:fb:32:7a:bc:d3:0b:15:be: dd:8e:2f:1a:ff:ce:b8:f2:61:a4:f3:c5:eb:fe:95:e4:42:2a: 63:6e:c1:a5:34:8c:16:d5:2a:a8:71:45:47:3c:b1:79:89:17: 25:dc:16:23:9f:b3:13:e0:09:2c:b0:dd:33:e6:1a:a7:48:33: c8:71:14:42:21:83:3d:df:1c:62:3d:51:e6:78:08:64:59:13: 89:e4:72:20:f3:e3:b8:68:30:b7:ad:1d:9f:3e:49:24:38:fd: 39:45:47:ec:3d:78:3d:37:73:6f:9c:28:23:1e:79:bf:00:52: 3d:35:0f:b2:ab:2a:66:7d:85:19:60:9f:61:11:60:03:15:9d: fe:0a:08:76:9c:59:23:54:c2:d2:36:67:15:57:4e:91:84:36: fd:e3:bb:27:8e:6f:2f:ab:16:cd:0a:d9:fc:fa:d0:0d:64:06: 2d:55:7f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuGQHe7JInnSCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmRlMjg2MjktZjgwNi00YTVkLWI4ZjYtYTRmZDc4MWE2NTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDhta7FwUihyI7iaYdq9uWG2YsT+PqpWTYs0 8wQtI3RJCzjpM/+x7vXBmkNeoLTYCciLe2I2UQiGiibZJzvEwliTHjjeyEFMULSH /5FHyZ16K4rKL4Aypa27+ck5fHEISrqikp4Uyj0xyOhsHS1UYSOsGiLWSHpt0u5P GOP14mtrz73kUXsk2vcXACZonNoj/aDVHKmur/Qz9nlKI7TCyD0QKc0yB8CSAq+B zv3gCKjSIgjWEhnc2NrtXs8Srk9oqSHa9kS9yVgIvoHEbR7pJx5ZkhkfKhop/AbF T2n0N1YOc7Rp6MHicWgjIc9xW7KrjoLVrvsrY2MtGwMbxFxUFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8rgaOMnAZWQfGpsAw/V4YBp6MmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDBhNzQxMDUtZGRiYi0z NWY0LWFiOTQtNGQ2MGYzZDhkZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxZzBcbAuIEGDI9jvtoGdnUN4ONQEnSPRbkNHgLQvBBDqTdXNpSAj27 S1rzgNCe93ltCl69mQn+X7m/YUipwpvApQhf0qU5pS6OaOGJTTJXuyn7Mnq80wsV vt2OLxr/zrjyYaTzxev+leRCKmNuwaU0jBbVKqhxRUc8sXmJFyXcFiOfsxPgCSyw 3TPmGqdIM8hxFEIhgz3fHGI9UeZ4CGRZE4nkciDz47hoMLetHZ8+SSQ4/TlFR+w9 eD03c2+cKCMeeb8AUj01D7KrKmZ9hRlgn2ERYAMVnf4KCHacWSNUwtI2ZxVXTpGE Nv3juyeOby+rFs0K2fz60A1kBi1Vf2Y= -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:41 2025 by rpki-client