$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa File: 967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa (raw, json) Hash identifier: tmaYx6UFmHMCIgOksNfCMwMlAL9h/Dpzh0MoGslpdx4= Subject key identifier: 66:95:30:31:6A:3E:8D:F6:27:40:84:4B:57:0C:C3:BF:93:F3:72:DF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA4FE7285D351C03220000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 16491 IP address blocks: 70.41.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4f:e7:28:5d:35:1c:03:22:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=32545aa8-0b4e-4410-a636-112dabc0a57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:01:48:da:3a:ca:6d:b7:cc:dc:a4:b4:72: 66:56:f0:e2:23:c5:3e:3e:2e:e8:25:84:2b:be:34: 29:17:64:00:64:99:fe:2c:27:eb:a3:a9:20:76:ca: 89:ab:bc:a4:74:ad:89:26:22:09:24:73:41:f2:0e: 41:1b:3a:df:b2:25:18:ac:e5:ad:a4:34:bd:58:c8: a4:87:c8:ff:4b:7d:71:83:30:38:b0:0c:bc:74:a1: 8c:e5:c8:be:bf:37:a6:67:42:4e:e5:bb:e8:77:5d: b0:95:e4:92:58:df:ef:15:a3:b0:ad:5e:37:66:e6: 72:35:18:0d:eb:27:d9:f9:b9:5d:93:20:b6:f3:85: 46:51:c9:8a:8d:a1:d8:d7:af:dd:96:c5:c6:de:c6: b4:af:22:a9:e8:2d:ac:f2:41:0e:e9:73:3a:54:ab: 0a:79:30:9e:ef:71:5c:23:71:42:5b:cb:a6:79:b3: b0:9d:cd:1e:54:a7:5d:21:c4:bb:fe:6f:e8:76:c0: 0d:ee:e7:15:f2:86:9d:94:83:43:de:d8:db:0c:fa: 13:c4:02:bd:05:b9:fa:f1:2b:64:84:a3:ae:bf:bf: b2:b1:a6:25:dd:f1:71:b3:92:98:d9:63:6b:d6:36: 48:26:f7:cb:06:67:6d:45:c8:5a:b4:3e:43:90:59: 4d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:30:31:6A:3E:8D:F6:27:40:84:4B:57:0C:C3:BF:93:F3:72:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f0:2e:e6:b5:73:59:f9:90:1e:5d:0a:79:92:66:c6:9e:b6: 45:b5:e0:d9:39:10:f2:dc:34:85:95:e2:d1:c4:86:ca:87:d3: bf:32:28:96:1a:7e:8c:b7:42:65:2f:61:74:41:73:0e:51:07: 48:e3:16:a0:fc:fa:e6:e2:f2:a7:48:4c:5b:43:90:68:8d:6e: 9b:84:28:0c:7e:2c:e6:9a:67:04:3e:36:64:06:59:00:9f:cf: 15:43:70:8a:ea:40:25:7f:75:82:d1:b4:87:e9:1e:ac:a8:c6: ac:d6:f9:95:e5:7a:c8:1c:ec:ae:a0:c3:6e:8c:79:5b:c1:3b: 2e:cc:ec:25:66:93:4d:22:32:09:2b:d9:c5:8b:bf:56:ea:63: cf:51:16:f5:81:d0:7a:af:da:57:65:14:9b:60:a7:0b:06:13: ec:cb:24:e2:45:70:67:d3:89:a4:e0:9e:5a:16:8b:82:b8:89: f3:f7:8c:86:b4:34:74:39:57:2b:e6:4c:12:41:0b:ec:12:32: 44:9e:f3:d5:0c:ab:29:53:c0:18:04:47:b6:3b:79:a1:a3:c5: 98:b3:58:c3:fb:7e:5f:19:56:ba:c9:d0:de:60:31:6b:b9:79: 06:b4:a9:a1:94:d8:16:00:e3:ed:e2:b5:be:9c:39:9d:3d:48: 8f:16:7d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk/nKF01HAMiAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzI1NDVhYTgtMGI0ZS00NDEwLWE2MzYtMTEyZGFiYzBhNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkREBSNo6ym23zNyktHJmVvDiI8U+Pi7oJYQr vjQpF2QAZJn+LCfro6kgdsqJq7ykdK2JJiIJJHNB8g5BGzrfsiUYrOWtpDS9WMik h8j/S31xgzA4sAy8dKGM5ci+vzemZ0JO5bvod12wleSSWN/vFaOwrV43ZuZyNRgN 6yfZ+bldkyC284VGUcmKjaHY16/dlsXG3sa0ryKp6C2s8kEO6XM6VKsKeTCe73Fc I3FCW8umebOwnc0eVKddIcS7/m/odsAN7ucV8oadlIND3tjbDPoTxAK9Bbn68Stk hKOuv7+ysaYl3fFxs5KY2WNr1jZIJvfLBmdtRchatD5DkFlN+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaVMDFqPo32J0CES1cMw7+T83LfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTY3Yzc1MzQtMzA2NS0z ZWFmLWI4MWYtNGY0ZjJmNGY5OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHwLua1c1n5kB5dCnmSZsaetkW14Nk5EPLcNIWV4tHEhsqH078yKJYa foy3QmUvYXRBcw5RB0jjFqD8+ubi8qdITFtDkGiNbpuEKAx+LOaaZwQ+NmQGWQCf zxVDcIrqQCV/dYLRtIfpHqyoxqzW+ZXlesgc7K6gw26MeVvBOy7M7CVmk00iMgkr 2cWLv1bqY89RFvWB0Hqv2ldlFJtgpwsGE+zLJOJFcGfTiaTgnloWi4K4ifP3jIa0 NHQ5VyvmTBJBC+wSMkSe89UMqylTwBgER7Y7eaGjxZizWMP7fl8ZVrrJ0N5gMWu5 eQa0qaGU2BYA4+3itb6cOZ09SI8WfWo= -----END CERTIFICATE-----Generated at Sun Apr 27 07:04:06 2025 by rpki-client