$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50277244-12c1-3a9f-97c3-0e2913828da8.roa File: 50277244-12c1-3a9f-97c3-0e2913828da8.roa (raw, json) Hash identifier: gL6Z6p+xeTRHNdNZUyDweFJvLn7iW3PUJO0SaMdZ53U= Subject key identifier: F3:9B:B0:F1:AB:32:BD:FD:B7:D4:E0:6A:31:76:88:A2:3C:57:A6:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE0AB4ED64143682B5173 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50277244-12c1-3a9f-97c3-0e2913828da8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e0:ab:4e:d6:41:43:68:2b:51:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e815ae45-05da-472e-b61a-1ccd7b6c3e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:d4:8b:ea:69:ea:86:13:26:3a:af:6f:40: ff:3c:13:76:dc:8a:67:30:64:8d:e1:e6:8b:1e:d7: a4:ec:a8:53:d3:ea:24:0a:bc:4a:6a:7f:c9:f1:ed: 34:09:af:54:ce:c3:72:45:5a:5b:63:a5:30:1f:2f: 83:86:7a:80:77:34:7d:6b:ec:4b:93:ff:8f:8c:36: c8:20:97:dd:82:71:30:cb:04:97:2e:0e:10:23:01: 34:80:d2:73:d9:05:83:93:30:63:4b:eb:11:69:a9: fd:f7:35:5c:a0:83:f4:91:7a:72:83:2d:a7:54:39: eb:22:71:dd:06:ba:36:58:88:69:48:70:82:7d:77: 78:51:09:36:7b:a4:63:10:7f:05:c6:74:52:1c:9e: ed:2f:fa:cb:bc:d1:c3:27:14:e1:ed:6e:5f:76:8b: 7b:c1:95:fb:88:89:8a:50:ed:c3:2e:56:2a:f7:8a: 89:39:39:30:f6:f4:7e:ed:ac:d3:16:52:df:84:d4: ea:88:07:87:2b:bb:ae:d7:47:a3:52:8a:d0:8c:75: 71:f7:d0:ef:ba:35:86:e9:ea:ae:53:dd:52:c0:a1: f2:94:fb:ff:91:ba:a6:36:a9:48:22:c2:71:98:01: 45:ba:b9:b6:1d:7b:0f:64:a4:c3:24:6a:de:5e:03: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9B:B0:F1:AB:32:BD:FD:B7:D4:E0:6A:31:76:88:A2:3C:57:A6:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50277244-12c1-3a9f-97c3-0e2913828da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:dd:40:e1:cc:72:ea:9c:7a:c6:53:5a:ba:eb:ce:3d:7b:ae: 64:38:be:c4:15:de:25:d0:4c:d6:9a:b2:07:f2:8b:7e:a8:e5: 27:a7:e8:0d:46:01:ce:4d:49:57:24:ae:72:17:ea:9e:87:92: f5:de:16:56:b1:1f:3e:b2:c2:45:19:b6:a6:6e:37:d6:06:13: be:69:64:c7:b8:d7:2a:c7:91:d0:d1:ef:fc:ff:26:68:b8:fa: b5:14:cb:b6:00:45:f0:38:8c:2c:e0:4a:d6:9f:99:08:42:08: aa:7d:f1:a1:b0:f9:e0:6c:03:09:2f:70:79:f7:77:ef:3a:10: e6:39:8e:d9:ac:fc:a2:55:cc:c3:20:e2:a9:e7:c8:1d:39:89: df:0a:d8:5e:19:32:6f:ff:8f:3c:30:13:1f:5d:79:ee:b2:ba: 88:17:dd:6f:73:94:06:57:78:79:ba:81:f6:ba:b3:32:fe:0e: c4:39:14:ed:e4:84:6d:60:ee:f5:8a:33:04:60:7e:cf:76:de: 6e:e1:0f:b5:10:cb:d4:8c:27:4e:10:f3:7d:32:1c:df:51:c7: 27:20:d9:25:52:f5:48:8b:50:a7:b0:c3:60:7b:53:58:8c:03: eb:91:24:45:f7:76:5b:ae:c7:02:72:df:91:fa:61:d5:d0:98: 6b:d0:c4:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuCrTtZBQ2grUXMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTgxNWFlNDUtMDVkYS00NzJlLWI2MWEtMWNjZDdiNmMzZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprnUi+pp6oYTJjqvb0D/PBN23IpnMGSN4eaL Htek7KhT0+okCrxKan/J8e00Ca9UzsNyRVpbY6UwHy+DhnqAdzR9a+xLk/+PjDbI IJfdgnEwywSXLg4QIwE0gNJz2QWDkzBjS+sRaan99zVcoIP0kXpygy2nVDnrInHd Bro2WIhpSHCCfXd4UQk2e6RjEH8FxnRSHJ7tL/rLvNHDJxTh7W5fdot7wZX7iImK UO3DLlYq94qJOTkw9vR+7azTFlLfhNTqiAeHK7uu10ejUorQjHVx99DvujWG6equ U91SwKHylPv/kbqmNqlIIsJxmAFFurm2HXsPZKTDJGreXgMnewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPObsPGrMr39t9TgajF2iKI8V6aFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTAyNzcyNDQtMTJjMS0z YTlmLTk3YzMtMGUyOTEzODI4ZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMXdQOHMcuqcesZTWrrrzj17rmQ4vsQV3iXQTNaasgfyi36o5Sen6A1G Ac5NSVckrnIX6p6HkvXeFlaxHz6ywkUZtqZuN9YGE75pZMe41yrHkdDR7/z/Jmi4 +rUUy7YARfA4jCzgStafmQhCCKp98aGw+eBsAwkvcHn3d+86EOY5jtms/KJVzMMg 4qnnyB05id8K2F4ZMm//jzwwEx9dee6yuogX3W9zlAZXeHm6gfa6szL+DsQ5FO3k hG1g7vWKMwRgfs923m7hD7UQy9SMJ04Q830yHN9Rxycg2SVS9UiLUKeww2B7U1iM A+uRJEX3dluuxwJy35H6YdXQmGvQxDg= -----END CERTIFICATE-----Generated at Sun Apr 27 10:36:13 2025 by rpki-client