$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7079534f-314d-33c3-ac35-c2649a95528b.roa File: 7079534f-314d-33c3-ac35-c2649a95528b.roa (raw, json) Hash identifier: 7wDW1fR+Kti26cFWQ3IIA37z2hxygYgor5YS6HzaHXQ= Subject key identifier: 71:AA:AD:14:D6:BE:3A:5A:32:8E:BC:13:9E:FF:9E:E6:C3:01:79:18 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5A87F462FA6CE9580380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7079534f-314d-33c3-ac35-c2649a95528b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5a:87:f4:62:fa:6c:e9:58:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b25d23c7-2ff0-492a-8d67-51eccaa042d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:d0:ea:7c:c0:7c:fa:30:a6:2f:cc:93:1b: 08:48:06:3c:12:72:82:dd:52:d4:f4:77:b1:27:59: 5d:c0:77:f8:10:df:7e:83:85:70:73:13:c4:46:69: e4:87:76:93:06:e8:ba:3d:57:e2:df:f8:e5:04:a5: 25:b1:0d:ca:da:e6:b4:6b:88:c7:80:8c:e9:b9:f1: 77:eb:f0:96:66:f2:b7:35:6f:bb:8d:96:93:77:5e: a2:4c:81:5b:17:49:cf:71:db:8c:68:35:33:ac:c0: 3f:e9:12:58:58:31:03:3c:98:1e:a2:9c:5d:78:93: 7c:df:89:5b:03:e6:3d:d7:7b:c9:b2:8c:cf:7e:92: 2f:fc:da:f8:2d:23:b4:58:4b:29:c7:7b:0f:64:83: 92:3b:7b:f8:48:ff:d2:df:a5:dc:7b:0c:de:89:ed: 12:e6:d8:16:6a:dd:2e:8e:8e:1c:6d:cd:73:c5:01: 63:11:5c:5b:b5:bd:43:b3:1a:01:1e:6b:99:a7:88: ef:c0:fa:63:a3:56:86:43:63:17:30:07:cd:1f:f5: 9f:66:75:5b:c4:fe:0f:c2:0f:37:cc:72:0c:2a:c1: 46:43:91:7f:4b:8f:d8:31:ab:2d:18:23:1a:26:27: 64:88:db:cc:0f:e7:9e:b8:61:80:0d:07:29:86:ba: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:AD:14:D6:BE:3A:5A:32:8E:BC:13:9E:FF:9E:E6:C3:01:79:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7079534f-314d-33c3-ac35-c2649a95528b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:92:ff:b7:22:69:31:67:f7:5f:7e:9f:e3:68:15:fe:d2:10: 94:3a:fb:58:91:03:55:32:af:2d:ac:0d:14:7b:0d:2e:c1:f3: f8:39:55:18:6d:83:1c:0c:e1:f0:20:a4:1c:5d:c8:80:74:db: ce:4d:a8:71:c7:09:0b:f4:7c:48:6c:33:a3:57:2e:ae:fc:f0: ae:5b:89:c4:e9:78:fc:74:e7:e2:54:a1:30:f5:96:17:40:79: 05:1a:bc:99:9e:3c:00:2c:3a:b0:bf:33:ae:b7:8c:19:e9:13: 4d:66:d9:da:94:88:41:26:86:02:37:b6:2d:3d:59:38:4b:50: ea:34:2b:83:ed:29:06:96:e4:5c:1c:2b:85:6b:3d:7d:05:d2: da:62:a5:be:29:cc:ac:a2:f3:b2:c1:14:22:44:0b:bb:22:ac: c2:c7:fb:6b:67:7c:88:54:b0:eb:a1:97:20:e7:a9:cd:f4:73: a1:6f:25:55:6c:62:a9:5f:4b:0d:ef:c2:68:88:21:03:f7:a7: 5a:f2:aa:aa:da:5a:07:fa:5f:ef:67:bc:ae:2f:6c:b8:cc:56: e4:bd:fb:41:0d:e6:84:12:d8:87:3a:84:5b:b1:27:9c:ed:89: ae:71:48:bd:32:aa:27:a8:65:dd:db:26:b6:a3:cc:bb:05:18: 09:f4:3b:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulqH9GL6bOlYA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjI1ZDIzYzctMmZmMC00OTJhLThkNjctNTFlY2NhYTA0MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnXQ6nzAfPowpi/MkxsISAY8EnKC3VLU9Hex J1ldwHf4EN9+g4VwcxPERmnkh3aTBui6PVfi3/jlBKUlsQ3K2ua0a4jHgIzpufF3 6/CWZvK3NW+7jZaTd16iTIFbF0nPcduMaDUzrMA/6RJYWDEDPJgeopxdeJN834lb A+Y913vJsozPfpIv/Nr4LSO0WEspx3sPZIOSO3v4SP/S36Xcewzeie0S5tgWat0u jo4cbc1zxQFjEVxbtb1DsxoBHmuZp4jvwPpjo1aGQ2MXMAfNH/WfZnVbxP4Pwg83 zHIMKsFGQ5F/S4/YMastGCMaJidkiNvMD+eeuGGADQcphrqHywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGqrRTWvjpaMo68E57/nubDAXkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzA3OTUzNGYtMzE0ZC0z M2MzLWFjMzUtYzI2NDlhOTU1MjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2S/7ciaTFn919+n+NoFf7SEJQ6+1iRA1Uyry2sDRR7DS7B8/g5VRht gxwM4fAgpBxdyIB0285NqHHHCQv0fEhsM6NXLq788K5bicTpePx05+JUoTD1lhdA eQUavJmePAAsOrC/M663jBnpE01m2dqUiEEmhgI3ti09WThLUOo0K4PtKQaW5Fwc K4VrPX0F0tpipb4pzKyi87LBFCJEC7sirMLH+2tnfIhUsOuhlyDnqc30c6FvJVVs YqlfSw3vwmiIIQP3p1ryqqraWgf6X+9nvK4vbLjMVuS9+0EN5oQS2Ic6hFuxJ5zt ia5xSL0yqieoZd3bJrajzLsFGAn0O5s= -----END CERTIFICATE-----Generated at Tue Apr 29 09:07:18 2025 by rpki-client