$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe09bc36-af6b-314b-bd5b-973946014ec1.roa File: fe09bc36-af6b-314b-bd5b-973946014ec1.roa (raw, json) Hash identifier: 8X2q6AKVPKe9Mr8giW2br+OWpJ6xVS7ECtQI+u3hHkg= Subject key identifier: 54:3D:96:45:09:11:39:7B:FA:34:23:16:04:B3:FE:E7:92:2D:0D:B1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5740BE3085277615CD90 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe09bc36-af6b-314b-bd5b-973946014ec1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:57:40:be:30:85:27:76:15:cd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=124fafba-761e-4c8d-9cc5-5d7654f75fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:d6:3d:70:6e:e8:6e:f2:5f:29:c1:d9:1e: 8c:1e:84:93:48:13:da:90:11:c5:00:94:7c:ae:41: 48:69:8f:6f:a2:48:34:66:ed:35:ad:de:aa:0a:8e: d1:ac:e6:e9:2f:24:60:66:3d:61:8e:cb:30:cb:62: ca:e4:59:a9:7f:ca:37:00:33:29:64:f4:93:64:d4: 75:7c:e6:1b:90:0e:7e:9a:d7:f6:1e:91:d8:80:b9: 3f:31:d7:f5:78:2b:7e:f0:78:52:cf:a0:1e:98:cb: 17:a9:3c:4c:9c:60:b1:80:11:e2:a5:1e:3a:6e:88: 7a:c7:2b:e5:2f:68:80:da:8a:79:f9:25:6c:13:76: df:ab:0a:d7:65:3d:ca:96:80:ef:3c:66:a1:22:54: c4:4a:0d:ca:7d:02:30:a7:6b:90:8b:64:86:96:6e: ef:bb:b1:ad:69:bd:39:0b:6e:8c:6e:15:ab:5a:e0: 35:01:7d:6c:7b:3b:e0:2b:9b:bb:7c:1c:44:bc:30: 9d:af:86:77:f5:fc:13:7d:26:68:14:4f:1c:6b:9c: 5e:f2:fa:80:56:3e:9e:39:51:2f:bf:bf:da:9f:22: 2d:ac:2f:c5:59:88:eb:5b:b1:1b:f5:da:5f:56:01: 71:28:5a:b9:c5:2a:0c:2e:2d:ca:f9:65:2b:28:3a: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3D:96:45:09:11:39:7B:FA:34:23:16:04:B3:FE:E7:92:2D:0D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe09bc36-af6b-314b-bd5b-973946014ec1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:42:e2:5b:68:e8:94:ab:fb:5c:05:fd:23:0e:63:87:b4:48: 2d:b6:a9:5f:4c:66:62:8d:85:91:7b:ee:79:a9:17:2d:1c:74: a0:1e:1b:dc:24:b3:bc:8f:27:c0:ed:d0:e0:95:64:9c:25:c5: 45:80:32:8c:54:20:2e:8b:c2:54:11:4d:3e:e3:23:1e:59:03: 95:1a:22:de:b5:dc:96:fe:b5:4a:3e:36:1c:5e:ae:83:06:7b: 8f:df:bf:e1:2f:eb:dc:52:6a:49:75:7b:1a:e0:f3:0b:63:fa: 03:b3:17:3e:f1:53:0c:cf:cb:cc:11:fb:59:be:fe:ad:cd:98: 4b:e2:5e:d4:76:d0:bf:36:d0:bc:25:54:56:42:54:13:13:55: 93:b7:09:79:71:21:62:46:b7:26:60:43:6d:ba:f3:d8:50:ab: c8:be:5e:04:26:f9:00:ce:c1:4e:b6:74:bf:a0:e2:ac:b2:c7: 32:1d:a9:89:ea:38:14:b8:55:23:10:4f:f5:09:29:ac:5a:63: 15:b2:66:d8:51:ef:a9:64:c7:31:e9:08:ac:d3:ac:ab:a5:c7: dd:56:94:00:7a:b4:de:a0:1b:6b:21:92:f9:bb:48:9b:36:a1: cc:7f:4e:bf:88:ee:14:b3:18:a4:b0:94:26:2c:8d:29:86:13: 12:be:b6:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuldAvjCFJ3YVzZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTI0ZmFmYmEtNzYxZS00YzhkLTljYzUtNWQ3NjU0Zjc1ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/PWPXBu6G7yXynB2R6MHoSTSBPakBHFAJR8 rkFIaY9vokg0Zu01rd6qCo7RrObpLyRgZj1hjsswy2LK5Fmpf8o3ADMpZPSTZNR1 fOYbkA5+mtf2HpHYgLk/Mdf1eCt+8HhSz6AemMsXqTxMnGCxgBHipR46boh6xyvl L2iA2op5+SVsE3bfqwrXZT3KloDvPGahIlTESg3KfQIwp2uQi2SGlm7vu7Gtab05 C26MbhWrWuA1AX1sezvgK5u7fBxEvDCdr4Z39fwTfSZoFE8ca5xe8vqAVj6eOVEv v7/anyItrC/FWYjrW7Eb9dpfVgFxKFq5xSoMLi3K+WUrKDooEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ9lkUJETl7+jQjFgSz/ueSLQ2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmUwOWJjMzYtYWY2Yi0z MTRiLWJkNWItOTczOTQ2MDE0ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBC4lto6JSr+1wF/SMOY4e0SC22qV9MZmKNhZF77nmpFy0cdKAeG9wk s7yPJ8Dt0OCVZJwlxUWAMoxUIC6LwlQRTT7jIx5ZA5UaIt613Jb+tUo+NhxeroMG e4/fv+Ev69xSakl1exrg8wtj+gOzFz7xUwzPy8wR+1m+/q3NmEviXtR20L820Lwl VFZCVBMTVZO3CXlxIWJGtyZgQ22689hQq8i+XgQm+QDOwU62dL+g4qyyxzIdqYnq OBS4VSMQT/UJKaxaYxWyZthR76lkxzHpCKzTrKulx91WlAB6tN6gG2shkvm7SJs2 ocx/Tr+I7hSzGKSwlCYsjSmGExK+tlo= -----END CERTIFICATE-----Generated at Sun Apr 27 05:40:01 2025 by rpki-client