$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/977e7464-8fce-3f9b-8944-1e11ceeda01f.roa File: 977e7464-8fce-3f9b-8944-1e11ceeda01f.roa (raw, json) Hash identifier: aC5oeCzbJAvm+CvsioudQJy/FPuQt8Srt1FnhfoCJ3c= Subject key identifier: 74:20:E4:FE:49:D4:57:D4:41:A5:17:5C:8F:D2:B2:A2:0A:D4:11:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE2BBDDBC828FB28EEC80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/977e7464-8fce-3f9b-8944-1e11ceeda01f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e2:bb:dd:bc:82:8f:b2:8e:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=753de9cc-456a-4df6-8694-fff12c437e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:00:22:9e:09:09:dd:7a:54:c0:53:58:38:8f: 96:4e:01:a8:c8:c4:d1:df:27:d1:78:eb:da:37:ad: 19:1f:75:a4:d9:73:11:dd:11:46:54:4a:fe:a4:5e: a8:c5:ea:28:c4:5f:8e:37:d1:24:c5:d2:52:e0:c1: f2:4e:86:82:bd:8d:0d:22:a2:b6:de:66:b8:20:af: da:a5:36:9a:58:12:3b:af:80:ef:9a:dc:cd:09:05: 67:7c:10:b8:20:27:fc:90:b9:81:0d:e0:9c:25:0f: 5f:bc:f0:08:62:f6:35:9b:88:66:b9:83:50:03:6f: 46:ce:fb:95:73:2f:c2:6d:d0:1c:3e:62:c6:e6:ee: 7e:98:88:e9:da:a3:35:9b:f9:e1:b5:ea:5f:8f:f6: 4b:13:e4:1b:27:b5:9a:ea:39:00:bc:51:68:ac:3e: 80:cb:7f:4b:73:c8:46:15:d3:da:4d:4c:65:5d:1a: 91:36:20:cf:ef:05:ad:c5:94:c3:5b:41:7b:3a:1d: 4b:fa:48:a4:84:29:65:fd:cb:df:75:1f:65:0c:25: 2a:3b:1b:f3:26:f4:c7:44:77:f7:91:c7:a5:12:97: 99:af:cf:98:8b:da:27:cd:b7:39:bf:e9:59:fd:08: 29:9f:bb:82:76:23:89:78:bd:28:62:e1:a7:43:7e: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:20:E4:FE:49:D4:57:D4:41:A5:17:5C:8F:D2:B2:A2:0A:D4:11:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/977e7464-8fce-3f9b-8944-1e11ceeda01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:12:25:50:24:03:19:64:61:0a:45:86:b6:29:03:6f:d2:9e: b8:f1:f5:b5:6e:ec:ab:dc:66:12:49:15:8e:94:bd:ff:23:29: 27:90:fb:9e:a7:1b:5c:ae:6b:43:36:b5:5c:88:5a:3d:fe:15: 1b:d3:da:ae:14:24:74:74:8e:11:63:80:87:96:86:b9:ce:36: 65:b7:27:0d:6b:76:b0:fe:13:64:29:59:e6:20:3b:12:31:2e: a0:2b:c6:78:3b:ec:ee:e0:db:7f:ad:25:fd:6e:de:5b:9a:49: f7:ac:87:3a:1e:e9:f6:47:21:73:4c:73:32:ad:7e:55:96:54: 62:76:cc:67:ce:1d:22:ff:97:f4:40:5c:53:17:84:3f:00:82: 09:36:1c:ef:78:55:c3:88:86:8b:0c:ef:a6:24:be:c4:e0:66: 5c:c8:b5:4a:4f:32:90:6f:6c:70:fa:dd:5b:0b:10:df:d4:e1: ff:d3:89:29:82:e3:4d:11:98:01:aa:a7:78:0d:5a:ad:5f:01: 19:0a:b0:76:18:4f:59:e9:92:6c:a7:e1:55:ac:68:a4:c9:26: 01:08:c7:03:10:04:0c:c9:4f:d6:9c:73:de:ae:a9:d1:cb:d1: a7:5a:f8:d5:8f:a2:a3:ed:4e:a2:f9:63:5e:80:48:57:ba:9b: 09:83:8b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuK73byCj7KO7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzUzZGU5Y2MtNDU2YS00ZGY2LTg2OTQtZmZmMTJjNDM3ZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAAingkJ3XpUwFNYOI+WTgGoyMTR3yfReOva N60ZH3Wk2XMR3RFGVEr+pF6oxeooxF+ON9EkxdJS4MHyToaCvY0NIqK23ma4IK/a pTaaWBI7r4DvmtzNCQVnfBC4ICf8kLmBDeCcJQ9fvPAIYvY1m4hmuYNQA29GzvuV cy/CbdAcPmLG5u5+mIjp2qM1m/nhtepfj/ZLE+QbJ7Wa6jkAvFForD6Ay39Lc8hG FdPaTUxlXRqRNiDP7wWtxZTDW0F7Oh1L+kikhCll/cvfdR9lDCUqOxvzJvTHRHf3 kcelEpeZr8+Yi9onzbc5v+lZ/Qgpn7uCdiOJeL0oYuGnQ34wlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQg5P5J1FfUQaUXXI/SsqIK1BEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTc3ZTc0NjQtOGZjZS0z ZjliLTg5NDQtMWUxMWNlZWRhMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUSJVAkAxlkYQpFhrYpA2/Snrjx9bVu7KvcZhJJFY6Uvf8jKSeQ+56n G1yua0M2tVyIWj3+FRvT2q4UJHR0jhFjgIeWhrnONmW3Jw1rdrD+E2QpWeYgOxIx LqArxng77O7g23+tJf1u3luaSfeshzoe6fZHIXNMczKtflWWVGJ2zGfOHSL/l/RA XFMXhD8Aggk2HO94VcOIhosM76YkvsTgZlzItUpPMpBvbHD63VsLEN/U4f/TiSmC 400RmAGqp3gNWq1fARkKsHYYT1npkmyn4VWsaKTJJgEIxwMQBAzJT9acc96uqdHL 0ada+NWPoqPtTqL5Y16ASFe6mwmDi6c= -----END CERTIFICATE-----Generated at Sun Apr 27 21:36:31 2025 by rpki-client