$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3e0007e-06c9-33c2-87e1-c5756d0e2009.roa File: c3e0007e-06c9-33c2-87e1-c5756d0e2009.roa (raw, json) Hash identifier: LIWgBNN+hoQer2bPkjQPzGDAhXBRdkxOU+6rB7PXwl8= Subject key identifier: 36:E9:D7:86:ED:7D:88:59:32:E0:CC:D1:DC:E4:A9:4D:A5:C6:D3:33 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE4A936202E38183ACD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3e0007e-06c9-33c2-87e1-c5756d0e2009.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e4:a9:36:20:2e:38:18:3a:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=27407378-7a38-42c0-b4a2-b2e00683c466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ff:bf:c8:10:a5:9d:3f:19:c1:80:79:e2:f7: 0c:41:75:90:4a:a1:94:e3:7a:c0:66:64:b5:48:6f: 1f:19:0e:95:cb:45:73:16:37:d0:6b:fb:a3:b0:25: 19:68:4d:70:e5:83:b1:fd:db:95:c2:f5:d5:f0:ea: 93:e9:db:d7:79:b1:19:4b:5e:4f:1f:20:d3:fa:aa: 1f:68:b1:13:7a:eb:00:0e:c4:01:ba:f2:7b:75:95: da:c0:4f:7c:01:29:26:5d:b4:6a:7e:f6:66:d7:a4: a5:45:7e:31:72:11:30:9c:f3:07:1c:d3:55:53:0a: 2e:51:8e:c3:5a:81:13:c9:42:77:29:2c:99:5b:12: a8:35:64:d6:24:3f:da:1a:f6:6f:88:5e:ce:c1:bd: f9:da:a9:51:94:dd:06:ed:05:bf:aa:53:5e:1c:ce: 76:32:3c:df:d5:88:70:38:ea:36:0d:50:b3:e7:15: 47:15:b4:ab:00:86:c6:2b:6e:bb:b0:7b:25:ff:6d: 0a:cf:7e:07:7b:38:7f:03:a7:fd:1a:4c:fa:c5:0d: 33:0e:33:7e:3d:f9:59:40:ca:af:e6:dd:de:08:8f: d4:45:4a:02:17:bc:80:37:97:b3:52:be:d9:10:fa: 2f:91:fb:d2:79:f0:54:c7:f5:22:5a:52:fc:4f:d4: 57:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E9:D7:86:ED:7D:88:59:32:E0:CC:D1:DC:E4:A9:4D:A5:C6:D3:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3e0007e-06c9-33c2-87e1-c5756d0e2009.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:36:14:cc:80:f8:0f:52:8f:2d:f6:3e:ba:b5:14:4d:68:a3: d5:4d:d9:c4:61:4e:24:33:17:72:00:98:94:8a:7c:3e:2d:83: c8:21:6f:59:99:81:18:ff:fd:c3:fd:54:78:5d:4b:2b:07:e3: 73:38:fd:25:34:85:4f:6b:82:a6:ba:c9:bc:11:8d:36:27:7d: c5:a4:ef:86:0a:ae:48:d2:0b:42:e2:87:5e:ec:05:be:dd:29: ff:8c:ad:c4:3e:81:22:76:0c:35:3c:8f:3d:3e:5c:28:6d:7a: 2c:e3:14:97:4d:90:08:20:3c:f6:9e:3d:7f:06:50:69:2d:7a: d5:f9:c3:31:b2:ec:61:b3:2b:9e:1e:c6:c2:92:a3:b8:22:9d: 80:42:9e:94:80:f3:d8:46:25:f0:7a:47:bd:28:b7:86:d5:98: 63:ec:f8:fa:ff:30:0f:5c:62:6c:90:d1:40:5f:4f:19:81:41: e9:af:bb:47:58:43:75:ad:43:7b:9c:14:fd:54:91:c3:44:62: e5:6e:39:fe:a6:95:d7:dc:df:aa:2f:69:a1:6d:91:bc:d3:d9: 4b:4b:fd:d0:2d:7e:b2:01:de:cb:9f:30:1c:8e:74:3f:24:ab: aa:7c:87:e2:74:5c:4b:34:24:4a:d8:ea:3f:a3:39:1d:bf:ba: d0:bd:b7:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuSpNiAuOBg6zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Mjc0MDczNzgtN2EzOC00MmMwLWI0YTItYjJlMDA2ODNjNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP+/yBClnT8ZwYB54vcMQXWQSqGU43rAZmS1 SG8fGQ6Vy0VzFjfQa/ujsCUZaE1w5YOx/duVwvXV8OqT6dvXebEZS15PHyDT+qof aLETeusADsQBuvJ7dZXawE98ASkmXbRqfvZm16SlRX4xchEwnPMHHNNVUwouUY7D WoETyUJ3KSyZWxKoNWTWJD/aGvZviF7Owb352qlRlN0G7QW/qlNeHM52Mjzf1Yhw OOo2DVCz5xVHFbSrAIbGK267sHsl/20Kz34Hezh/A6f9Gkz6xQ0zDjN+PflZQMqv 5t3eCI/URUoCF7yAN5ezUr7ZEPovkfvSefBUx/UiWlL8T9RXowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbp14btfYhZMuDM0dzkqU2lxtMzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzNlMDAwN2UtMDZjOS0z M2MyLTg3ZTEtYzU3NTZkMGUyMDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALE2FMyA+A9Sjy32Prq1FE1oo9VN2cRhTiQzF3IAmJSKfD4tg8ghb1mZ gRj//cP9VHhdSysH43M4/SU0hU9rgqa6ybwRjTYnfcWk74YKrkjSC0Lih17sBb7d Kf+MrcQ+gSJ2DDU8jz0+XChteizjFJdNkAggPPaePX8GUGktetX5wzGy7GGzK54e xsKSo7ginYBCnpSA89hGJfB6R70ot4bVmGPs+Pr/MA9cYmyQ0UBfTxmBQemvu0dY Q3WtQ3ucFP1UkcNEYuVuOf6mldfc36ovaaFtkbzT2UtL/dAtfrIB3sufMByOdD8k q6p8h+J0XEs0JErY6j+jOR2/utC9t6Y= -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:29 2025 by rpki-client