$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/658111e8-f53f-36d8-aae4-50c258e0a34e.roa File: 658111e8-f53f-36d8-aae4-50c258e0a34e.roa (raw, json) Hash identifier: qwH6K7VSHXaSv5CSCIzYMYXGXJce8sk9rTbngNbikTI= Subject key identifier: 15:BB:3E:2E:44:7E:84:2D:8E:9F:B4:94:D2:FC:A9:0A:3C:28:68:B3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE0363D035C40C19C5080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/658111e8-f53f-36d8-aae4-50c258e0a34e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e0:36:3d:03:5c:40:c1:9c:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e7d96849-6465-40a9-87a8-a9439505ee9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b7:d7:3a:47:f5:13:f3:52:24:a0:7d:2f:2b: 4f:16:6d:f2:a2:e7:61:a7:5c:fe:76:f6:e5:74:81: c7:f1:2b:9e:a6:10:10:71:9c:be:37:27:81:5c:14: 03:17:73:d6:38:16:5d:29:d9:2b:56:65:82:5e:d2: 87:5a:6b:48:12:f6:71:cc:69:b0:27:1b:5b:a2:58: 16:8a:77:c2:2d:9d:3e:5c:8e:3d:3b:d1:0a:63:2b: 35:d5:bf:24:8b:f8:79:02:37:3e:d8:c7:20:61:fb: de:55:04:46:4d:3e:e9:c7:1e:68:49:db:0c:9c:73: 4b:c7:e2:0b:20:56:ec:ef:5f:7e:96:c6:31:58:8a: 2c:c2:0d:99:a7:e7:c3:e2:b3:a2:c4:81:0f:b4:d6: c4:b1:1e:2f:e5:55:d0:67:7e:76:0a:6c:77:ac:b6: 05:d3:fb:b2:87:2d:2a:44:25:c9:14:b2:ed:2c:81: c5:11:d0:78:bd:ea:3e:90:43:f2:84:4b:0d:70:3c: ea:56:a9:ce:00:4e:6d:10:22:91:bb:20:17:f6:7d: 45:8d:40:20:31:dc:29:25:fe:2c:0b:64:f0:78:37: b6:27:6b:28:f2:45:08:7b:94:66:34:33:fa:36:58: db:7f:6c:3f:1b:b3:95:17:f2:a4:b9:43:b5:ca:70: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BB:3E:2E:44:7E:84:2D:8E:9F:B4:94:D2:FC:A9:0A:3C:28:68:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/658111e8-f53f-36d8-aae4-50c258e0a34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:43:4c:16:d9:e5:da:47:eb:3c:db:aa:6e:d0:05:59:15:9c: 45:d9:0e:6f:fa:df:5f:9b:19:b6:9f:17:3d:28:1b:86:fa:3e: 03:b6:2a:7a:6b:d0:9c:54:3b:99:8e:99:50:c4:26:70:db:9d: da:7b:97:95:19:42:da:37:c9:03:d1:ae:ef:cb:a2:72:bd:a9: 65:5a:ae:e7:d4:cc:b3:c7:0b:b2:3b:cf:9d:b8:12:e5:b3:53: f3:6a:16:12:77:94:12:0d:99:cb:d9:c1:f1:5d:75:ce:a6:de: 15:bf:24:36:5d:9e:a6:66:cd:e6:03:0f:9f:93:4f:4e:b2:d9: 18:b6:e8:b2:33:a8:15:4c:d4:ef:25:06:8d:02:d0:f1:60:ea: 86:ec:95:0b:32:95:7b:64:d9:d3:58:f7:1c:52:34:c5:2e:89: e1:e6:b7:37:3e:01:52:4b:62:a9:b0:ce:5c:7c:fe:ff:e8:a7: e2:c3:af:f9:b0:27:1a:14:60:34:ce:60:40:44:2d:55:86:aa: 8a:c1:bb:35:24:c1:bf:39:f5:2e:d1:5f:e7:e1:b5:2a:b2:91: 19:d0:ee:f2:13:d8:c2:10:e8:82:c6:4e:c4:a5:a1:46:91:b3: 36:13:b5:28:b7:18:e2:b6:fe:50:da:30:49:8e:af:6d:83:32: 26:d8:b2:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuA2PQNcQMGcUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTdkOTY4NDktNjQ2NS00MGE5LTg3YTgtYTk0Mzk1MDVlZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rfXOkf1E/NSJKB9LytPFm3youdhp1z+dvbl dIHH8SuephAQcZy+NyeBXBQDF3PWOBZdKdkrVmWCXtKHWmtIEvZxzGmwJxtbolgW infCLZ0+XI49O9EKYys11b8ki/h5Ajc+2McgYfveVQRGTT7pxx5oSdsMnHNLx+IL IFbs719+lsYxWIoswg2Zp+fD4rOixIEPtNbEsR4v5VXQZ352Cmx3rLYF0/uyhy0q RCXJFLLtLIHFEdB4veo+kEPyhEsNcDzqVqnOAE5tECKRuyAX9n1FjUAgMdwpJf4s C2TweDe2J2so8kUIe5RmNDP6Nljbf2w/G7OVF/KkuUO1ynCWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBW7Pi5EfoQtjp+0lNL8qQo8KGizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjU4MTExZTgtZjUzZi0z NmQ4LWFhZTQtNTBjMjU4ZTBhMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdDTBbZ5dpH6zzbqm7QBVkVnEXZDm/631+bGbafFz0oG4b6PgO2Knpr 0JxUO5mOmVDEJnDbndp7l5UZQto3yQPRru/LonK9qWVarufUzLPHC7I7z524EuWz U/NqFhJ3lBINmcvZwfFddc6m3hW/JDZdnqZmzeYDD5+TT06y2Ri26LIzqBVM1O8l Bo0C0PFg6obslQsylXtk2dNY9xxSNMUuieHmtzc+AVJLYqmwzlx8/v/op+LDr/mw JxoUYDTOYEBELVWGqorBuzUkwb859S7RX+fhtSqykRnQ7vIT2MIQ6ILGTsSloUaR szYTtSi3GOK2/lDaMEmOr22DMibYsjk= -----END CERTIFICATE-----Generated at Wed May 7 13:42:11 2025 by rpki-client