$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a9bffce-aa29-36c6-a2d6-758ba0c790ac.roa File: 7a9bffce-aa29-36c6-a2d6-758ba0c790ac.roa (raw, json) Hash identifier: VYWzLL7w+X5tnf/i7CS9BcyAgd3QdRI9Flc+UAypUqg= Subject key identifier: 18:99:FC:64:89:C4:8A:C8:6B:70:BB:38:03:71:13:4C:F6:53:29:6D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA58EA52E0DF1FC8610080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a9bffce-aa29-36c6-a2d6-758ba0c790ac.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:58:ea:52:e0:df:1f:c8:61:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aa32931e-9f73-4dd5-aa06-1659c61d0d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:07:7f:98:13:e2:e7:7b:38:02:10:60:00: df:30:35:6f:7d:fd:8f:65:53:a3:e9:a7:24:1c:b6: 5c:10:49:88:e2:5e:1f:d8:d3:50:b8:ee:aa:d2:a7: 1f:a8:a2:02:7e:26:35:64:ed:76:ad:8f:d2:7f:40: 50:2e:88:63:6f:de:2e:ec:2f:a5:49:b1:e0:1e:69: c8:cb:55:54:09:3a:da:21:d8:10:89:36:8d:b4:63: e9:80:03:3e:7c:31:41:d7:5b:8d:9d:3b:7e:3f:20: b1:54:1f:64:1f:9e:2b:40:cf:0d:0a:05:ac:07:5e: d8:9c:ac:68:f9:d3:40:ae:bf:d8:4c:1b:89:6b:1e: 73:13:b2:18:1d:d0:45:87:2d:60:61:a7:82:ab:e6: 50:7d:01:72:f1:b7:c4:6a:40:46:50:34:63:db:53: b0:66:a1:47:4e:cf:30:7d:d6:4d:08:bd:94:be:5f: 0c:e3:ef:e5:e1:58:7c:7b:5b:cc:4c:a7:90:88:ad: 7f:b7:22:e2:21:aa:9c:13:31:95:14:0a:1e:ac:82: 0a:f8:58:10:21:73:aa:c0:f1:ac:7a:8d:de:6a:27: de:fe:37:24:da:f0:c4:10:83:12:d8:07:e0:28:57: e4:25:a6:34:1c:e3:d5:fb:d9:d4:7d:f4:68:5e:e5: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:FC:64:89:C4:8A:C8:6B:70:BB:38:03:71:13:4C:F6:53:29:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a9bffce-aa29-36c6-a2d6-758ba0c790ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6b:51:9b:38:6d:61:b8:81:f9:3d:0d:ba:c2:28:98:f5:8b: 67:67:c3:e6:c8:a9:9d:5a:ab:77:4c:60:ea:39:5e:94:d4:92: c4:90:fb:66:12:b1:b6:c9:b3:35:9e:17:e3:9f:6f:86:6f:15: e9:62:f2:ec:f7:84:8e:58:0b:1d:4e:22:43:da:2b:b0:e5:87: bb:51:98:a3:39:6d:f1:3f:04:f3:d9:b7:ce:f4:2a:d0:06:45: 58:62:39:1d:91:29:45:a3:98:b8:5d:05:7c:d9:c0:93:53:2a: 2c:39:52:04:9f:91:29:4d:ac:11:b6:11:89:9f:ce:aa:67:03: 3f:87:43:55:79:8b:12:98:97:ce:78:42:a8:25:84:66:00:1c: 49:f1:bb:46:b2:ac:3a:59:0b:63:73:36:1f:c3:7a:8d:e6:cb: 98:30:13:02:1c:5e:94:7c:b7:c1:d4:c6:07:15:3c:9b:09:0f: de:f7:04:b2:1b:52:97:7a:67:52:1b:50:22:4d:ca:3b:38:3d: b9:4b:27:d2:38:50:c1:36:2b:e9:22:2b:39:95:fe:c1:4a:4e: 15:37:8d:cf:43:b2:16:bb:d4:88:8a:15:2c:c3:6a:9a:27:a8: 53:64:86:59:0a:06:2a:a7:49:df:5b:fd:88:db:13:05:e0:8a: 7d:03:ff:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuljqUuDfH8hhAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWEzMjkzMWUtOWY3My00ZGQ1LWFhMDYtMTY1OWM2MWQwZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4oHf5gT4ud7OAIQYADfMDVvff2PZVOj6ack HLZcEEmI4l4f2NNQuO6q0qcfqKICfiY1ZO12rY/Sf0BQLohjb94u7C+lSbHgHmnI y1VUCTraIdgQiTaNtGPpgAM+fDFB11uNnTt+PyCxVB9kH54rQM8NCgWsB17YnKxo +dNArr/YTBuJax5zE7IYHdBFhy1gYaeCq+ZQfQFy8bfEakBGUDRj21OwZqFHTs8w fdZNCL2Uvl8M4+/l4Vh8e1vMTKeQiK1/tyLiIaqcEzGVFAoerIIK+FgQIXOqwPGs eo3eaife/jck2vDEEIMS2AfgKFfkJaY0HOPV+9nUffRoXuWqeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiZ/GSJxIrIa3C7OANxE0z2UyltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2E5YmZmY2UtYWEyOS0z NmM2LWEyZDYtNzU4YmEwYzc5MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1rUZs4bWG4gfk9DbrCKJj1i2dnw+bIqZ1aq3dMYOo5XpTUksSQ+2YS sbbJszWeF+Ofb4ZvFeli8uz3hI5YCx1OIkPaK7Dlh7tRmKM5bfE/BPPZt870KtAG RVhiOR2RKUWjmLhdBXzZwJNTKiw5UgSfkSlNrBG2EYmfzqpnAz+HQ1V5ixKYl854 QqglhGYAHEnxu0ayrDpZC2NzNh/Deo3my5gwEwIcXpR8t8HUxgcVPJsJD973BLIb Upd6Z1IbUCJNyjs4PblLJ9I4UME2K+kiKzmV/sFKThU3jc9Dsha71IiKFSzDapon qFNkhlkKBiqnSd9b/YjbEwXgin0D/5g= -----END CERTIFICATE-----Generated at Sat May 10 13:49:08 2025 by rpki-client