$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f504332-53f7-383e-a90d-50204e1c8037.roa File: 7f504332-53f7-383e-a90d-50204e1c8037.roa (raw, json) Hash identifier: iWtRMnAyO+KQ7PYhq39nmOfZr5qEHHKHFaL8LdWKhH8= Subject key identifier: 35:81:86:3A:8A:F0:4D:5E:9F:4D:93:EB:9C:80:CB:D9:12:09:A5:3A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA56CA9E3058D93A24DD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f504332-53f7-383e-a90d-50204e1c8037.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:56:ca:9e:30:58:d9:3a:24:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7514eaf2-f413-4618-9fc1-bedafc3c5021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:59:10:23:36:0b:d6:8c:12:b2:30:95:30: d4:da:1e:2b:19:c9:9e:7b:43:db:eb:71:e7:bd:a0: 3f:36:f8:7b:fe:0e:33:a7:81:4e:14:78:01:d2:9e: bd:44:38:12:05:a9:4d:56:01:e4:6e:2f:69:43:06: 9a:a5:a1:07:f1:f2:5d:7e:4a:c6:58:06:cc:b1:f0: 90:cc:da:17:60:3b:30:13:92:64:ca:a6:86:ad:d4: 4f:ef:62:c3:5a:b1:01:65:4d:14:54:e8:c3:40:6c: cc:dc:e0:91:23:69:5c:0d:92:60:cb:29:20:84:8f: e1:e4:0c:59:48:a1:dd:78:ab:9e:71:4f:f3:67:b2: a2:9a:19:9f:b8:b4:a8:4a:9f:23:32:2b:0c:27:2d: e4:f6:3e:51:42:df:f1:e1:29:e2:ea:16:20:eb:10: 56:f6:c0:81:52:07:a6:9f:b3:b6:c1:ec:99:c1:8e: 7f:be:a5:3f:5e:be:e2:50:76:d8:5a:36:e0:a4:04: b6:39:45:a7:1b:d0:cc:26:28:6f:27:0a:0f:03:7d: 2e:c9:c8:12:06:eb:3a:2c:d9:3e:7a:df:12:1a:ae: bb:bd:b1:91:12:bb:c1:dc:88:5a:42:d2:9d:4a:c0: e1:90:e9:fe:1b:e2:0e:6f:5e:44:79:67:ef:a9:25: 63:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:81:86:3A:8A:F0:4D:5E:9F:4D:93:EB:9C:80:CB:D9:12:09:A5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7f504332-53f7-383e-a90d-50204e1c8037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f9:4b:9f:b6:88:00:61:d9:87:4d:2a:d5:18:31:eb:c9:e5: dc:fd:ed:77:6c:22:e2:86:75:4b:f5:4f:12:38:0a:86:4a:75: 08:88:76:c1:89:ec:c0:3f:c2:0b:3b:b7:b4:7d:e3:93:ed:7a: e4:03:b6:ea:a3:fd:98:56:7d:b3:fd:2f:09:b9:96:dc:04:b4: 4f:62:41:8e:49:32:d8:1f:9b:d6:14:9f:73:f7:41:60:2a:c9: 37:70:29:b4:bb:34:20:c9:79:b2:7e:02:c3:34:0a:75:01:b0: b5:a2:ef:19:bb:41:c1:4f:c4:8f:69:df:bd:9a:fc:ea:1b:bc: 05:5e:f9:3d:44:f4:6b:33:f6:ae:d8:f0:4e:6f:db:98:59:68: 1e:b4:54:ca:2c:60:5a:37:c5:cd:6a:50:e7:07:19:54:20:35: e8:bd:5e:24:ce:d4:fc:44:01:b8:a1:27:ff:db:12:d8:37:cd: ba:f5:a9:b0:46:c1:32:80:79:b6:2c:13:db:59:3a:5d:df:5b: 09:5e:ea:2d:bf:33:2a:c1:08:81:40:54:a0:9a:dc:b5:ae:98: a1:6a:c7:58:4c:ac:b1:7f:c3:d7:15:69:01:37:33:32:23:95: 9d:58:37:5d:6e:0a:58:fd:69:3b:4b:39:50:c1:d6:75:f8:16: bf:0a:2b:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulbKnjBY2Tok3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzUxNGVhZjItZjQxMy00NjE4LTlmYzEtYmVkYWZjM2M1MDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOdZECM2C9aMErIwlTDU2h4rGcmee0Pb63Hn vaA/Nvh7/g4zp4FOFHgB0p69RDgSBalNVgHkbi9pQwaapaEH8fJdfkrGWAbMsfCQ zNoXYDswE5JkyqaGrdRP72LDWrEBZU0UVOjDQGzM3OCRI2lcDZJgyykghI/h5AxZ SKHdeKuecU/zZ7KimhmfuLSoSp8jMisMJy3k9j5RQt/x4Sni6hYg6xBW9sCBUgem n7O2weyZwY5/vqU/Xr7iUHbYWjbgpAS2OUWnG9DMJihvJwoPA30uycgSBus6LNk+ et8SGq67vbGRErvB3IhaQtKdSsDhkOn+G+IOb15EeWfvqSVj3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWBhjqK8E1en02T65yAy9kSCaU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2Y1MDQzMzItNTNmNy0z ODNlLWE5MGQtNTAyMDRlMWM4MDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP5S5+2iABh2YdNKtUYMevJ5dz97XdsIuKGdUv1TxI4CoZKdQiIdsGJ 7MA/wgs7t7R945PteuQDtuqj/ZhWfbP9Lwm5ltwEtE9iQY5JMtgfm9YUn3P3QWAq yTdwKbS7NCDJebJ+AsM0CnUBsLWi7xm7QcFPxI9p372a/OobvAVe+T1E9Gsz9q7Y 8E5v25hZaB60VMosYFo3xc1qUOcHGVQgNei9XiTO1PxEAbihJ//bEtg3zbr1qbBG wTKAebYsE9tZOl3fWwle6i2/MyrBCIFAVKCa3LWumKFqx1hMrLF/w9cVaQE3MzIj lZ1YN11uClj9aTtLOVDB1nX4Fr8KK0I= -----END CERTIFICATE-----Generated at Sun Apr 27 19:40:27 2025 by rpki-client