$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa File: af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa (raw, json) Hash identifier: KSAPqYaweROQxIvTiX7gZaI0SMmT5umg//aoG5VVioA= Subject key identifier: 8E:2B:6F:57:8E:33:E1:42:2B:64:06:B0:7C:3F:0F:C8:1C:0F:3E:65 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5999F4BD112DF4151E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:59:99:f4:bd:11:2d:f4:15:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2c794bc6-0245-4dea-a0c2-72530650f1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:ee:6f:45:b9:d5:dd:57:53:b1:9e:d8:5c: e4:ad:34:70:69:7b:03:a2:3d:81:09:55:76:28:a8: c9:25:25:5b:8a:8d:b6:0c:8b:9d:8f:ae:5c:d8:cd: 29:39:bf:31:35:29:c7:49:14:15:51:a6:34:cd:e7: cf:ae:af:d7:d1:9c:1b:e2:cb:eb:3e:b2:a8:83:c6: 3b:40:2d:3d:42:56:eb:19:3d:8a:12:f2:d5:6b:e4: 2d:0f:e1:b2:39:91:dd:db:e7:65:1c:b9:65:29:4f: b6:0e:99:11:26:8d:4c:1b:cb:11:08:45:70:ae:c4: 38:63:6a:f0:ae:5d:cb:f1:60:96:d5:b0:0c:c1:c2: 05:fd:c1:84:74:ca:ff:c0:54:e9:fc:71:d9:b5:af: 47:b8:ef:66:2a:07:3e:07:b2:83:5c:bb:78:39:00: 21:6b:42:de:fc:f8:2e:2e:3e:77:ab:77:a5:a7:ea: 33:9f:fe:33:1d:95:d1:8a:4f:e9:f9:b5:b3:be:6d: 6f:3c:70:72:7c:2c:63:81:2b:a4:ad:f5:a4:ce:d1: 13:c7:5e:a6:a9:65:ed:ba:b8:18:a5:82:34:58:4a: 26:a9:c3:66:b3:b8:ab:4b:03:17:ce:45:16:8d:5d: cd:22:a6:fb:b4:1b:cc:73:2e:a4:f8:92:6b:2d:97: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2B:6F:57:8E:33:E1:42:2B:64:06:B0:7C:3F:0F:C8:1C:0F:3E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:34:2a:4d:17:81:3d:83:2c:d4:74:f0:52:77:f9:36:4b:c1: e3:33:e7:01:53:0b:14:0b:ff:53:19:14:37:fe:1b:37:81:b3: ea:e9:75:58:70:88:ad:8b:01:5c:26:28:df:21:8c:4e:cc:d2: c1:ee:28:45:3c:f3:fd:c4:19:71:21:9e:70:38:f2:e4:89:ab: c6:39:3b:4e:f6:2f:dd:db:25:74:72:12:06:ed:09:b7:d4:e1: 24:d7:7a:60:e4:13:18:ef:08:d6:4c:b2:13:a9:d2:37:d5:30: 5c:ae:1b:51:a2:77:d1:52:5c:1d:93:8f:db:53:fe:b2:e3:fd: 3a:3c:64:dd:eb:b8:e9:fb:39:e5:c4:4d:cf:16:c7:f6:1e:89: 94:68:83:64:34:2a:b8:89:7b:53:ef:1c:f2:45:fe:9f:3d:c9: ec:dc:7f:78:47:3d:34:c4:51:d5:aa:ab:6f:aa:56:a2:82:7a: 23:3b:59:0d:44:c2:f1:46:32:23:6d:63:cf:94:bf:9a:58:18: 31:05:ad:fa:e9:a0:0a:20:76:18:67:0e:e3:0d:bb:f8:91:d7: 54:66:3b:3c:8d:94:26:ca:e9:5a:86:af:dc:70:e6:8a:74:24: 71:77:20:c5:22:08:f4:24:d3:f5:dd:aa:39:d7:6b:c9:3b:d6: 9d:ba:49:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulmZ9L0RLfQVHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmM3OTRiYzYtMDI0NS00ZGVhLWEwYzItNzI1MzA2NTBmMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD7ub0W51d1XU7Ge2FzkrTRwaXsDoj2BCVV2 KKjJJSVbio22DIudj65c2M0pOb8xNSnHSRQVUaY0zefPrq/X0Zwb4svrPrKog8Y7 QC09QlbrGT2KEvLVa+QtD+GyOZHd2+dlHLllKU+2DpkRJo1MG8sRCEVwrsQ4Y2rw rl3L8WCW1bAMwcIF/cGEdMr/wFTp/HHZta9HuO9mKgc+B7KDXLt4OQAha0Le/Pgu Lj53q3elp+ozn/4zHZXRik/p+bWzvm1vPHByfCxjgSukrfWkztETx16mqWXturgY pYI0WEomqcNms7irSwMXzkUWjV3NIqb7tBvMcy6k+JJrLZfn1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4rb1eOM+FCK2QGsHw/D8gcDz5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWY2YzljMGQtNTNlZS0z NDNjLWE5YmMtYjE4NDg3NjBjZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQ0Kk0XgT2DLNR08FJ3+TZLweMz5wFTCxQL/1MZFDf+GzeBs+rpdVhw iK2LAVwmKN8hjE7M0sHuKEU88/3EGXEhnnA48uSJq8Y5O072L93bJXRyEgbtCbfU 4STXemDkExjvCNZMshOp0jfVMFyuG1Gid9FSXB2Tj9tT/rLj/To8ZN3ruOn7OeXE Tc8Wx/YeiZRog2Q0KriJe1PvHPJF/p89yezcf3hHPTTEUdWqq2+qVqKCeiM7WQ1E wvFGMiNtY8+Uv5pYGDEFrfrpoAogdhhnDuMNu/iR11RmOzyNlCbK6VqGr9xw5op0 JHF3IMUiCPQk0/XdqjnXa8k71p26SRs= -----END CERTIFICATE-----Generated at Mon Apr 28 12:35:10 2025 by rpki-client