$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72af559c-7d02-3bde-bb6c-9036943b598b.roa File: 72af559c-7d02-3bde-bb6c-9036943b598b.roa (raw, json) Hash identifier: AbwxlXDSwGbDBQ0UpihJuNgHINMvHmkr4WK1HS5OXB8= Subject key identifier: CD:E5:F0:71:85:DD:1A:34:B6:C1:6F:97:7F:C4:E2:28:58:6D:7A:C3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE6087F1C1B4AD9EA6B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72af559c-7d02-3bde-bb6c-9036943b598b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e6:08:7f:1c:1b:4a:d9:ea:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=59a9f46d-05eb-4100-ad83-a6593c005ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:23:f0:f2:8a:58:fb:63:67:c3:78:d6:06:18: c0:90:72:96:b4:27:7e:e8:b3:55:02:9a:1b:46:6d: 95:5c:c8:af:d5:ba:14:53:ad:10:f5:84:90:1a:b3: 55:1b:94:b6:a7:fe:69:b9:71:52:78:cc:21:5d:04: ae:1b:17:ef:1d:d7:37:cc:75:3f:16:94:71:fc:b0: eb:ca:e0:66:46:0b:92:07:fe:2e:2c:ad:b3:e2:76: 29:59:2c:99:09:26:2c:3d:70:e5:53:ca:6c:25:a0: c2:73:36:0d:47:97:cc:5d:20:52:e7:af:0a:ed:97: a5:7e:b0:6e:28:92:a6:50:8d:b3:fa:f3:d4:ee:b1: 47:f2:6d:61:77:64:a8:5d:56:28:2e:23:5a:40:29: 97:ff:02:19:f2:52:f1:b3:f3:54:ba:69:97:04:69: 27:2e:75:8c:0c:ab:47:53:81:00:d1:99:ee:08:cd: d1:63:e7:d1:ac:15:dd:26:10:d4:3d:8d:56:3b:db: b6:29:20:86:5a:fc:77:e0:db:5a:d1:86:ca:a0:20: ca:57:a7:6c:88:b4:d9:28:4e:17:dd:7d:83:18:27: 2f:5e:eb:f9:32:16:e9:f2:71:c8:9b:85:58:ab:33: 8e:74:c1:33:5b:12:5d:2e:d8:29:6d:8e:48:9b:e3: 3b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:F0:71:85:DD:1A:34:B6:C1:6F:97:7F:C4:E2:28:58:6D:7A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72af559c-7d02-3bde-bb6c-9036943b598b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:93:c6:a6:15:c8:26:d4:94:60:e0:60:09:af:ca:3b:4f:cb: 3c:a5:75:89:c5:e2:d4:08:f0:da:6c:93:a0:0a:dd:68:ff:e4: 42:49:20:f4:ff:2e:0d:64:6c:ef:55:cc:7e:ff:02:dc:37:6d: 82:05:39:23:71:34:8f:01:4f:c8:0f:da:3c:5f:c2:74:ed:e6: e9:0e:61:c9:ab:a6:07:af:85:b6:56:e3:8e:1a:4a:f6:2d:9d: 8a:65:97:c7:9e:e6:1b:58:5a:c2:36:b3:c2:ad:df:1d:85:de: 0d:e2:41:ea:6a:86:a8:62:c6:57:42:38:65:9f:f2:d6:83:4d: af:ad:dc:85:fd:b3:08:5a:99:1b:be:0e:52:8f:0f:e5:eb:c4: 50:12:b8:d7:ce:2c:0d:d5:6a:51:b6:8b:a8:ab:e9:fc:09:7f: f8:f9:94:b9:47:dd:ec:5c:fb:89:1a:50:3a:f2:e4:c7:97:83: 59:25:2e:21:24:9a:db:32:9a:d5:b8:e4:1f:ed:4d:8d:b5:cd: da:69:5d:c0:1e:55:a2:96:95:6b:08:32:bf:30:60:e6:a7:60: 54:92:a7:46:a5:28:88:3f:f0:15:9a:64:9e:a2:da:d9:96:ab: c9:0d:54:02:9a:25:d0:a7:df:d6:4b:e7:4a:96:13:1e:1a:67: 50:aa:f0:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuYIfxwbStnqa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTlhOWY0NmQtMDVlYi00MTAwLWFkODMtYTY1OTNjMDA1ZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyPw8opY+2Nnw3jWBhjAkHKWtCd+6LNVApob Rm2VXMiv1boUU60Q9YSQGrNVG5S2p/5puXFSeMwhXQSuGxfvHdc3zHU/FpRx/LDr yuBmRguSB/4uLK2z4nYpWSyZCSYsPXDlU8psJaDCczYNR5fMXSBS568K7ZelfrBu KJKmUI2z+vPU7rFH8m1hd2SoXVYoLiNaQCmX/wIZ8lLxs/NUummXBGknLnWMDKtH U4EA0ZnuCM3RY+fRrBXdJhDUPY1WO9u2KSCGWvx34Nta0YbKoCDKV6dsiLTZKE4X 3X2DGCcvXuv5Mhbp8nHIm4VYqzOOdMEzWxJdLtgpbY5Im+M7BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3l8HGF3Ro0tsFvl3/E4ihYbXrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzJhZjU1OWMtN2QwMi0z YmRlLWJiNmMtOTAzNjk0M2I1OThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARin5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACTxqYVyCbUlGDgYAmvyjtPyzyldYnF4tQI8Npsk6AK3Wj/5EJJIPT/ Lg1kbO9VzH7/Atw3bYIFOSNxNI8BT8gP2jxfwnTt5ukOYcmrpgevhbZW444aSvYt nYpll8ee5htYWsI2s8Kt3x2F3g3iQepqhqhixldCOGWf8taDTa+t3IX9swhamRu+ DlKPD+XrxFASuNfOLA3ValG2i6ir6fwJf/j5lLlH3exc+4kaUDry5MeXg1klLiEk mtsymtW45B/tTY21zdppXcAeVaKWlWsIMr8wYOanYFSSp0alKIg/8BWaZJ6i2tmW q8kNVAKaJdCn39ZL50qWEx4aZ1Cq8HY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:37 2025 by rpki-client