$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa File: a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa (raw, json) Hash identifier: wjJmE8fPNTZSE1nXcs2wKL5Q6CZhedOBqyKSupBUfUQ= Subject key identifier: F2:9B:1C:C3:51:9A:8A:00:18:BE:FD:77:AA:34:F1:35:77:29:6B:B4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA56523E1431A38D173780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:56:52:3e:14:31:a3:8d:17:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=34e16ff7-d1e7-43a1-9f5b-9d7f02cc2504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e2:08:81:53:7e:27:12:56:0a:7a:30:8c:11: 6f:f4:75:aa:85:26:9f:4d:d2:70:5c:5c:51:b8:1a: 2f:8b:b1:3b:7c:6d:56:2f:2e:92:ee:96:6d:7a:a2: ea:a2:89:76:14:f0:09:25:14:a8:b0:68:33:e9:20: 9c:98:4b:16:07:de:97:41:76:3b:2e:f3:38:d4:b3: ee:d0:c3:25:48:3e:4c:1b:c4:cd:5a:bc:88:e4:6d: f0:ff:7d:33:75:a7:48:ed:4d:42:71:ea:52:f8:99: 57:4c:90:2c:89:0c:e5:b2:0f:d9:d9:9d:96:7b:50: df:eb:7c:a5:b9:e4:cb:3a:06:40:db:48:0b:9c:1e: 0a:62:35:3b:85:fa:2c:37:5d:cf:f0:cf:54:6f:9d: 77:fd:01:78:42:cf:0f:70:40:d4:e2:f3:04:84:9b: 73:34:dc:a5:1b:63:59:cf:03:f9:53:d6:a4:e4:a1: 3a:b6:b1:12:fb:19:ba:0f:da:98:a4:64:c5:46:f3: 0f:e3:90:95:05:fe:a5:43:3b:1b:f1:44:8e:6f:00: 18:3a:de:cf:4c:ba:c9:38:86:fd:25:fa:b7:64:ec: 1f:25:1d:a6:cd:3a:1d:b8:a5:c7:3f:94:92:20:97: 68:4b:07:a5:e2:12:4c:ae:68:3a:a4:98:a4:e5:a5: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9B:1C:C3:51:9A:8A:00:18:BE:FD:77:AA:34:F1:35:77:29:6B:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f2:88:35:d4:94:30:68:2b:1f:1c:83:69:c9:55:c3:20:bb: af:72:c4:83:a8:ba:34:76:0e:41:46:6e:b4:c1:88:16:51:6e: 70:2b:c3:4f:6a:4b:1d:20:3f:fc:12:d1:1d:3f:00:f2:c5:e0: 67:2c:8e:1c:3f:80:83:c9:94:98:67:fe:65:c3:c9:3c:36:94: d3:2a:ad:42:1b:2f:06:05:e1:5a:4e:17:bf:ef:6c:da:be:6c: 96:50:83:6b:92:e7:4b:d4:5d:0e:21:e3:e7:a7:38:2f:09:19: 8c:a2:01:ec:f8:90:9a:b2:8b:39:4f:05:29:1e:66:f6:25:5a: 85:11:bc:32:22:6f:a0:e9:c6:a7:b4:ba:7b:07:49:0a:0a:ee: 40:02:0a:c0:06:25:bd:2e:6a:39:67:70:53:9a:36:ea:fd:fe: d9:ff:d0:65:85:11:9f:76:d7:af:3a:d6:0c:10:82:aa:e2:3a: 01:17:2e:02:6c:94:c8:38:68:f6:6b:7f:6d:d8:91:62:a0:33: 87:04:96:40:8f:92:d6:a4:b9:8b:38:27:19:a7:53:7b:b0:b0: 71:e4:29:87:da:6f:4c:a2:8b:e9:2e:72:40:64:9f:1f:7b:75: a2:f2:4e:10:12:ba:bc:cf:12:95:1e:af:0e:66:5c:45:b9:c0: 8d:be:af:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulZSPhQxo40XN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzRlMTZmZjctZDFlNy00M2ExLTlmNWItOWQ3ZjAyY2MyNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+IIgVN+JxJWCnowjBFv9HWqhSafTdJwXFxR uBovi7E7fG1WLy6S7pZteqLqool2FPAJJRSosGgz6SCcmEsWB96XQXY7LvM41LPu 0MMlSD5MG8TNWryI5G3w/30zdadI7U1CcepS+JlXTJAsiQzlsg/Z2Z2We1Df63yl ueTLOgZA20gLnB4KYjU7hfosN13P8M9Ub513/QF4Qs8PcEDU4vMEhJtzNNylG2NZ zwP5U9ak5KE6trES+xm6D9qYpGTFRvMP45CVBf6lQzsb8USObwAYOt7PTLrJOIb9 Jfq3ZOwfJR2mzToduKXHP5SSIJdoSwel4hJMrmg6pJik5aXYnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKbHMNRmooAGL79d6o08TV3KWu0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTI1Y2I3YWItZWUzYi0z N2Q4LTk4OTYtNzFkNzZjMDhkYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHyiDXUlDBoKx8cg2nJVcMgu69yxIOoujR2DkFGbrTBiBZRbnArw09q Sx0gP/wS0R0/APLF4Gcsjhw/gIPJlJhn/mXDyTw2lNMqrUIbLwYF4VpOF7/vbNq+ bJZQg2uS50vUXQ4h4+enOC8JGYyiAez4kJqyizlPBSkeZvYlWoURvDIib6Dpxqe0 unsHSQoK7kACCsAGJb0uajlncFOaNur9/tn/0GWFEZ9216861gwQgqriOgEXLgJs lMg4aPZrf23YkWKgM4cElkCPktakuYs4JxmnU3uwsHHkKYfab0yii+kuckBknx97 daLyThASurzPEpUerw5mXEW5wI2+r6E= -----END CERTIFICATE-----Generated at Mon Apr 28 00:01:17 2025 by rpki-client