$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa File: a08ce2be-b409-35c4-a379-ba55950d59ea.roa (raw, json) Hash identifier: +yuSbbLUmJb8pswuNevKS0pjofM8b1eELCwI6vLGS4Q= Subject key identifier: C1:36:8F:83:29:32:CF:36:59:B8:D8:46:94:59:99:35:85:64:F5:C4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE5A9A23F2E8FF6A42C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e5:a9:a2:3f:2e:8f:f6:a4:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f37b1913-7216-46a0-9173-40237d18af77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:8c:94:f4:6e:b4:7e:bc:c8:90:aa:e7:a2: 1e:e3:b5:df:9f:97:de:4a:3a:64:8a:76:15:ec:a7: 2b:11:8b:45:bb:97:46:d0:bc:55:04:db:e2:67:cb: 40:e0:a8:b8:92:c8:7f:33:d3:41:c1:41:ba:53:aa: 95:91:54:0c:61:2c:e6:8c:c5:f4:d1:95:d8:a6:8d: 9a:b2:e7:b8:cf:bd:d0:45:92:50:f4:35:53:7d:ab: 40:b5:0e:13:8e:36:0c:16:b4:45:92:47:c7:37:d4: bc:c5:1b:d8:14:d5:20:60:1b:11:24:ec:5f:52:75: a6:17:11:45:1f:fd:da:16:40:54:ae:14:40:9f:dd: b2:26:45:85:4f:4e:08:c3:64:32:b9:2d:7c:32:1e: ab:f0:14:27:0b:86:4b:00:5d:f8:4a:d3:f9:f2:e8: 26:2f:aa:9b:9c:f2:0e:b6:30:57:fc:87:52:d6:89: 4e:4b:87:36:bb:7a:e3:b9:84:3b:3f:5d:04:40:0c: 53:29:7e:0c:a7:f6:78:d7:3c:6e:36:77:ec:1c:da: e8:d9:ad:62:01:cc:4a:66:a1:ba:6b:6d:bc:33:ab: 86:ba:df:69:e7:73:f8:e9:d8:e0:78:a5:b2:e7:28: fd:90:1d:bd:6e:41:26:8f:52:9a:f3:20:95:9c:6d: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:36:8F:83:29:32:CF:36:59:B8:D8:46:94:59:99:35:85:64:F5:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d1:87:bb:10:35:d2:b5:ed:5d:3b:8e:c3:2f:b1:21:11:d5: 20:ea:e2:d6:3c:1d:be:65:ea:e2:9d:f9:40:0b:7b:38:99:23: d7:c7:e3:01:83:d3:4a:37:11:1c:7a:2a:60:83:35:d3:52:41: 05:a5:84:ca:30:32:31:4d:fb:bb:72:b0:7a:aa:5c:98:97:be: 21:13:b3:14:3e:7f:2d:70:33:33:0d:97:9b:7c:30:93:f1:8a: fe:5c:c2:16:b2:69:33:6e:31:aa:6a:f2:99:7e:d3:2a:ad:0e: 63:12:51:7b:a4:ad:61:cd:68:e3:0e:63:fa:49:3d:ed:8c:3f: 3b:8a:e2:98:de:d6:39:62:98:90:0a:23:1e:b3:dc:72:bf:31: cf:1a:77:58:98:14:75:7c:0c:0a:ea:44:db:aa:49:03:91:6f: 76:09:8c:ea:0e:3c:7e:d4:cc:5c:bf:ca:3d:fd:71:45:6b:54: 52:ee:87:29:c2:4d:0c:bf:3d:cb:3e:38:15:f2:be:c5:b3:c4: 5a:2e:c2:29:c5:73:b4:ae:af:4c:19:8e:80:db:0e:64:c5:c2: 64:5f:ad:47:ed:49:9d:c3:27:d3:9c:4a:80:f3:24:66:5b:4a: e8:9e:42:25:af:ce:3a:69:dc:77:d4:9c:a8:f6:f0:23:f3:a8: d6:99:7f:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuWpoj8uj/akLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjM3YjE5MTMtNzIxNi00NmEwLTkxNzMtNDAyMzdkMThhZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KeMlPRutH68yJCq56Ie47Xfn5feSjpkinYV 7KcrEYtFu5dG0LxVBNviZ8tA4Ki4ksh/M9NBwUG6U6qVkVQMYSzmjMX00ZXYpo2a sue4z73QRZJQ9DVTfatAtQ4TjjYMFrRFkkfHN9S8xRvYFNUgYBsRJOxfUnWmFxFF H/3aFkBUrhRAn92yJkWFT04Iw2QyuS18Mh6r8BQnC4ZLAF34StP58ugmL6qbnPIO tjBX/IdS1olOS4c2u3rjuYQ7P10EQAxTKX4Mp/Z41zxuNnfsHNro2a1iAcxKZqG6 a228M6uGut9p53P46djgeKWy5yj9kB29bkEmj1Ka8yCVnG3xoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME2j4MpMs82WbjYRpRZmTWFZPXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTA4Y2UyYmUtYjQwOS0z NWM0LWEzNzktYmE1NTk1MGQ1OWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzRh7sQNdK17V07jsMvsSER1SDq4tY8Hb5l6uKd+UALeziZI9fH4wGD 00o3ERx6KmCDNdNSQQWlhMowMjFN+7tysHqqXJiXviETsxQ+fy1wMzMNl5t8MJPx iv5cwhayaTNuMapq8pl+0yqtDmMSUXukrWHNaOMOY/pJPe2MPzuK4pje1jlimJAK Ix6z3HK/Mc8ad1iYFHV8DArqRNuqSQORb3YJjOoOPH7UzFy/yj39cUVrVFLuhynC TQy/Pcs+OBXyvsWzxFouwinFc7Sur0wZjoDbDmTFwmRfrUftSZ3DJ9OcSoDzJGZb SuieQiWvzjpp3HfUnKj28CPzqNaZfw4= -----END CERTIFICATE-----Generated at Sun Apr 27 20:18:24 2025 by rpki-client