$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa File: f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa (raw, json) Hash identifier: 4GgulrqUwL/5gQbW8VA1aAolnpIQxrrJSMbUrKsZcYw= Subject key identifier: 3E:2C:23:3B:7A:48:62:0B:CF:C4:56:36:62:96:2A:94:A6:21:ED:19 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841199106291A968A3694000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 40306 IP address blocks: 70.41.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:99:10:62:91:a9:68:a3:69:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fb6e365e-a93c-4fed-822d-bf008c4038bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:88:55:2b:08:49:92:d5:72:bd:7e:c4:fe: 68:04:1b:7a:56:e3:82:16:b1:6a:3d:b8:86:36:dd: 83:7c:75:af:69:a9:ee:b0:17:f1:03:ba:bd:37:e8: ba:e1:7c:a6:8b:f8:9a:06:c5:bf:2f:50:87:d3:d9: ab:0e:df:a4:cc:c4:9c:7d:f8:73:bb:e6:85:0a:55: 95:0b:c3:51:92:fa:33:3f:1b:c5:b9:bf:92:06:3c: 44:f3:10:d6:fc:d4:d1:0c:4d:84:a4:83:0d:d3:cd: c9:4a:12:05:80:4e:fb:8e:78:a8:60:3a:80:f7:a8: f0:54:b8:b8:79:69:70:ac:3f:93:ec:4a:f6:cc:66: ec:6c:78:34:93:35:e1:d6:36:70:77:d5:8e:ca:b6: d8:00:94:42:ac:d0:06:d5:89:13:65:16:cc:bf:62: af:71:64:b7:ea:9d:33:47:af:69:51:80:e2:bf:b3: da:7c:7e:27:8a:a8:7e:37:f1:55:43:3d:ec:26:0a: df:0c:5e:a6:b1:15:7c:d5:36:9b:fc:ae:8d:26:b1: 78:b6:e3:a1:e0:0a:aa:0f:b4:de:72:61:15:3e:0b: 8a:00:20:0b:a9:84:e5:47:80:4a:31:d7:58:b2:54: 79:43:ff:27:c7:85:c7:90:7f:2a:10:13:5d:52:8e: d9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2C:23:3B:7A:48:62:0B:CF:C4:56:36:62:96:2A:94:A6:21:ED:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d8:ae:b5:2d:e2:d3:d7:16:2d:76:52:78:7c:31:e4:48:95: 85:09:4e:65:54:9d:92:8b:46:7f:c3:81:0c:5c:4d:1a:d0:ff: 1e:18:24:6a:48:fd:70:b7:7c:e1:93:8f:61:49:34:f2:7b:cb: 34:16:d3:f8:8a:9b:eb:f6:6a:3e:1e:27:22:d2:17:5a:ce:11: ba:b4:fe:56:59:99:6b:96:24:90:d0:a5:f7:a9:8f:79:11:94: 2e:3e:77:78:91:f3:ab:12:aa:63:c8:e0:f0:44:d2:0b:ff:13: 33:05:d7:ba:1c:b9:9d:66:14:23:b9:96:37:1e:03:11:ce:bb: 52:f1:3e:c7:67:26:da:1d:0d:a4:63:ea:f7:11:0e:7a:73:a2: 83:d3:97:69:bc:fa:24:d3:64:17:71:1e:c6:f5:28:44:26:17: 7e:c3:c4:6f:a9:15:21:54:ba:d0:f7:ee:83:88:c1:8b:5f:c0: ab:4e:c9:ee:f2:e3:94:c8:9f:c4:4e:40:dc:5e:05:08:ff:f0: 3f:40:ac:bb:d7:9e:ca:a6:a2:02:11:d9:19:d3:37:20:89:b0: f3:60:e6:cb:68:79:e0:5e:d9:9f:ba:79:7f:07:af:ed:37:a9: 34:7b:12:63:0b:16:ba:25:1f:89:04:24:aa:92:e1:05:e2:36: d1:bb:e3:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZkQYpGpaKNpQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmI2ZTM2NWUtYTkzYy00ZmVkLTgyMmQtYmYwMDhjNDAzOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRGIVSsISZLVcr1+xP5oBBt6VuOCFrFqPbiG Nt2DfHWvaanusBfxA7q9N+i64Xymi/iaBsW/L1CH09mrDt+kzMScffhzu+aFClWV C8NRkvozPxvFub+SBjxE8xDW/NTRDE2EpIMN083JShIFgE77jnioYDqA96jwVLi4 eWlwrD+T7Er2zGbsbHg0kzXh1jZwd9WOyrbYAJRCrNAG1YkTZRbMv2KvcWS36p0z R69pUYDiv7PafH4niqh+N/FVQz3sJgrfDF6msRV81Tab/K6NJrF4tuOh4AqqD7Te cmEVPguKACALqYTlR4BKMddYslR5Q/8nx4XHkH8qEBNdUo7ZLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4sIzt6SGILz8RWNmKWKpSmIe0ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjM5YTU4NzgtNjUyNC0z YmZlLWFjODAtOTkxNWI3ZWVlZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3YrrUt4tPXFi12Unh8MeRIlYUJTmVUnZKLRn/DgQxcTRrQ/x4YJGpI /XC3fOGTj2FJNPJ7yzQW0/iKm+v2aj4eJyLSF1rOEbq0/lZZmWuWJJDQpfepj3kR lC4+d3iR86sSqmPI4PBE0gv/EzMF17ocuZ1mFCO5ljceAxHOu1LxPsdnJtodDaRj 6vcRDnpzooPTl2m8+iTTZBdxHsb1KEQmF37DxG+pFSFUutD37oOIwYtfwKtOye7y 45TIn8ROQNxeBQj/8D9ArLvXnsqmogIR2RnTNyCJsPNg5stoeeBe2Z+6eX8Hr+03 qTR7EmMLFrolH4kEJKqS4QXiNtG74zg= -----END CERTIFICATE-----Generated at Wed Aug 6 18:43:56 2025 by rpki-client