$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ec5cc4db-1805-3437-9cad-bb0a4f27a048.roa File: ec5cc4db-1805-3437-9cad-bb0a4f27a048.roa (raw, json) Hash identifier: 5dhfBDM7+kGrBlMNv1sTjQqtE1gGmWWbYCjaN0Db7AY= Subject key identifier: D5:96:C9:E0:E2:B2:15:49:12:13:03:55:84:0F:8B:20:55:19:1A:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA58BF79B1212FE3984120 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ec5cc4db-1805-3437-9cad-bb0a4f27a048.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:58:bf:79:b1:21:2f:e3:98:41:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=43c9fbed-05fe-47fc-bc38-64c379c5db94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5d:fd:37:fe:32:37:58:93:b9:5b:c2:d2:c1: 1e:83:0d:0a:35:35:fe:dc:99:fb:91:7e:17:17:95: d0:dd:4e:9b:90:fa:60:f6:96:42:dd:e2:70:41:6c: 5b:ed:d8:70:0e:a8:1f:20:37:82:9a:33:47:7b:95: 6d:c9:cf:0d:0e:d8:27:f9:88:be:6d:de:74:23:91: b3:24:db:9d:94:90:c1:e8:dd:82:17:95:a5:46:55: 18:f0:31:02:69:fb:13:c7:af:13:e2:99:93:e6:4f: 62:35:f1:62:1a:a2:08:74:09:29:03:bf:07:da:c3: 58:dc:5f:1b:a6:7f:59:da:17:3a:d1:0c:23:38:55: de:62:09:15:b1:51:58:47:93:85:27:72:d0:b9:93: 5f:15:34:f4:3a:7a:5f:6e:fb:58:89:34:68:bf:05: 03:eb:18:01:83:a7:9c:2c:e3:ca:72:f3:07:b5:8b: 8b:e6:98:dc:cf:98:f7:e8:b6:7a:19:07:0b:af:0b: 0f:8c:24:c1:24:8c:e6:5c:5e:e0:9b:02:0d:30:87: d5:bc:89:e0:42:52:30:0b:ad:42:b6:ec:b0:ac:87: 47:e8:5f:d9:73:0d:e6:2d:ff:b1:b6:8d:0d:a9:26: d8:47:86:fc:f9:c9:42:35:2d:b9:62:37:37:bd:ef: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:96:C9:E0:E2:B2:15:49:12:13:03:55:84:0F:8B:20:55:19:1A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ec5cc4db-1805-3437-9cad-bb0a4f27a048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:04:49:b7:05:40:dc:66:b0:df:e7:62:ff:27:cf:55:55:a5: 52:26:02:33:28:4a:e4:7b:da:9a:b6:33:fe:85:f5:9e:ba:21: b8:bd:49:10:81:d1:4d:1d:28:06:71:6f:9d:35:50:64:d1:5b: 44:c2:ed:71:4f:13:15:7c:f5:3e:c8:a8:99:df:1d:94:f1:76: 9c:4d:9a:72:c5:ef:0d:ed:39:cb:c4:f9:ac:84:dd:a1:17:96: 0a:24:6e:9c:5d:84:59:f0:15:be:91:29:c4:ca:08:a0:18:96: 6d:8b:40:d7:82:00:4e:25:26:30:00:5a:0e:1f:9d:e5:7c:89: 0d:be:94:f3:71:0d:4d:37:f9:50:44:2c:69:46:00:40:0f:0a: 1e:c2:fa:02:b3:e9:34:5b:d2:e4:d8:ff:a4:e4:b0:d4:d5:a1: d0:20:6a:73:fc:03:6e:b8:57:45:22:3c:b2:12:bc:29:06:8b: d6:f3:59:37:62:a4:12:e5:a5:b4:12:7f:e0:3d:0a:43:4e:dc: b2:44:fe:51:56:0d:5c:de:44:79:fc:6e:84:d1:68:03:ce:37: 00:62:63:c4:46:52:38:3c:d3:95:bc:1d:48:d1:5e:e9:15:17: 17:fb:b9:15:f3:92:61:cf:9a:51:39:6b:0b:01:56:1e:a7:39: 73:7a:fe:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuli/ebEhL+OYQSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDNjOWZiZWQtMDVmZS00N2ZjLWJjMzgtNjRjMzc5YzVkYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV39N/4yN1iTuVvC0sEegw0KNTX+3Jn7kX4X F5XQ3U6bkPpg9pZC3eJwQWxb7dhwDqgfIDeCmjNHe5Vtyc8NDtgn+Yi+bd50I5Gz JNudlJDB6N2CF5WlRlUY8DECafsTx68T4pmT5k9iNfFiGqIIdAkpA78H2sNY3F8b pn9Z2hc60QwjOFXeYgkVsVFYR5OFJ3LQuZNfFTT0OnpfbvtYiTRovwUD6xgBg6ec LOPKcvMHtYuL5pjcz5j36LZ6GQcLrwsPjCTBJIzmXF7gmwINMIfVvIngQlIwC61C tuywrIdH6F/Zcw3mLf+xto0NqSbYR4b8+clCNS25Yjc3ve/vPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWWyeDishVJEhMDVYQPiyBVGRqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWM1Y2M0ZGItMTgwNS0z NDM3LTljYWQtYmIwYTRmMjdhMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4ESbcFQNxmsN/nYv8nz1VVpVImAjMoSuR72pq2M/6F9Z66Ibi9SRCB 0U0dKAZxb501UGTRW0TC7XFPExV89T7IqJnfHZTxdpxNmnLF7w3tOcvE+ayE3aEX lgokbpxdhFnwFb6RKcTKCKAYlm2LQNeCAE4lJjAAWg4fneV8iQ2+lPNxDU03+VBE LGlGAEAPCh7C+gKz6TRb0uTY/6TksNTVodAganP8A264V0UiPLISvCkGi9bzWTdi pBLlpbQSf+A9CkNO3LJE/lFWDVzeRHn8boTRaAPONwBiY8RGUjg805W8HUjRXukV Fxf7uRXzkmHPmlE5awsBVh6nOXN6/lU= -----END CERTIFICATE-----Generated at Tue May 6 02:50:01 2025 by rpki-client