$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4996d034-025f-3ff3-b457-e147b8c24bb3.roa File: 4996d034-025f-3ff3-b457-e147b8c24bb3.roa (raw, json) Hash identifier: 91Skr2VsEd5UFQgouF0bQdQTzox7K6DzJlc4k1SfSJw= Subject key identifier: 72:81:24:27:1D:A8:9A:C4:B7:D6:69:65:AA:72:6A:FA:26:5C:14:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE28DC8F1ABF355E0B000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4996d034-025f-3ff3-b457-e147b8c24bb3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e2:8d:c8:f1:ab:f3:55:e0:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=255ca7c7-e656-46c9-9d05-5ee4b98556e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:a3:6d:3b:1d:20:38:a0:4b:cd:38:b2:f2: a2:9c:5f:42:f3:c9:cc:96:5a:ca:c8:f8:d2:15:19: 5d:f5:42:03:50:1f:7d:c4:16:ef:4e:8e:bc:6d:c0: 19:44:15:27:ce:b4:cc:6f:72:fc:f0:13:12:df:4d: 2b:1a:7f:50:3d:79:f3:62:70:8c:fd:50:34:31:f3: ee:61:7c:b4:bc:73:02:96:d6:f2:33:02:b6:7a:87: 16:95:01:17:53:20:3c:71:cd:09:84:1c:8c:0f:22: fe:65:14:f5:58:74:d4:ba:1d:01:5c:95:fe:42:f0: 34:9d:b1:8c:1e:3d:a7:c4:2a:2e:66:47:2d:f9:ee: 14:a9:fe:1f:c3:90:2a:19:37:92:ff:9e:a1:1e:87: 90:aa:5b:f2:f0:97:24:35:fa:1b:80:f4:2a:23:64: 65:3b:82:51:15:d6:eb:1b:cb:22:b9:dd:ef:9b:b8: a4:b9:2a:2e:f0:ca:0e:a2:ab:d5:0e:62:dc:87:e1: d5:a1:51:98:43:32:09:6a:a8:0d:ff:b8:ee:67:dc: 67:86:d0:c0:dc:68:86:46:83:d6:95:10:c3:aa:ad: 3d:6c:1d:c9:86:db:c4:30:fa:5e:7a:7c:8f:83:d1: 58:8b:99:18:14:0f:93:e3:32:b1:ec:32:fe:32:7f: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:81:24:27:1D:A8:9A:C4:B7:D6:69:65:AA:72:6A:FA:26:5C:14:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4996d034-025f-3ff3-b457-e147b8c24bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:88:36:72:1c:55:91:1e:f8:ab:ab:56:d7:a8:a1:57:4a:dc: d7:33:83:d2:a7:89:db:b3:4e:7e:70:38:10:98:a0:13:a4:1c: f4:40:e5:c3:6e:45:5b:54:99:82:33:7a:2f:b9:39:1c:8b:6f: 13:3b:5b:ac:8a:c0:57:13:e1:a3:09:f6:26:9f:e3:c0:0c:24: 3a:fc:47:9b:4c:6d:62:06:a3:87:3f:e3:77:c6:6b:74:e4:70: 7c:08:1c:3a:aa:7e:1c:64:2d:cc:29:9e:42:f4:85:3c:5b:0d: bf:3d:4c:ca:d7:3a:14:57:e0:94:23:b3:3b:ae:ea:2e:5a:5e: ac:e7:f0:92:ec:40:d2:94:fd:20:4a:16:b6:17:7d:f1:fe:17: 08:10:39:bc:d5:82:e8:84:8d:f3:d4:24:e9:d9:5a:1a:2a:0f: c5:36:85:71:c5:51:f6:40:87:b7:fa:5a:ee:54:93:32:54:2d: aa:34:21:13:de:cd:cb:1b:d5:b5:d7:75:30:1c:f4:0b:9f:11: 60:8d:71:87:b6:be:5f:13:af:b3:93:05:08:19:33:f1:ff:98: 47:dc:fe:aa:b9:e3:7a:d3:da:8f:49:c0:86:68:f0:13:f7:44: fb:78:92:33:50:a3:b3:f1:bf:80:f2:8c:ab:81:5b:04:84:ab: d3:e6:47:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuKNyPGr81XgsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjU1Y2E3YzctZTY1Ni00NmM5LTlkMDUtNWVlNGI5ODU1NmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr2jbTsdIDigS804svKinF9C88nMllrKyPjS FRld9UIDUB99xBbvTo68bcAZRBUnzrTMb3L88BMS300rGn9QPXnzYnCM/VA0MfPu YXy0vHMCltbyMwK2eocWlQEXUyA8cc0JhByMDyL+ZRT1WHTUuh0BXJX+QvA0nbGM Hj2nxCouZkct+e4Uqf4fw5AqGTeS/56hHoeQqlvy8JckNfobgPQqI2RlO4JRFdbr G8siud3vm7ikuSou8MoOoqvVDmLch+HVoVGYQzIJaqgN/7juZ9xnhtDA3GiGRoPW lRDDqq09bB3JhtvEMPpeenyPg9FYi5kYFA+T4zKx7DL+Mn+52wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKBJCcdqJrEt9ZpZapyavomXBTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDk5NmQwMzQtMDI1Zi0z ZmYzLWI0NTctZTE0N2I4YzI0YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6INnIcVZEe+KurVteooVdK3Nczg9KniduzTn5wOBCYoBOkHPRA5cNu RVtUmYIzei+5ORyLbxM7W6yKwFcT4aMJ9iaf48AMJDr8R5tMbWIGo4c/43fGa3Tk cHwIHDqqfhxkLcwpnkL0hTxbDb89TMrXOhRX4JQjszuu6i5aXqzn8JLsQNKU/SBK FrYXffH+FwgQObzVguiEjfPUJOnZWhoqD8U2hXHFUfZAh7f6Wu5UkzJULao0IRPe zcsb1bXXdTAc9AufEWCNcYe2vl8Tr7OTBQgZM/H/mEfc/qq543rT2o9JwIZo8BP3 RPt4kjNQo7Pxv4DyjKuBWwSEq9PmRxA= -----END CERTIFICATE-----Generated at Sun Apr 27 10:51:56 2025 by rpki-client