$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b857cbe-87fa-35f9-b91c-86c0410e5dff.roa File: 5b857cbe-87fa-35f9-b91c-86c0410e5dff.roa (raw, json) Hash identifier: YuM2nPYPP3vu4eBwcNEkiIkhAlWIa0p9E1xtypLPhLI= Subject key identifier: 86:F8:0A:D3:36:F0:E7:1E:36:8B:E0:FF:43:A7:18:68:54:D6:CD:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE09FF692B14E8A8D7600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b857cbe-87fa-35f9-b91c-86c0410e5dff.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e0:9f:f6:92:b1:4e:8a:8d:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b28de1fd-29f6-452c-8df1-970049e595c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:3e:0b:9e:96:4c:60:f1:dd:3c:50:c5:f6: 4d:a6:54:be:b3:f0:6d:d0:2c:4c:d8:d0:c3:4b:7e: 9d:e0:8a:a9:5d:31:72:8c:e9:8b:bc:9a:49:a0:21: 99:26:c5:9e:f3:74:0c:37:8e:93:21:01:4a:a6:62: 55:0b:07:1e:9f:05:53:5a:50:06:a3:46:9f:5c:3c: 29:c4:95:df:93:8c:78:14:fe:24:ef:bb:0c:bf:da: 1d:ae:27:de:e0:c1:c0:ce:ec:b7:ba:84:0f:4b:7f: 00:e7:0f:1d:2e:5a:ee:82:4d:44:77:d3:fb:cb:61: 0b:80:ab:80:3f:f8:91:f1:a9:6d:cf:2f:f0:0e:a4: ae:eb:d7:98:23:7d:07:4d:2a:20:38:68:e3:bf:3b: 13:b1:c0:6b:61:08:2b:f8:f0:1b:2d:72:a0:73:cc: 4e:10:22:b0:22:ab:ad:2d:c7:01:75:53:55:87:7b: 4a:c3:eb:42:08:64:f4:c5:e4:f1:fb:b6:34:b5:d8: ca:8c:90:8e:2a:08:a2:ea:2f:7c:84:57:bc:79:e2: 09:d7:da:77:28:86:98:07:b2:f6:d5:78:92:71:48: f2:d9:06:f2:08:df:de:59:75:4d:3f:58:24:65:4f: 16:d6:18:1f:8f:2b:a3:90:75:62:55:c2:24:e0:0a: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F8:0A:D3:36:F0:E7:1E:36:8B:E0:FF:43:A7:18:68:54:D6:CD:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b857cbe-87fa-35f9-b91c-86c0410e5dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:ba:b3:db:b2:ed:b0:d7:34:1e:a9:d5:dd:55:df:88:1a:cd: df:3d:93:72:57:e0:34:15:70:48:8d:0d:76:ca:fc:ae:99:79: ae:ec:86:53:ab:ec:d0:ab:16:12:e5:bd:a2:08:f4:29:1f:ca: ad:6b:e2:56:d5:b1:15:25:4b:63:19:8e:45:3b:88:b4:93:b4: b8:bb:e2:ad:b6:64:e5:3d:94:62:6d:e7:6d:1c:c5:04:b3:07: 1a:db:ca:05:43:f1:a0:8b:64:a8:64:15:08:5a:b1:a3:31:5a: fb:16:39:93:eb:9e:11:a0:cf:11:ad:94:e9:24:52:0f:d6:45: cd:59:01:8c:a8:a0:04:e5:ba:4a:f5:d5:7d:34:eb:50:21:09: 72:ab:1e:d1:ea:7a:49:65:07:37:2c:6b:a6:8a:63:63:db:d2: 2d:5f:2a:95:3c:01:cd:55:f2:85:f1:e7:a5:7d:3d:0f:f1:87: 2f:71:72:ef:37:89:b3:2f:32:e8:b9:1a:bd:d7:70:29:0e:67: 2d:27:bf:18:fd:3e:b3:39:b4:fb:70:3a:24:4e:d5:71:ec:81: 9e:6b:af:8d:cc:c7:57:86:cf:a5:1b:7d:4c:d8:e3:ee:b4:98: dc:b3:5b:ea:11:b5:09:c9:c4:f8:e3:3b:09:72:a7:1e:bf:32: 32:7c:38:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuCf9pKxToqNdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjI4ZGUxZmQtMjlmNi00NTJjLThkZjEtOTcwMDQ5ZTU5NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Nw+C56WTGDx3TxQxfZNplS+s/Bt0CxM2NDD S36d4IqpXTFyjOmLvJpJoCGZJsWe83QMN46TIQFKpmJVCwcenwVTWlAGo0afXDwp xJXfk4x4FP4k77sMv9odrife4MHAzuy3uoQPS38A5w8dLlrugk1Ed9P7y2ELgKuA P/iR8altzy/wDqSu69eYI30HTSogOGjjvzsTscBrYQgr+PAbLXKgc8xOECKwIqut LccBdVNVh3tKw+tCCGT0xeTx+7Y0tdjKjJCOKgii6i98hFe8eeIJ19p3KIaYB7L2 1XiScUjy2QbyCN/eWXVNP1gkZU8W1hgfjyujkHViVcIk4AqaLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb4CtM28OceNovg/0OnGGhU1s0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWI4NTdjYmUtODdmYS0z NWY5LWI5MWMtODZjMDQxMGU1ZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMy6s9uy7bDXNB6p1d1V34gazd89k3JX4DQVcEiNDXbK/K6Zea7shlOr 7NCrFhLlvaII9Ckfyq1r4lbVsRUlS2MZjkU7iLSTtLi74q22ZOU9lGJt520cxQSz BxrbygVD8aCLZKhkFQhasaMxWvsWOZPrnhGgzxGtlOkkUg/WRc1ZAYyooATlukr1 1X0061AhCXKrHtHqekllBzcsa6aKY2Pb0i1fKpU8Ac1V8oXx56V9PQ/xhy9xcu83 ibMvMui5Gr3XcCkOZy0nvxj9PrM5tPtwOiRO1XHsgZ5rr43Mx1eGz6UbfUzY4+60 mNyzW+oRtQnJxPjjOwlypx6/MjJ8OC4= -----END CERTIFICATE-----Generated at Sun Apr 27 15:17:49 2025 by rpki-client