$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa File: a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa (raw, json) Hash identifier: wjT4xj7QERXeog2VTqSgI443THzCaRyPtrKncCPWtOk= Subject key identifier: 7B:86:9C:5C:12:42:0F:2B:19:BF:C9:8A:90:18:62:60:0F:F8:13:9C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE0FB09F71C013584E280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e0:fb:09:f7:1c:01:35:84:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8995de50-2262-49fa-8a1d-12c7df056ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:34:ae:66:19:26:b0:76:3f:41:a3:f2:b0: ad:dc:81:28:38:29:2f:ad:ac:78:53:19:3b:ea:59: 72:7c:4e:04:f3:f3:e2:e1:77:ca:39:0a:b6:c6:07: 6c:f1:1c:6e:75:8b:ef:7f:ad:96:23:8a:e8:52:9a: 2b:01:62:99:bf:81:d1:61:2e:01:5a:72:76:5d:c2: 69:57:09:5e:2d:e4:b8:cd:40:37:83:62:24:b2:7e: 59:6e:be:84:9d:da:b9:b7:d2:74:56:bb:ff:4d:ef: ee:cb:32:96:b4:99:fe:e6:fa:41:e7:0d:ae:65:ba: 41:88:67:74:da:0b:1e:46:7f:04:00:89:83:05:89: 4a:bf:cb:6b:40:6d:1a:ad:0f:1b:1e:8e:d5:11:cf: 14:cc:06:85:03:8d:5f:97:23:39:d7:5f:03:6d:e2: 74:92:ea:f3:02:d6:9c:95:d1:3c:a0:36:92:f0:cc: 9c:c3:4e:0f:c6:4b:cf:92:07:46:77:3d:bf:c8:c8: 3e:2f:b1:ec:a9:3a:1d:59:dd:20:ac:42:6c:21:a3: 88:f3:a7:50:e2:7d:91:6c:e2:b5:ae:8e:f9:09:34: 3e:9b:19:9b:bf:fc:be:f2:0a:9a:4e:c5:45:b0:52: 15:e1:8b:fc:b1:77:4c:43:66:88:67:f2:a5:4a:10: 58:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:86:9C:5C:12:42:0F:2B:19:BF:C9:8A:90:18:62:60:0F:F8:13:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:47:40:b5:89:0e:55:f4:f3:02:ae:fd:4a:83:6d:92:0a:5e: 14:f9:b3:96:34:63:73:41:71:e4:4b:6c:44:99:03:ae:4b:92: f0:da:84:e0:2a:46:87:68:bd:dc:88:ff:fe:c6:11:2e:cc:47: 15:e7:94:ce:50:9c:4b:16:57:4e:32:20:ec:af:38:95:f2:7b: 25:39:60:d1:17:59:cb:9b:03:1b:b9:44:ab:23:9d:11:85:3f: 2d:76:3c:75:61:f7:cc:6e:c8:26:38:0d:51:65:22:6f:c9:86: 08:75:82:a5:f6:fd:71:fb:d6:37:bd:83:7f:3e:ab:a9:24:a1: 44:9d:1a:44:17:62:3a:16:75:db:52:b4:03:16:b5:0b:17:6b: de:fe:dd:9c:b6:e7:46:19:0f:ea:ae:b7:6a:b4:af:9b:2c:b2: 23:c7:b6:b5:82:a4:e7:c3:37:48:ff:de:da:e0:e4:06:4c:52: 79:95:93:fd:e9:b1:04:9d:e9:26:15:f5:c4:a7:7d:d6:93:7f: c6:4c:d4:3a:1f:fe:55:e0:e3:e8:60:96:0f:05:5f:6a:33:b3: b2:e1:8a:78:0e:77:05:f3:e9:d2:0b:ab:ad:4e:86:79:f6:1e: 91:88:79:00:b4:c3:06:04:a2:34:68:f7:06:42:ec:e9:32:d3: be:44:e3:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuD7CfccATWE4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODk5NWRlNTAtMjI2Mi00OWZhLThhMWQtMTJjN2RmMDU2YWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDE0rmYZJrB2P0Gj8rCt3IEoOCkvrax4Uxk7 6llyfE4E8/Pi4XfKOQq2xgds8RxudYvvf62WI4roUporAWKZv4HRYS4BWnJ2XcJp VwleLeS4zUA3g2Iksn5Zbr6Endq5t9J0Vrv/Te/uyzKWtJn+5vpB5w2uZbpBiGd0 2gseRn8EAImDBYlKv8trQG0arQ8bHo7VEc8UzAaFA41flyM5118DbeJ0kurzAtac ldE8oDaS8Mycw04PxkvPkgdGdz2/yMg+L7HsqTodWd0grEJsIaOI86dQ4n2RbOK1 ro75CTQ+mxmbv/y+8gqaTsVFsFIV4Yv8sXdMQ2aIZ/KlShBYNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuGnFwSQg8rGb/JipAYYmAP+BOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTJkMzljNGQtMDhlYy0z MmY3LWFhY2YtM2E5MWY3ZTUzODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1HQLWJDlX08wKu/UqDbZIKXhT5s5Y0Y3NBceRLbESZA65LkvDahOAq RodovdyI//7GES7MRxXnlM5QnEsWV04yIOyvOJXyeyU5YNEXWcubAxu5RKsjnRGF Py12PHVh98xuyCY4DVFlIm/Jhgh1gqX2/XH71je9g38+q6kkoUSdGkQXYjoWddtS tAMWtQsXa97+3Zy250YZD+qut2q0r5sssiPHtrWCpOfDN0j/3trg5AZMUnmVk/3p sQSd6SYV9cSnfdaTf8ZM1Dof/lXg4+hglg8FX2ozs7LhingOdwXz6dILq61Ohnn2 HpGIeQC0wwYEojRo9wZC7Oky075E47k= -----END CERTIFICATE-----Generated at Mon Apr 28 00:26:05 2025 by rpki-client