$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a17610f-38b4-378c-9f5e-c83654ba2296.roa File: 4a17610f-38b4-378c-9f5e-c83654ba2296.roa (raw, json) Hash identifier: 94cTSXbp2M1d0WdDm6kefL+5/WDLIOYu8ClHrrO25To= Subject key identifier: 58:3A:4C:72:94:EE:EA:7F:84:36:5A:D6:0F:FF:DC:42:4A:7B:54:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5BAD3D0E06850C9BE200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a17610f-38b4-378c-9f5e-c83654ba2296.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5b:ad:3d:0e:06:85:0c:9b:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=41cc0800-c721-4aa2-9b12-8faf214b9222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:21:3a:52:42:6d:d6:81:35:6e:b4:95:ef:40: 32:2c:07:76:68:b3:38:5b:03:bb:6e:88:43:10:13: 0d:8e:27:16:b5:2b:e5:7a:5e:fc:d2:9e:d5:37:59: 53:85:d6:bf:b9:80:fe:9b:ab:bc:f1:4d:95:a6:1e: 4f:c8:7f:5d:de:9a:a1:30:74:0f:ba:12:c3:fd:fb: 73:59:16:cb:3e:9b:6e:3c:82:1c:91:bf:57:70:8c: 4d:cb:4f:be:85:af:27:0a:f8:33:44:bd:e1:23:a6: 6e:22:66:1b:3d:a5:3b:63:a1:28:07:b1:58:d7:ac: fb:1e:30:0c:52:1e:5f:59:df:ca:9a:8a:1d:af:1a: d7:e1:5b:ae:76:8d:2f:4d:75:c8:c8:78:2e:c7:f6: 33:75:c9:f9:d5:fc:81:3d:59:d6:4e:82:db:25:1f: 14:96:a7:3a:57:6d:81:24:ac:4c:20:45:62:16:ba: ad:b1:db:86:f5:95:f1:85:a4:94:f3:b7:7c:24:16: 28:f6:c3:61:64:b3:d5:ae:7d:fd:e3:2a:2b:86:49: 4b:3f:51:b7:a4:aa:52:af:3c:eb:34:ae:3e:47:ba: 8d:f4:fb:78:60:29:79:bb:b0:b5:45:82:ff:96:06: e8:fb:e0:2c:63:81:f3:ed:8c:6b:4b:4a:98:9b:d6: e7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3A:4C:72:94:EE:EA:7F:84:36:5A:D6:0F:FF:DC:42:4A:7B:54:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a17610f-38b4-378c-9f5e-c83654ba2296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:29:5a:6e:40:32:25:fa:5b:f2:98:d0:ef:be:3e:11:96:e7: a7:ea:35:72:d4:08:5d:32:25:74:6c:fd:65:3e:51:c4:23:bc: 97:10:88:0b:32:6c:f5:de:74:57:60:0c:c7:c5:c5:43:9c:10: cf:a2:39:eb:52:95:10:0c:18:31:eb:b6:3b:d3:e4:78:50:fd: ee:ad:6a:bc:8a:4d:b3:40:92:7f:2b:2f:bf:1c:30:5a:bd:1b: 6c:f0:6a:d3:f0:c8:0d:e7:38:ec:3b:1a:f7:e2:3b:97:70:c7: bc:28:17:1e:8c:51:fd:27:d1:d5:92:b7:32:72:65:6c:13:f1: 65:90:e2:6c:43:d3:56:ef:5c:4b:4d:c0:a2:8c:eb:8f:80:d1: c2:c6:78:f3:dd:13:1f:10:13:16:50:69:f0:69:ae:27:09:98: ef:80:9f:b6:b8:a1:60:f8:31:db:fe:b8:b6:a9:df:b6:4a:ab: 0d:44:88:76:b9:7d:67:47:db:c5:6f:ba:c1:62:a3:bd:44:95: c9:9f:e4:17:5d:02:37:3f:ff:12:d1:2c:74:e0:29:24:c6:a1: cf:5c:16:e5:0b:57:ff:74:af:5f:ef:27:c2:79:00:da:25:33: 57:71:19:a8:8d:11:8c:d8:d2:2f:a8:41:ad:5d:83:bb:68:1f: f3:89:5b:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulutPQ4GhQyb4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDFjYzA4MDAtYzcyMS00YWEyLTliMTItOGZhZjIxNGI5MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSE6UkJt1oE1brSV70AyLAd2aLM4WwO7bohD EBMNjicWtSvlel780p7VN1lThda/uYD+m6u88U2Vph5PyH9d3pqhMHQPuhLD/ftz WRbLPptuPIIckb9XcIxNy0++ha8nCvgzRL3hI6ZuImYbPaU7Y6EoB7FY16z7HjAM Uh5fWd/KmoodrxrX4Vuudo0vTXXIyHgux/Yzdcn51fyBPVnWToLbJR8Ulqc6V22B JKxMIEViFrqtsduG9ZXxhaSU87d8JBYo9sNhZLPVrn394yorhklLP1G3pKpSrzzr NK4+R7qN9Pt4YCl5u7C1RYL/lgbo++AsY4Hz7YxrS0qYm9bnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg6THKU7up/hDZa1g//3EJKe1R1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGExNzYxMGYtMzhiNC0z NzhjLTlmNWUtYzgzNjU0YmEyMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARim9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYpWm5AMiX6W/KY0O++PhGW56fqNXLUCF0yJXRs/WU+UcQjvJcQiAsy bPXedFdgDMfFxUOcEM+iOetSlRAMGDHrtjvT5HhQ/e6taryKTbNAkn8rL78cMFq9 G2zwatPwyA3nOOw7GvfiO5dwx7woFx6MUf0n0dWStzJyZWwT8WWQ4mxD01bvXEtN wKKM64+A0cLGePPdEx8QExZQafBpricJmO+An7a4oWD4Mdv+uLap37ZKqw1EiHa5 fWdH28VvusFio71Elcmf5BddAjc//xLRLHTgKSTGoc9cFuULV/90r1/vJ8J5ANol M1dxGaiNEYzY0i+oQa1dg7toH/OJWyQ= -----END CERTIFICATE-----Generated at Sun Apr 27 13:06:02 2025 by rpki-client