$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9086fa97-2f28-385a-a8e7-baaa14ffac77.roa File: 9086fa97-2f28-385a-a8e7-baaa14ffac77.roa (raw, json) Hash identifier: 6JfryVR95AhL/BTjRWaraTR6aXpszzQFlo6IDnuGIaU= Subject key identifier: 9E:46:46:BE:43:83:8B:30:A2:16:34:71:57:6D:E9:44:4A:C9:99:B3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5AE4169EE163AA436400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9086fa97-2f28-385a-a8e7-baaa14ffac77.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5a:e4:16:9e:e1:63:aa:43:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2a38bca3-9eb6-4b43-a854-ef131fcfeb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:67:6d:32:3e:1a:db:7c:3a:8f:a7:b5:51: f0:d2:0d:52:97:cc:66:be:6e:f4:e2:14:ed:be:7a: 22:cf:95:b4:78:19:6d:42:55:02:b9:db:a3:8f:ec: 81:27:dd:43:ea:a1:83:69:54:1d:aa:e3:92:0f:b0: 07:d6:6d:c9:ad:ba:ee:8f:32:30:bb:da:ca:5f:33: 88:7e:97:14:68:b8:1c:06:26:84:00:9b:0e:8b:89: 79:aa:b7:3b:e3:c0:0f:e8:18:bd:73:60:3c:92:78: 5e:0f:90:17:94:01:b8:6f:2a:c2:a1:98:b2:59:ac: 07:c5:5a:e8:74:21:70:94:16:b2:d7:56:8c:2f:bb: f0:49:c6:08:1e:39:a3:36:b3:1b:23:95:ee:f7:21: c6:e6:46:22:c6:ba:d5:2c:5c:d3:e7:f6:3a:60:00: ab:fa:1d:4d:00:75:d6:9b:e1:e4:5d:2f:c9:f3:8b: a5:ba:15:1c:c7:ca:21:9e:76:be:bd:0c:f5:3f:94: 33:39:5e:62:ac:7f:09:21:d3:dd:0c:2d:46:17:84: 70:90:27:a9:3d:0a:47:d6:de:77:aa:7f:9d:ed:5c: 52:ec:9c:32:1a:c4:57:ac:c9:4a:9a:02:ab:d2:17: 6b:6e:4c:0e:12:67:01:32:0b:d9:22:1d:2f:94:9d: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:46:46:BE:43:83:8B:30:A2:16:34:71:57:6D:E9:44:4A:C9:99:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9086fa97-2f28-385a-a8e7-baaa14ffac77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:65:41:4a:76:f0:2e:88:9a:70:d0:07:51:6a:4d:d5:5c:e0: 57:73:04:9a:06:6b:53:e8:13:8b:be:2c:db:ae:56:4e:bf:f0: 46:c2:44:f5:49:25:42:a3:7d:82:c9:a4:e0:fc:3a:e7:c7:6c: c0:47:36:14:b9:96:e1:4b:46:ef:3b:95:89:a6:70:54:57:51: fe:b4:bb:7e:e8:31:48:61:05:9c:ae:e2:dd:d5:21:90:de:75: a1:81:a7:fc:1b:d2:bb:12:7b:39:ef:ae:7a:be:a7:f6:69:b5: ab:85:a9:66:30:b8:41:0e:0d:5f:cd:69:c3:3d:9b:9e:11:f6: 7f:83:b6:0f:5a:f6:89:c4:be:c6:26:64:07:5c:03:6b:06:30: e0:49:b0:50:46:08:25:22:d2:c6:68:c3:6f:8f:51:20:69:ab: ff:85:1c:cf:c6:36:ba:96:4d:a7:05:9c:92:db:e1:a3:8f:14: d7:ba:56:0f:58:c7:25:74:85:d5:83:46:03:64:07:35:1b:39: 35:da:29:87:b8:1f:8b:48:01:cf:57:a2:13:95:43:4b:62:91: 06:1d:d9:b7:9c:22:55:ae:ed:0b:b5:b2:d3:a0:eb:5f:1f:b6: b0:4d:0e:57:ab:83:ac:47:8a:1b:9a:f3:3c:e1:b5:1b:3e:45: 26:d7:e3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulrkFp7hY6pDZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmEzOGJjYTMtOWViNi00YjQzLWE4NTQtZWYxMzFmY2ZlYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj9nbTI+Gtt8Oo+ntVHw0g1Sl8xmvm704hTt vnoiz5W0eBltQlUCudujj+yBJ91D6qGDaVQdquOSD7AH1m3JrbrujzIwu9rKXzOI fpcUaLgcBiaEAJsOi4l5qrc748AP6Bi9c2A8knheD5AXlAG4byrCoZiyWawHxVro dCFwlBay11aML7vwScYIHjmjNrMbI5Xu9yHG5kYixrrVLFzT5/Y6YACr+h1NAHXW m+HkXS/J84uluhUcx8ohnna+vQz1P5QzOV5irH8JIdPdDC1GF4RwkCepPQpH1t53 qn+d7VxS7JwyGsRXrMlKmgKr0hdrbkwOEmcBMgvZIh0vlJ1gmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5GRr5Dg4swohY0cVdt6URKyZmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTA4NmZhOTctMmYyOC0z ODVhLWE4ZTctYmFhYTE0ZmZhYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKplQUp28C6ImnDQB1FqTdVc4FdzBJoGa1PoE4u+LNuuVk6/8EbCRPVJ JUKjfYLJpOD8OufHbMBHNhS5luFLRu87lYmmcFRXUf60u37oMUhhBZyu4t3VIZDe daGBp/wb0rsSeznvrnq+p/ZptauFqWYwuEEODV/NacM9m54R9n+Dtg9a9onEvsYm ZAdcA2sGMOBJsFBGCCUi0sZow2+PUSBpq/+FHM/GNrqWTacFnJLb4aOPFNe6Vg9Y xyV0hdWDRgNkBzUbOTXaKYe4H4tIAc9XohOVQ0tikQYd2becIlWu7Qu1stOg618f trBNDlerg6xHihua8zzhtRs+RSbX4/M= -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:52 2025 by rpki-client