$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb22e468-4c44-375e-9bd6-72cb73940d05.roa File: fb22e468-4c44-375e-9bd6-72cb73940d05.roa (raw, json) Hash identifier: jtblOIPPjtKtXj0i399tGe6QqxINCV2ZhnOXi0ydzU8= Subject key identifier: 8C:C7:4C:B6:B3:7A:8F:14:44:3F:2B:3E:34:E8:61:47:5B:D3:4F:78 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE0B62D2F8BA1C62DA4C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb22e468-4c44-375e-9bd6-72cb73940d05.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e0:b6:2d:2f:8b:a1:c6:2d:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=304f40ce-47e2-40f6-8e01-ff449aab187c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:2f:4f:e6:d0:aa:5e:53:66:04:1d:ea:6d: 06:b3:ce:66:a3:8d:bc:a5:94:1d:14:0c:d3:c7:29: a1:f4:a5:18:46:12:a5:17:71:10:07:0e:9d:36:b1: 5a:33:bd:a9:20:92:aa:9e:66:5d:8a:14:c6:54:ec: fc:63:1c:f1:d3:b6:cb:aa:91:7c:74:d0:38:3c:c1: 8a:f9:8e:81:e0:65:b6:e7:e1:91:da:78:90:7f:d5: 81:b6:47:9a:69:4c:ff:c0:44:53:af:f3:2a:99:a3: 40:99:bf:27:33:19:5e:01:ff:e8:90:a1:09:b8:d5: 9e:6e:71:1c:b1:f0:25:d9:d5:67:c0:68:69:ff:c2: 08:3c:54:78:d0:b0:1b:1f:c7:93:56:0a:98:13:2a: 59:dd:46:ad:13:23:e4:e1:0a:0e:aa:a1:4f:a6:32: b2:37:01:bb:b0:ee:8f:7e:58:12:6c:06:53:f2:b6: cc:1b:03:0f:13:97:aa:3a:e7:23:34:f9:02:83:13: 13:ab:04:25:99:2e:74:1e:f6:58:f7:43:35:d8:ee: ca:86:b3:87:e7:b4:60:73:c2:bf:78:80:60:f5:8c: 46:a1:4f:27:ed:46:62:bc:f7:4c:e6:87:81:43:01: f8:6d:de:95:a6:77:9a:ea:bb:68:c3:34:e9:9a:b6: 8d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C7:4C:B6:B3:7A:8F:14:44:3F:2B:3E:34:E8:61:47:5B:D3:4F:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb22e468-4c44-375e-9bd6-72cb73940d05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:50:df:0e:df:1e:41:74:a4:2f:b0:9c:40:f8:6e:81:a7:78: 44:80:16:7b:3b:37:0d:9a:34:59:3c:71:f2:f1:bc:1c:7a:26: b7:8d:c9:2d:a0:8f:f0:85:e5:e7:14:b3:b1:42:3f:71:ad:70: 45:42:cb:43:29:85:8f:d7:fc:99:2e:b0:bc:78:30:ae:51:d3: 17:36:64:7a:f2:a3:53:2e:b9:42:eb:07:a4:6a:b0:dc:9b:8e: 6a:00:f8:2a:b7:aa:07:72:a0:9c:a1:40:be:cf:64:3e:62:8e: ab:1c:1f:80:c3:e9:b6:02:65:3e:22:4a:d4:87:a4:46:54:ea: b1:65:03:4d:45:40:bf:f2:73:85:21:78:06:fa:01:64:ad:da: d5:27:00:03:a5:43:80:e3:89:50:d7:32:11:ea:7d:97:fa:78: 5d:c3:01:91:a3:9b:f0:02:18:a2:80:43:4e:e7:de:76:9f:62: 3d:4e:dd:47:8e:ce:db:82:f8:5d:d5:96:4f:90:29:22:a7:0a: d6:3b:4a:73:c9:9c:11:2e:af:8c:a9:9e:c3:52:f7:0e:3c:69: db:fd:10:80:98:c6:e1:1a:73:10:5c:c8:b0:0f:ae:d0:15:8e: 91:38:d6:53:44:24:28:af:64:22:dd:5f:f6:05:43:54:a1:76: a7:e2:b6:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuC2LS+LocYtpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzA0ZjQwY2UtNDdlMi00MGY2LThlMDEtZmY0NDlhYWIxODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3IvT+bQql5TZgQd6m0Gs85mo428pZQdFAzT xymh9KUYRhKlF3EQBw6dNrFaM72pIJKqnmZdihTGVOz8Yxzx07bLqpF8dNA4PMGK +Y6B4GW25+GR2niQf9WBtkeaaUz/wERTr/MqmaNAmb8nMxleAf/okKEJuNWebnEc sfAl2dVnwGhp/8IIPFR40LAbH8eTVgqYEypZ3UatEyPk4QoOqqFPpjKyNwG7sO6P flgSbAZT8rbMGwMPE5eqOucjNPkCgxMTqwQlmS50HvZY90M12O7KhrOH57Rgc8K/ eIBg9YxGoU8n7UZivPdM5oeBQwH4bd6Vpnea6rtowzTpmraNlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzHTLazeo8URD8rPjToYUdb0094MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmIyMmU0NjgtNGM0NC0z NzVlLTliZDYtNzJjYjczOTQwZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBQ3w7fHkF0pC+wnED4boGneESAFns7Nw2aNFk8cfLxvBx6JreNyS2g j/CF5ecUs7FCP3GtcEVCy0MphY/X/JkusLx4MK5R0xc2ZHryo1MuuULrB6RqsNyb jmoA+Cq3qgdyoJyhQL7PZD5ijqscH4DD6bYCZT4iStSHpEZU6rFlA01FQL/yc4Uh eAb6AWSt2tUnAAOlQ4DjiVDXMhHqfZf6eF3DAZGjm/ACGKKAQ07n3nafYj1O3UeO ztuC+F3Vlk+QKSKnCtY7SnPJnBEur4ypnsNS9w48adv9EICYxuEacxBcyLAPrtAV jpE41lNEJCivZCLdX/YFQ1ShdqfitiU= -----END CERTIFICATE-----Generated at Sun Apr 27 16:00:27 2025 by rpki-client