$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a671c8c0-8bf4-3b6d-b125-8a90a5f628f4.roa File: a671c8c0-8bf4-3b6d-b125-8a90a5f628f4.roa (raw, json) Hash identifier: 9hwNa7ptivHTEO/2UPEAnsQD0Yz8JSAyLo5momGXQ8Q= Subject key identifier: 1F:27:53:1D:77:27:CA:7B:58:0B:E0:F5:7F:7D:82:0B:7B:29:17:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA565DA16124B6D78F7340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a671c8c0-8bf4-3b6d-b125-8a90a5f628f4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:56:5d:a1:61:24:b6:d7:8f:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9ffdcc84-4526-421d-85d3-c90c21ac07e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:39:b9:ed:df:88:24:68:f3:43:38:40:50: 47:9a:36:4d:79:48:8c:b0:95:b0:2b:ac:44:a6:d9: a1:02:d8:70:31:ef:b2:26:19:31:5e:de:55:56:58: aa:f3:3f:da:16:21:55:7d:e9:dc:49:3c:a0:f2:c4: 28:69:15:d0:b8:8f:92:10:57:e6:9a:36:b2:a9:d9: 76:2e:7a:08:4c:44:8f:13:73:68:8a:f6:f1:3e:3c: 7e:25:ce:25:7a:0d:af:5e:10:3f:ed:bd:b5:f4:47: 2f:0a:94:f4:6d:87:20:2e:06:be:54:6b:13:3c:83: 4e:db:d4:39:7c:9f:47:0f:03:85:68:96:e8:cf:ac: aa:cb:c6:02:e6:f5:e7:6f:98:d3:47:ff:12:67:9d: ec:ad:f1:d6:70:3d:5f:9e:75:db:dc:f8:16:24:28: 57:0b:7e:40:e1:f5:2c:82:e6:e6:fd:38:5c:9d:13: e0:6e:59:2c:d4:b9:a5:ea:98:31:31:0e:e8:91:92: be:5f:3d:8a:27:99:e3:82:6d:48:57:06:e0:b0:aa: 3a:c1:69:0d:e3:aa:9b:c9:48:85:5c:83:35:c9:5b: f0:c0:69:bc:3b:59:10:54:fd:bc:78:da:83:9a:ff: b2:1a:b1:b3:fb:3c:17:dc:21:5d:3a:c6:ee:3b:28: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:27:53:1D:77:27:CA:7B:58:0B:E0:F5:7F:7D:82:0B:7B:29:17:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a671c8c0-8bf4-3b6d-b125-8a90a5f628f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:cf:ee:1e:b0:7b:77:d6:87:d9:cb:20:15:04:6c:ae:2a:3c: ba:37:37:57:4b:96:35:4a:fd:ee:7a:2e:1c:8b:e4:c1:76:f4: af:7f:29:64:5b:7a:44:d2:38:84:39:a8:71:cc:0b:9a:b5:7c: 36:34:7a:d2:43:8f:93:71:dd:a0:0f:12:b8:9b:13:4e:a1:d5: df:8c:e3:5a:b4:04:2b:8e:1b:84:a3:4a:d1:d9:aa:d9:bf:e7: f0:0d:cf:b0:a1:de:f2:ee:d4:80:ab:1b:b5:82:e2:db:b7:5b: a9:b7:b9:64:c9:c8:54:99:7b:55:1f:5d:c8:1e:e4:e6:1a:4c: e1:e1:8a:7c:44:b3:41:b7:70:4a:88:24:bb:35:b5:0a:3f:8c: f7:37:c8:f8:0c:cb:e8:ed:00:b2:ab:68:a1:d2:e5:a1:50:b0: 4e:12:bd:88:2b:45:ff:7c:85:fb:a4:9c:cb:64:4c:2e:30:e6: 34:2b:f9:a5:a6:ea:5e:22:2a:35:bc:82:42:ab:7f:6b:bb:26: 47:10:80:21:50:a7:14:7c:1f:f9:c7:79:cf:24:44:38:ef:d1: e5:03:eb:e9:62:31:f3:90:dd:12:88:41:9c:9f:f9:23:f9:de: be:72:5e:bf:79:30:29:9a:e6:98:2e:aa:84:de:7c:85:59:d5: 5e:ce:97:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulZdoWEkttePc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWZmZGNjODQtNDUyNi00MjFkLTg1ZDMtYzkwYzIxYWMwN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMc5ue3fiCRo80M4QFBHmjZNeUiMsJWwK6xE ptmhAthwMe+yJhkxXt5VVliq8z/aFiFVfencSTyg8sQoaRXQuI+SEFfmmjayqdl2 LnoITESPE3NoivbxPjx+Jc4leg2vXhA/7b219EcvCpT0bYcgLga+VGsTPINO29Q5 fJ9HDwOFaJboz6yqy8YC5vXnb5jTR/8SZ53srfHWcD1fnnXb3PgWJChXC35A4fUs gubm/ThcnRPgblks1Lml6pgxMQ7okZK+Xz2KJ5njgm1IVwbgsKo6wWkN46qbyUiF XIM1yVvwwGm8O1kQVP28eNqDmv+yGrGz+zwX3CFdOsbuOygxMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8nUx13J8p7WAvg9X99ggt7KRfgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTY3MWM4YzAtOGJmNC0z YjZkLWIxMjUtOGE5MGE1ZjYyOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfP7h6we3fWh9nLIBUEbK4qPLo3N1dLljVK/e56LhyL5MF29K9/KWRb ekTSOIQ5qHHMC5q1fDY0etJDj5Nx3aAPEribE06h1d+M41q0BCuOG4SjStHZqtm/ 5/ANz7Ch3vLu1ICrG7WC4tu3W6m3uWTJyFSZe1UfXcge5OYaTOHhinxEs0G3cEqI JLs1tQo/jPc3yPgMy+jtALKraKHS5aFQsE4SvYgrRf98hfuknMtkTC4w5jQr+aWm 6l4iKjW8gkKrf2u7JkcQgCFQpxR8H/nHec8kRDjv0eUD6+liMfOQ3RKIQZyf+SP5 3r5yXr95MCma5pguqoTefIVZ1V7Ol8Q= -----END CERTIFICATE-----Generated at Sun Apr 27 01:04:19 2025 by rpki-client