$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa File: 83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa (raw, json) Hash identifier: 5jPQ3GJmYEJD8XSHtGelDEjXw2XqoJ2Fxh1tKHS0Rsg= Subject key identifier: 38:A5:07:5C:DC:07:DC:14:8D:B4:F9:1D:21:0A:AF:0E:CB:ED:CA:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADB0C1033A7CC67AFD480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 70.41.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:db:0c:10:33:a7:cc:67:af:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9aafd4ec-60cc-4e94-b350-8f750fc983ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:17:c8:a6:15:6a:af:a7:7f:d6:7d:c3:0e:9a: a4:cc:39:aa:47:6a:38:ea:a8:57:38:00:9d:4a:36: f5:99:a3:3a:b0:fd:95:a8:3f:da:8f:a0:80:48:d6: 8c:4e:78:c0:f5:48:d7:9f:22:b3:57:c6:4e:c7:3d: 98:a6:d0:53:f0:8e:11:a1:99:f9:58:47:25:d2:a5: 34:a4:6f:c3:8d:13:4f:b9:84:4f:b4:9b:36:39:29: ec:09:c8:5d:6b:5d:3f:c6:25:20:ea:43:4e:2f:bc: 18:8a:5d:55:12:cc:b8:29:3a:a3:4f:d1:c3:fd:3d: 6b:36:35:4d:5c:ed:14:70:a3:13:f8:9d:4c:fa:64: d2:de:32:52:f0:5a:d7:73:44:89:30:30:ec:fb:fc: 64:d2:c9:cd:80:e8:83:b1:81:ab:eb:63:59:bd:1d: 44:d0:8a:21:75:1a:84:42:9f:c3:65:4c:73:3f:fb: 4c:de:b5:46:df:ef:a5:ac:37:78:fd:f7:46:46:b6: 81:8c:a1:b0:82:94:7f:2b:7f:37:35:4a:d2:6e:51: 0f:b0:41:89:b2:14:5b:cd:50:94:58:9f:df:11:14: d6:9c:1b:a1:aa:a6:a5:0f:7a:96:49:0e:75:13:ba: 0d:71:b7:9a:42:29:2a:12:dd:8f:34:d7:4c:21:dc: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A5:07:5C:DC:07:DC:14:8D:B4:F9:1D:21:0A:AF:0E:CB:ED:CA:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:7a:08:64:47:b6:e9:ee:db:15:a1:dc:06:f5:8f:9c:f5:3c: fc:c0:68:96:97:52:f5:7b:32:a8:8a:fe:88:aa:86:8b:47:e6: 29:e1:2b:93:c6:57:88:e4:e6:22:2b:ae:df:7d:18:bb:05:6c: 36:bd:89:b7:db:8f:c2:bf:55:bf:72:95:b6:e9:af:c8:bb:74: fe:19:2c:87:fe:15:3d:13:36:31:d0:05:97:41:c2:36:65:17: 44:77:bd:b8:98:ca:06:47:08:83:ae:4b:76:85:2d:57:f8:48: dc:82:7c:75:52:77:f9:53:2b:bb:5d:f6:67:ab:be:0f:78:c5: 7e:97:f0:3a:0f:6a:33:7a:f5:23:ba:22:2b:69:18:78:f2:c1: 7b:91:59:f6:af:d3:e5:c3:09:c5:06:de:15:b3:f1:fc:7e:85: de:0c:a4:b6:0a:b1:e3:6a:04:19:d0:c9:fb:99:79:39:cd:07: 2c:5a:38:a2:ce:dc:37:f1:e2:9d:da:63:48:18:2f:06:ff:cc: a5:f3:d9:1f:46:6d:61:bb:c5:7d:08:e8:42:9a:f8:24:0a:56: b5:2b:21:aa:13:83:0e:db:b0:5a:9e:e9:0b:2d:a6:a1:0c:9c: fa:e8:7a:d4:d1:8a:33:f4:15:fb:1b:3f:d6:84:e5:df:bf:0b: cc:ae:fa:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutsMEDOnzGev1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWFhZmQ0ZWMtNjBjYy00ZTk0LWIzNTAtOGY3NTBmYzk4M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBfIphVqr6d/1n3DDpqkzDmqR2o46qhXOACd Sjb1maM6sP2VqD/aj6CASNaMTnjA9UjXnyKzV8ZOxz2YptBT8I4RoZn5WEcl0qU0 pG/DjRNPuYRPtJs2OSnsCchda10/xiUg6kNOL7wYil1VEsy4KTqjT9HD/T1rNjVN XO0UcKMT+J1M+mTS3jJS8FrXc0SJMDDs+/xk0snNgOiDsYGr62NZvR1E0IohdRqE Qp/DZUxzP/tM3rVG3++lrDd4/fdGRraBjKGwgpR/K383NUrSblEPsEGJshRbzVCU WJ/fERTWnBuhqqalD3qWSQ51E7oNcbeaQikqEt2PNNdMIdzSdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDilB1zcB9wUjbT5HSEKrw7L7cqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODNlMGYxNWMtMmRkMy0z MzQ0LWI3MjQtNDQ4N2U2YTdkNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANB6CGRHtunu2xWh3Ab1j5z1PPzAaJaXUvV7MqiK/oiqhotH5inhK5PG V4jk5iIrrt99GLsFbDa9ibfbj8K/Vb9ylbbpr8i7dP4ZLIf+FT0TNjHQBZdBwjZl F0R3vbiYygZHCIOuS3aFLVf4SNyCfHVSd/lTK7td9mervg94xX6X8DoPajN69SO6 IitpGHjywXuRWfav0+XDCcUG3hWz8fx+hd4MpLYKseNqBBnQyfuZeTnNByxaOKLO 3Dfx4p3aY0gYLwb/zKXz2R9GbWG7xX0I6EKa+CQKVrUrIaoTgw7bsFqe6QstpqEM nProetTRijP0FfsbP9aE5d+/C8yu+p0= -----END CERTIFICATE-----Generated at Sun Apr 27 01:03:30 2025 by rpki-client