$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa File: 96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa (raw, json) Hash identifier: tXbStfMtsTaeqG34vjrbahmLTJmk6xA+5bkrMPvQIy8= Subject key identifier: 9A:4D:2B:00:BD:38:09:29:CB:89:DB:82:8C:06:CE:3D:84:BC:75:EC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849AD1A0F2B4775E340011DBA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 70.41.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:0f:2b:47:75:e3:40:01:1d:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=3c339eee-9e04-403d-a203-f1efa56d06e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5d:62:3b:77:c6:b1:92:db:40:bb:d8:33:20: 96:cb:5a:69:63:2f:19:7c:9f:e4:6f:3f:4d:e7:0a: 6b:08:b0:3e:a4:01:26:03:b8:36:6c:e2:06:8d:ee: 01:d1:68:17:c5:a1:80:d7:4b:d6:96:a2:15:1c:8e: af:4e:37:ca:85:de:ee:f7:ad:02:eb:c2:25:67:a7: 25:32:4d:51:e8:2f:b0:f7:1f:21:29:41:b4:ef:67: 6c:da:7c:10:f0:67:9b:e1:75:1e:da:d1:dc:11:9b: fe:d1:5a:28:ee:96:85:9a:fd:d8:a4:15:d0:0d:38: 9e:9d:f1:9d:11:d6:58:f2:3b:a7:80:78:1c:ae:1d: 48:2f:a4:1a:9d:c9:e8:28:32:e7:d1:c0:90:5c:32: 27:86:ea:7b:c7:65:56:fe:2c:fa:ad:4b:12:89:4e: 2c:5c:50:bc:24:ac:62:e5:f0:86:f3:6f:09:ea:96: 08:32:da:53:40:ce:53:c8:53:cf:f3:35:f6:53:06: 04:9b:28:95:b9:88:28:28:31:a7:07:14:d3:2c:76: 41:92:0c:a2:13:9a:e8:c8:6f:7e:e3:ca:d6:c4:12: 82:f3:20:e5:53:15:36:ad:cb:50:52:f4:9a:c3:e7: 72:0a:d1:e3:4a:08:43:79:31:27:b8:e1:e1:c5:84: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4D:2B:00:BD:38:09:29:CB:89:DB:82:8C:06:CE:3D:84:BC:75:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96e7d91f-3a1f-3f4d-95fd-9634d7e87d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d4:cf:df:6b:a5:ef:8c:94:dd:8e:84:0b:ba:9d:64:0d:cb: fa:c0:ed:a9:96:07:6b:22:46:59:7d:37:e1:65:cc:b2:bf:ca: 27:1b:5e:28:87:7c:0d:ec:c8:58:cb:0b:0b:a5:cc:67:0b:ba: 3d:7e:39:e2:b5:55:24:b9:02:d1:30:ba:f9:a0:fc:ac:b6:b3: e5:22:bb:3c:e8:17:7c:3e:37:25:b4:10:be:5b:70:b8:b9:81: 99:13:e7:0f:9a:8e:1f:07:24:e1:b4:5a:df:a8:0f:dc:10:66: e5:35:46:77:b0:7b:1f:e8:ea:56:e8:df:55:62:12:01:71:6c: e8:10:7e:2e:d8:e4:3d:bf:32:ac:60:6c:0e:32:a4:f8:0f:7e: 12:04:fd:b9:ea:0d:0f:8c:d1:27:4b:d2:d8:8e:08:b2:1f:a9: 25:28:ed:89:c5:3f:6a:45:3f:ef:f5:98:d4:c5:ab:22:95:fb: c3:77:77:fc:e4:ea:01:d1:ca:e7:68:3c:c8:cd:98:c2:22:81: 15:b1:71:a9:1c:fb:d7:e0:8b:29:74:e6:92:be:39:4b:23:22: 05:7d:91:1a:8e:af:59:c7:ac:90:1b:25:d9:41:aa:86:c3:21: 9a:c2:05:f6:2c:50:8e:32:c3:79:a0:3e:45:eb:af:3d:b8:cf: 23:fb:54:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGg8rR3XjQAEduoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk M2MzMzllZWUtOWUwNC00MDNkLWEyMDMtZjFlZmE1NmQwNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV1iO3fGsZLbQLvYMyCWy1ppYy8ZfJ/kbz9N 5wprCLA+pAEmA7g2bOIGje4B0WgXxaGA10vWlqIVHI6vTjfKhd7u960C68IlZ6cl Mk1R6C+w9x8hKUG072ds2nwQ8Geb4XUe2tHcEZv+0Voo7paFmv3YpBXQDTienfGd EdZY8jungHgcrh1IL6QancnoKDLn0cCQXDInhup7x2VW/iz6rUsSiU4sXFC8JKxi 5fCG828J6pYIMtpTQM5TyFPP8zX2UwYEmyiVuYgoKDGnBxTTLHZBkgyiE5royG9+ 48rWxBKC8yDlUxU2rctQUvSaw+dyCtHjSghDeTEnuOHhxYTQxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpNKwC9OAkpy4nbgowGzj2EvHXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTZlN2Q5MWYtM2ExZi0z ZjRkLTk1ZmQtOTYzNGQ3ZTg3ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATUz99rpe+MlN2OhAu6nWQNy/rA7amWB2siRll9N+FlzLK/yicbXiiH fA3syFjLCwulzGcLuj1+OeK1VSS5AtEwuvmg/Ky2s+UiuzzoF3w+NyW0EL5bcLi5 gZkT5w+ajh8HJOG0Wt+oD9wQZuU1Rnewex/o6lbo31ViEgFxbOgQfi7Y5D2/Mqxg bA4ypPgPfhIE/bnqDQ+M0SdL0tiOCLIfqSUo7YnFP2pFP+/1mNTFqyKV+8N3d/zk 6gHRyudoPMjNmMIigRWxcakc+9fgiyl05pK+OUsjIgV9kRqOr1nHrJAbJdlBqobD IZrCBfYsUI4yw3mgPkXrrz24zyP7VDc= -----END CERTIFICATE-----Generated at Tue May 6 03:07:10 2025 by rpki-client