$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cc49e4e-a81c-3a63-853b-5f42995f9e7a.roa File: 8cc49e4e-a81c-3a63-853b-5f42995f9e7a.roa (raw, json) Hash identifier: cLBu2Tu78nfnVLcdA7eeRggUN9/+j0yUt5mQE83t6gc= Subject key identifier: 0F:E8:84:D1:53:69:BA:CA:69:00:DB:AC:D2:07:D2:B5:99:42:00:16 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5792A08F1BED30AC97C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cc49e4e-a81c-3a63-853b-5f42995f9e7a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:57:92:a0:8f:1b:ed:30:ac:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1c96bc80-7428-4646-b120-b6db7f2a836f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:17:ed:5f:ae:31:30:b5:f9:ce:4b:1f:9c: 04:ec:ca:24:31:b8:ba:98:48:23:f2:3c:68:bb:c2: 97:69:19:7a:e7:64:eb:35:d1:78:66:97:98:9f:32: 8e:ed:12:58:7e:bd:d8:80:7f:e9:8c:a4:5f:1f:a8: c7:26:c1:14:61:9a:11:53:2e:3d:40:1e:a2:48:38: c8:a8:bc:06:a4:55:9d:7a:72:e6:19:e1:ae:dd:f9: 6f:83:a1:01:44:0a:b0:09:d8:b4:5f:ec:25:70:88: 7e:91:f9:9c:d7:6e:fc:db:9b:02:62:87:3a:2a:3f: 90:ec:5d:02:39:bb:15:b1:48:70:aa:ba:47:ca:0d: d0:4a:20:a7:ad:84:d0:ef:89:32:4c:11:eb:af:3f: 52:d8:a6:28:c1:78:25:60:2f:a7:1d:39:aa:46:28: e9:40:05:f3:06:0a:7f:be:40:9b:82:7a:ff:a9:84: 86:26:b6:d6:23:90:8c:47:7e:76:15:54:5c:43:51: 27:6e:57:8a:62:9f:5f:20:3f:74:d6:19:e0:e2:80: 9c:7a:f4:44:f8:d9:62:3d:58:57:a2:ee:71:f4:f4: ba:78:ed:f4:f9:4d:55:52:90:39:fb:0b:59:2f:b0: 00:cc:ab:ec:67:bc:b4:e8:5f:a8:8b:8e:79:f4:3e: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E8:84:D1:53:69:BA:CA:69:00:DB:AC:D2:07:D2:B5:99:42:00:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cc49e4e-a81c-3a63-853b-5f42995f9e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2c:46:41:50:02:77:3b:d0:9b:be:fe:ea:c1:e2:cd:4a:6b: 41:fc:d4:b0:9c:c4:2c:d6:9e:1c:48:59:95:e2:2b:59:ee:6a: 21:5b:a2:90:40:83:41:d0:c4:3b:93:94:41:14:ab:2b:dc:c4: b8:5f:11:1f:dd:af:ca:94:ae:5c:bd:c9:99:8d:b4:a5:78:b6: 05:bf:34:c1:d5:20:36:45:97:bd:1f:10:4a:ce:e8:7e:44:7a: b4:11:df:7e:09:64:4f:82:5e:91:cb:56:fd:d3:4c:ca:f3:b8: 93:e8:21:6c:15:42:fc:ec:3b:42:35:86:a4:f9:5d:f1:13:dc: e1:08:fc:9d:3b:89:6a:fa:41:ab:cf:7b:33:41:d7:18:f3:bc: f8:2c:68:e6:52:be:85:6a:b8:31:9b:68:af:30:25:72:f0:6a: 84:bb:87:f3:4d:6b:de:d0:5d:f3:70:ab:c4:d8:2f:7f:ac:c0: 54:99:9f:b1:6c:82:12:b1:b7:69:3a:7e:dc:fb:78:0d:c5:10: 01:32:6d:cd:0a:3e:de:6c:d5:e7:37:60:72:62:d7:c1:a2:df: e2:60:42:2e:9c:be:5d:fc:c0:f9:e6:36:cf:f4:c0:09:b6:93: e5:94:6b:1a:89:e6:45:2c:c9:2e:3f:68:d6:73:7d:59:3e:ee: bb:a4:9e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuleSoI8b7TCsl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWM5NmJjODAtNzQyOC00NjQ2LWIxMjAtYjZkYjdmMmE4MzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KIX7V+uMTC1+c5LH5wE7MokMbi6mEgj8jxo u8KXaRl652TrNdF4ZpeYnzKO7RJYfr3YgH/pjKRfH6jHJsEUYZoRUy49QB6iSDjI qLwGpFWdenLmGeGu3flvg6EBRAqwCdi0X+wlcIh+kfmc127825sCYoc6Kj+Q7F0C ObsVsUhwqrpHyg3QSiCnrYTQ74kyTBHrrz9S2KYowXglYC+nHTmqRijpQAXzBgp/ vkCbgnr/qYSGJrbWI5CMR352FVRcQ1EnbleKYp9fID901hng4oCcevRE+NliPVhX ou5x9PS6eO30+U1VUpA5+wtZL7AAzKvsZ7y06F+oi4559D4+hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/ohNFTabrKaQDbrNIH0rWZQgAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGNjNDllNGUtYTgxYy0z YTYzLTg1M2ItNWY0Mjk5NWY5ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACksRkFQAnc70Ju+/urB4s1Ka0H81LCcxCzWnhxIWZXiK1nuaiFbopBA g0HQxDuTlEEUqyvcxLhfER/dr8qUrly9yZmNtKV4tgW/NMHVIDZFl70fEErO6H5E erQR334JZE+CXpHLVv3TTMrzuJPoIWwVQvzsO0I1hqT5XfET3OEI/J07iWr6QavP ezNB1xjzvPgsaOZSvoVquDGbaK8wJXLwaoS7h/NNa97QXfNwq8TYL3+swFSZn7Fs ghKxt2k6ftz7eA3FEAEybc0KPt5s1ec3YHJi18Gi3+JgQi6cvl38wPnmNs/0wAm2 k+WUaxqJ5kUsyS4/aNZzfVk+7ruknvk= -----END CERTIFICATE-----Generated at Tue May 6 02:50:48 2025 by rpki-client