$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa File: 8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa (raw, json) Hash identifier: 4alXI/JcUp6+1Vj1/QSOkqB1/AFYJvq8jnFpnJ52z2I= Subject key identifier: 4A:1B:3B:CD:C4:C5:61:38:9E:08:81:8E:EC:EF:15:6D:A3:16:5A:92 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE395CC7A76E45F1BDE40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e3:95:cc:7a:76:e4:5f:1b:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5b0dcbf6-4e69-44c3-af44-5dec8becebbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:96:69:95:a2:13:e3:af:b8:99:41:c2:2e:2e: fa:fe:fe:8e:19:93:af:a7:6f:73:f6:65:fe:51:32: 9d:31:46:38:9a:a0:dd:4d:7a:49:f4:17:b6:06:43: a5:d6:eb:53:a3:5d:b5:00:af:c9:27:b3:36:d5:6f: ee:05:41:c8:7d:ac:4e:3a:9e:c5:33:c5:dc:99:e2: 57:27:c9:58:13:e8:6c:d5:6d:b4:35:94:48:54:98: 07:01:98:69:88:3b:ee:2e:f0:ce:34:4f:d3:23:0c: 28:36:ec:a6:76:75:b1:ff:7d:04:b0:41:89:ca:82: 88:1a:2a:81:21:2a:de:03:47:12:eb:78:76:ea:36: b5:eb:34:cb:76:6a:10:7b:76:4a:b3:6e:ce:3c:99: 9c:48:8f:76:b4:e2:76:e4:21:0d:3d:f7:a8:74:bd: 1a:59:dd:c4:c4:e6:9e:19:36:f4:65:ff:f5:f3:3f: 36:3f:8e:6e:db:64:8c:67:b2:dc:3b:7f:bd:78:d3: f3:e3:f1:14:7c:af:23:6a:4a:91:b0:e7:8d:33:3d: 34:c5:8a:b4:ec:76:93:61:bb:3c:c3:fa:0a:4e:37: e5:57:40:b0:d5:16:79:51:d4:2f:f1:47:c7:5f:ed: 4a:65:70:c4:b8:d0:46:9b:f9:2e:e6:8f:96:33:d6: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1B:3B:CD:C4:C5:61:38:9E:08:81:8E:EC:EF:15:6D:A3:16:5A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a1eace2-7ad4-3d2e-ac28-40c51e492288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2e:84:ff:7e:b8:69:22:82:0f:98:3a:bd:44:62:97:bb:d9: 5c:90:fe:bd:94:40:2e:25:21:9d:b9:43:b0:47:71:12:51:59: 8c:df:1e:38:22:04:14:d5:b9:26:4e:1b:22:e3:66:8f:1b:47: 02:55:70:5d:50:d2:ce:74:cd:39:95:b4:19:83:5c:e3:8b:d9: 5c:cf:8e:45:fa:98:79:69:0d:28:af:37:d1:60:f7:45:ef:7a: a9:45:84:24:25:c1:4f:89:19:47:16:d7:fe:7c:da:b8:ee:fa: 4f:4e:89:5e:89:f5:b7:bc:db:13:c7:ac:00:3e:f2:c4:51:21: 55:39:a1:b1:4e:aa:77:21:6d:df:c6:e9:f6:36:d1:68:f3:2a: 9e:d0:68:c7:55:28:c0:e9:b9:e5:3a:0f:a0:15:68:eb:c9:b9: b2:01:e7:ca:19:00:6a:a1:04:b4:2c:47:aa:24:ed:8b:d2:97: 20:f8:29:a9:ee:23:95:4b:49:e5:41:1e:cb:83:60:53:03:98: 05:55:bb:b1:c1:96:a7:c6:74:b4:37:b6:df:31:b4:13:69:61: e0:e1:86:5e:71:f9:e3:6f:9b:3b:d6:75:ff:13:46:eb:1e:12: 28:d2:69:6f:d9:a2:37:79:3f:be:1d:17:cc:67:9c:35:16:f8: b7:a5:ee:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuOVzHp25F8b3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWIwZGNiZjYtNGU2OS00NGMzLWFmNDQtNWRlYzhiZWNlYmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZZplaIT46+4mUHCLi76/v6OGZOvp29z9mX+ UTKdMUY4mqDdTXpJ9Be2BkOl1utTo121AK/JJ7M21W/uBUHIfaxOOp7FM8XcmeJX J8lYE+hs1W20NZRIVJgHAZhpiDvuLvDONE/TIwwoNuymdnWx/30EsEGJyoKIGiqB ISreA0cS63h26ja16zTLdmoQe3ZKs27OPJmcSI92tOJ25CENPfeodL0aWd3ExOae GTb0Zf/18z82P45u22SMZ7LcO3+9eNPz4/EUfK8jakqRsOeNMz00xYq07HaTYbs8 w/oKTjflV0Cw1RZ5UdQv8UfHX+1KZXDEuNBGm/ku5o+WM9ZlBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEobO83ExWE4ngiBjuzvFW2jFlqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGExZWFjZTItN2FkNC0z ZDJlLWFjMjgtNDBjNTFlNDkyMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIuhP9+uGkigg+YOr1EYpe72VyQ/r2UQC4lIZ25Q7BHcRJRWYzfHjgi BBTVuSZOGyLjZo8bRwJVcF1Q0s50zTmVtBmDXOOL2VzPjkX6mHlpDSivN9Fg90Xv eqlFhCQlwU+JGUcW1/582rju+k9OiV6J9be82xPHrAA+8sRRIVU5obFOqnchbd/G 6fY20WjzKp7QaMdVKMDpueU6D6AVaOvJubIB58oZAGqhBLQsR6ok7YvSlyD4Kanu I5VLSeVBHsuDYFMDmAVVu7HBlqfGdLQ3tt8xtBNpYeDhhl5x+eNvmzvWdf8TRuse EijSaW/Zojd5P74dF8xnnDUW+Lel7qk= -----END CERTIFICATE-----Generated at Sun Apr 27 10:42:07 2025 by rpki-client