$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8122e1-4a7a-3021-ae49-af2fa28a8089.roa File: df8122e1-4a7a-3021-ae49-af2fa28a8089.roa (raw, json) Hash identifier: JfUgyRTJMBg9a2bA0Ze7ngq5mGsm0dJCfJdyej0d8mo= Subject key identifier: 9C:B3:18:1B:24:02:7E:5C:1D:9B:71:CA:8D:58:C9:C3:5B:98:7A:F5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA57578F4177F68CA7D680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8122e1-4a7a-3021-ae49-af2fa28a8089.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:57:57:8f:41:77:f6:8c:a7:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=72043952-bc3e-471d-8877-450236eaf2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:0b:13:e2:4d:17:0c:cc:b3:b4:08:4b:9d: 6e:21:30:61:b4:76:82:dc:fc:0d:fb:d7:99:35:df: b1:46:c0:4f:b1:f8:b4:af:75:ff:f3:9c:73:aa:c3: 13:59:16:50:ca:b4:d9:ea:0d:f3:ab:88:78:e2:82: a2:80:1d:ec:27:c7:39:fc:a6:60:03:76:31:b6:67: 31:f7:55:36:9d:ea:61:15:73:c8:50:2a:4a:8e:4f: ad:8b:71:a9:08:a1:b8:b2:27:66:cd:46:65:63:d1: a9:d5:d6:f9:a4:3e:03:08:4b:04:ac:ce:de:1b:a4: cb:17:c9:22:4d:77:23:cf:dc:1e:4a:b9:05:c8:ae: 23:14:3d:26:94:90:17:0c:07:c8:c5:ad:8b:5d:bd: 03:5d:0e:12:cc:4d:4e:c9:29:61:83:93:b5:1d:f5: 6f:4b:26:01:50:a8:30:2b:22:bf:c0:8a:96:77:50: f9:e3:c6:35:3e:df:cb:6c:90:46:e1:a7:3b:94:bc: 71:36:da:4a:de:9a:da:82:59:5e:c2:af:54:4f:cb: 9f:34:4e:2b:58:8e:80:fa:59:76:0b:3d:02:83:5a: 7a:10:87:74:a0:96:16:1c:67:39:b5:77:15:e3:1d: 62:5f:a5:13:30:d1:85:b2:8d:63:3d:72:a3:57:4c: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B3:18:1B:24:02:7E:5C:1D:9B:71:CA:8D:58:C9:C3:5B:98:7A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8122e1-4a7a-3021-ae49-af2fa28a8089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:72:54:d9:2d:90:f6:64:44:0e:2d:33:4d:88:4a:7a:73:1c: 53:f5:cf:6f:19:41:78:8e:6e:4d:27:2f:3f:ad:10:9a:1f:71: f7:d1:7f:c3:e7:b6:b6:60:30:a2:1c:d4:78:e6:b2:0e:df:e1: b7:a8:68:bd:f6:b5:df:a1:f9:9c:bf:b6:07:2c:62:95:19:56: 4a:df:9e:88:64:18:a5:00:0e:30:7c:76:69:01:4c:a3:f2:cc: be:55:64:82:77:c9:25:43:0b:85:5d:22:4a:72:74:07:bb:70: ab:72:f4:99:ca:b3:3c:76:41:87:bb:87:3f:8c:8e:5f:b9:40: 0e:14:77:aa:f7:db:57:1e:5e:7a:41:7d:1e:46:58:d5:42:55: 18:b0:6d:aa:a7:06:45:85:f0:d8:e1:e8:bb:70:45:6f:85:02: f1:49:62:d2:55:81:49:d3:76:0b:c7:c0:0a:67:2e:0a:58:87: 2b:09:4b:97:bd:5d:ff:49:db:80:54:81:8a:30:bc:87:f2:77: 1a:24:63:6f:db:8a:7e:0e:1b:ca:4c:9c:72:f0:71:dd:3a:af: a8:fa:46:a0:87:c0:de:22:c9:e6:55:8b:3a:1f:29:1e:90:84: 83:df:9c:b2:05:5f:a7:76:ca:3a:36:29:3a:59:27:5c:2d:b4: c4:6c:9e:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuldXj0F39oyn1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzIwNDM5NTItYmMzZS00NzFkLTg4NzctNDUwMjM2ZWFmMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NALE+JNFwzMs7QIS51uITBhtHaC3PwN+9eZ Nd+xRsBPsfi0r3X/85xzqsMTWRZQyrTZ6g3zq4h44oKigB3sJ8c5/KZgA3Yxtmcx 91U2nephFXPIUCpKjk+ti3GpCKG4sidmzUZlY9Gp1db5pD4DCEsErM7eG6TLF8ki TXcjz9weSrkFyK4jFD0mlJAXDAfIxa2LXb0DXQ4SzE1OySlhg5O1HfVvSyYBUKgw KyK/wIqWd1D548Y1Pt/LbJBG4ac7lLxxNtpK3pragllewq9UT8ufNE4rWI6A+ll2 Cz0Cg1p6EId0oJYWHGc5tXcV4x1iX6UTMNGFso1jPXKjV0znHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyzGBskAn5cHZtxyo1YycNbmHr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGY4MTIyZTEtNGE3YS0z MDIxLWFlNDktYWYyZmEyOGE4MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdyVNktkPZkRA4tM02ISnpzHFP1z28ZQXiObk0nLz+tEJofcffRf8Pn trZgMKIc1Hjmsg7f4beoaL32td+h+Zy/tgcsYpUZVkrfnohkGKUADjB8dmkBTKPy zL5VZIJ3ySVDC4VdIkpydAe7cKty9JnKszx2QYe7hz+Mjl+5QA4Ud6r321ceXnpB fR5GWNVCVRiwbaqnBkWF8Njh6LtwRW+FAvFJYtJVgUnTdgvHwApnLgpYhysJS5e9 Xf9J24BUgYowvIfydxokY2/bin4OG8pMnHLwcd06r6j6RqCHwN4iyeZVizofKR6Q hIPfnLIFX6d2yjo2KTpZJ1wttMRsnuw= -----END CERTIFICATE-----Generated at Tue Apr 29 00:36:38 2025 by rpki-client