$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/591ae5de-c246-3f60-a2e9-6c7bf6e11477.roa File: 591ae5de-c246-3f60-a2e9-6c7bf6e11477.roa (raw, json) Hash identifier: PM9rrGlSJ4AlfLtMuSk0aIR4Figkwg9IZhT8nH424qQ= Subject key identifier: B5:F6:7E:EB:5A:76:B1:CF:ED:CB:96:EA:D1:A0:45:DD:6E:2C:2A:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE442B6CDADD99F780790 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/591ae5de-c246-3f60-a2e9-6c7bf6e11477.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e4:42:b6:cd:ad:d9:9f:78:07:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=38614129-903c-41ca-b972-53e2ccc6e3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:e1:d6:5f:30:8e:76:bd:09:78:e4:ad:15:b0: b6:91:53:4b:16:b3:f8:81:f4:54:12:69:6d:3a:d5: 7b:4a:3c:7e:12:d1:c5:2b:93:9b:92:b7:53:92:a8: 20:7f:26:ce:a8:06:da:e6:0d:54:b4:1a:5b:5b:72: 4f:cf:0f:7a:dd:78:89:bd:3c:a9:f4:e6:5f:a4:6b: 58:82:a6:27:68:22:1c:53:ed:e4:49:7c:0c:7c:e3: fb:35:90:9d:32:c0:69:4a:86:d6:cb:d9:06:48:3f: 53:6b:48:c1:83:53:c4:55:ba:33:cc:e4:48:a3:fa: 5f:20:c4:9e:d4:60:5b:65:da:9e:8b:d4:17:3d:57: cf:24:fe:90:21:8b:70:a5:36:c6:93:5a:3d:f8:1b: d8:45:9f:70:64:e2:2b:07:ca:b7:40:94:3e:60:e7: a8:1c:0b:5d:c5:43:72:e9:90:40:c9:c0:2c:c5:26: 03:84:cc:ad:07:b1:d7:3e:55:b6:9f:fb:c6:18:c7: 67:ac:df:24:a1:87:17:47:d9:fb:99:73:a6:52:9b: 78:54:58:fc:7a:dc:36:9c:2a:85:96:25:60:e5:14: 2c:a8:17:52:25:ea:c9:48:f3:6c:c8:4a:56:46:f7: 6c:c7:71:de:b4:39:6d:0c:22:67:bd:51:c7:01:e8: 1d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F6:7E:EB:5A:76:B1:CF:ED:CB:96:EA:D1:A0:45:DD:6E:2C:2A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/591ae5de-c246-3f60-a2e9-6c7bf6e11477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7c:a5:2a:4d:a5:fb:22:43:2d:64:68:45:b6:b8:3a:4d:cd: b0:78:2d:71:6d:e3:3d:b4:2f:ee:90:d9:44:ec:d0:fb:a1:ae: 46:ea:55:32:03:33:5c:2c:aa:75:b1:08:8b:5c:45:f0:af:b6: 17:4a:27:e8:6c:ae:01:c9:14:0f:62:11:27:f1:db:8a:1a:d7: 2c:ea:45:ca:d0:9b:43:b3:5c:d6:de:9a:61:54:af:16:af:ba: f1:63:af:68:bf:e7:af:ae:23:d6:67:8f:7f:94:09:6f:67:38: 00:25:22:5e:bb:fa:b3:64:db:21:fa:4e:f3:48:f7:2c:d9:53: 11:21:b3:73:ed:f1:20:e6:2e:6f:6e:02:86:ac:59:38:86:25: 4d:c7:37:da:c8:7f:0a:a3:db:a0:38:1c:dd:a9:2c:c8:e9:b9: f3:35:2f:c9:a4:a5:a0:c8:2d:e9:97:6a:55:8c:29:a5:7b:63: 59:b2:f9:05:ce:5b:b6:a2:0e:19:b1:19:d9:f0:6f:bb:5f:92: 59:7e:2d:d3:0d:d9:38:4c:c0:0d:0e:a0:eb:6c:c0:80:1b:42: 3a:9f:0c:7c:e6:01:8e:0a:86:8e:08:98:77:c6:21:c7:c0:37: 44:a3:3d:d5:bf:a2:ea:10:21:bb:3f:eb:3e:72:25:58:98:8a: 12:8a:12:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuRCts2t2Z94B5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Mzg2MTQxMjktOTAzYy00MWNhLWI5NzItNTNlMmNjYzZlM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+OHWXzCOdr0JeOStFbC2kVNLFrP4gfRUEmlt OtV7Sjx+EtHFK5ObkrdTkqggfybOqAba5g1UtBpbW3JPzw963XiJvTyp9OZfpGtY gqYnaCIcU+3kSXwMfOP7NZCdMsBpSobWy9kGSD9Ta0jBg1PEVbozzORIo/pfIMSe 1GBbZdqei9QXPVfPJP6QIYtwpTbGk1o9+BvYRZ9wZOIrB8q3QJQ+YOeoHAtdxUNy 6ZBAycAsxSYDhMytB7HXPlW2n/vGGMdnrN8koYcXR9n7mXOmUpt4VFj8etw2nCqF liVg5RQsqBdSJerJSPNsyEpWRvdsx3HetDltDCJnvVHHAegdhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLX2futadrHP7cuW6tGgRd1uLCqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTkxYWU1ZGUtYzI0Ni0z ZjYwLWEyZTktNmM3YmY2ZTExNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC58pSpNpfsiQy1kaEW2uDpNzbB4LXFt4z20L+6Q2UTs0PuhrkbqVTID M1wsqnWxCItcRfCvthdKJ+hsrgHJFA9iESfx24oa1yzqRcrQm0OzXNbemmFUrxav uvFjr2i/56+uI9Znj3+UCW9nOAAlIl67+rNk2yH6TvNI9yzZUxEhs3Pt8SDmLm9u AoasWTiGJU3HN9rIfwqj26A4HN2pLMjpufM1L8mkpaDILemXalWMKaV7Y1my+QXO W7aiDhmxGdnwb7tfkll+LdMN2ThMwA0OoOtswIAbQjqfDHzmAY4Kho4ImHfGIcfA N0SjPdW/ouoQIbs/6z5yJViYihKKEnY= -----END CERTIFICATE-----Generated at Mon Apr 28 00:04:28 2025 by rpki-client