$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad46bc04-ac23-366a-a4cd-abe806940a1d.roa File: ad46bc04-ac23-366a-a4cd-abe806940a1d.roa (raw, json) Hash identifier: oHKVc04YC5YT8oCqb18vKePaiIuKnxROpJZFeJtEZCo= Subject key identifier: 99:E0:C9:75:8A:4E:02:D4:34:84:0B:3A:5A:C3:AC:11:B2:AB:D4:04 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE04FB82317C3A9B25E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad46bc04-ac23-366a-a4cd-abe806940a1d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e0:4f:b8:23:17:c3:a9:b2:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=67f5cd52-e453-4ca8-b48f-9b1848ff2dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:eb:90:97:de:96:ca:36:74:f1:4e:bb:00: 19:c3:57:b8:18:df:ac:ac:19:e1:7b:70:9d:b3:b4: 2d:67:03:5f:9f:03:97:bf:9c:47:dc:28:13:42:1b: 5b:8c:52:a8:5d:1c:bc:17:14:6d:2c:7b:5c:06:57: a8:6e:bc:22:b1:4d:6b:37:95:81:7c:75:a0:16:cf: 73:bc:fe:a6:92:c8:02:79:78:87:1e:28:f8:2d:ca: 0b:aa:3a:86:fa:a8:9c:24:97:f9:84:09:14:14:dc: 3f:2a:60:44:d1:87:43:09:36:51:6d:74:16:af:c9: b0:9a:02:f2:e0:fa:46:55:07:ae:15:ea:c6:fc:10: 48:e9:da:64:91:0e:c4:11:03:9a:4c:92:d1:dc:67: 7d:7c:9a:c6:85:c9:e2:de:44:e1:3d:65:2b:73:e2: 03:25:d4:4e:18:22:54:86:70:79:a7:b9:0c:f2:2a: 69:81:b4:05:80:17:b3:02:d6:1f:6e:b1:8d:00:7c: 9e:02:bf:fa:7c:26:b5:cd:86:21:d3:72:5a:fe:92: 6b:07:16:c7:60:c7:51:6c:f4:84:a1:83:51:ec:ca: 9f:fd:3c:a7:c7:a1:9c:96:82:a4:03:8e:1a:94:74: c1:92:42:8f:7e:c2:97:1c:d6:37:97:44:6b:2c:d2: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E0:C9:75:8A:4E:02:D4:34:84:0B:3A:5A:C3:AC:11:B2:AB:D4:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad46bc04-ac23-366a-a4cd-abe806940a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e4:97:4b:14:cd:c0:d3:2d:0a:1c:95:03:b7:4b:04:c2:df: 51:6a:00:e0:5f:e9:55:a6:5c:fa:ed:5f:ba:c5:55:d8:46:a5: da:b2:f3:2d:bc:b8:45:4e:b4:79:f1:12:f2:06:10:2b:4c:18: 81:66:d7:e2:c2:44:c4:81:de:28:de:73:69:04:8a:46:4d:48: bd:cd:77:62:b9:ee:07:3d:10:75:31:7d:43:db:95:48:6e:5b: 26:3d:3e:93:87:34:23:5d:97:9a:ce:f4:c6:7d:fe:fa:fb:c8: b3:8f:50:69:de:89:75:6e:de:ac:b0:a5:00:57:b1:7d:6e:e7: f0:29:e0:c8:c7:8b:0e:d0:aa:38:42:4e:b7:d2:8e:98:01:ca: 5b:76:05:31:1e:7c:f0:4a:f3:41:94:40:83:d1:31:4c:e8:76: 34:21:d8:85:54:00:65:4a:20:37:dc:35:de:72:3b:0b:28:1f: 0f:7e:bd:10:c8:f8:33:af:83:fc:ce:38:6e:26:b7:6e:b7:c3: 33:0e:8f:2b:42:17:63:c6:d3:b1:a2:1b:2d:95:a9:d3:f7:8c: 9c:5d:4e:23:f5:58:f9:d9:a7:ab:32:03:86:8e:20:e0:bf:47: 65:92:d2:92:68:7b:f3:ee:0b:58:0f:2b:29:34:a6:82:a9:99: a5:51:7f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuBPuCMXw6myXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjdmNWNkNTItZTQ1My00Y2E4LWI0OGYtOWIxODQ4ZmYyZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyjrkJfelso2dPFOuwAZw1e4GN+srBnhe3Cd s7QtZwNfnwOXv5xH3CgTQhtbjFKoXRy8FxRtLHtcBleobrwisU1rN5WBfHWgFs9z vP6mksgCeXiHHij4LcoLqjqG+qicJJf5hAkUFNw/KmBE0YdDCTZRbXQWr8mwmgLy 4PpGVQeuFerG/BBI6dpkkQ7EEQOaTJLR3Gd9fJrGhcni3kThPWUrc+IDJdROGCJU hnB5p7kM8ippgbQFgBezAtYfbrGNAHyeAr/6fCa1zYYh03Ja/pJrBxbHYMdRbPSE oYNR7Mqf/Tynx6GcloKkA44alHTBkkKPfsKXHNY3l0RrLNJKOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJngyXWKTgLUNIQLOlrDrBGyq9QEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWQ0NmJjMDQtYWMyMy0z NjZhLWE0Y2QtYWJlODA2OTQwYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbkl0sUzcDTLQoclQO3SwTC31FqAOBf6VWmXPrtX7rFVdhGpdqy8y28 uEVOtHnxEvIGECtMGIFm1+LCRMSB3ijec2kEikZNSL3Nd2K57gc9EHUxfUPblUhu WyY9PpOHNCNdl5rO9MZ9/vr7yLOPUGneiXVu3qywpQBXsX1u5/Ap4MjHiw7QqjhC TrfSjpgBylt2BTEefPBK80GUQIPRMUzodjQh2IVUAGVKIDfcNd5yOwsoHw9+vRDI +DOvg/zOOG4mt263wzMOjytCF2PG07GiGy2VqdP3jJxdTiP1WPnZp6syA4aOIOC/ R2WS0pJoe/PuC1gPKyk0poKpmaVRfzQ= -----END CERTIFICATE-----Generated at Fri May 9 04:32:01 2025 by rpki-client