$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2c29b15-cd11-35c8-acf6-cd212e61e8c7.roa File: f2c29b15-cd11-35c8-acf6-cd212e61e8c7.roa (raw, json) Hash identifier: Y/brQ2amgR8UlDVrXZJ099UajbSUhoK+p+KQut0kQdc= Subject key identifier: 51:4E:45:71:74:C4:9F:24:B1:59:EA:AD:A4:D3:FF:87:8B:0B:4C:20 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADAD322C3152B45DD30C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2c29b15-cd11-35c8-acf6-cd212e61e8c7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 70.41.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:da:d3:22:c3:15:2b:45:dd:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=81fb46a8-1c66-4f8e-8886-bb1c99c46f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:1f:20:7b:51:c9:37:c4:6a:3b:4d:df:49: 52:87:15:c2:19:b8:9c:ed:f6:9a:de:df:36:e5:75: 73:bd:35:02:1d:97:b5:03:4f:23:ce:45:b0:ea:c8: 80:c3:42:60:06:78:e3:a3:f8:5c:e3:06:b7:f2:96: 23:c4:6e:ea:18:d0:f8:84:84:81:1e:77:bf:e9:a2: 94:63:07:2e:be:06:80:29:8c:c1:ae:83:8c:35:9e: 62:da:e9:4d:e6:0c:27:14:27:c3:0e:d2:c0:2b:33: 1a:2d:68:dc:c2:15:ac:2f:09:4f:d4:0c:cc:50:38: 32:51:34:bc:ee:b3:b3:db:99:df:1c:8f:cb:b1:bb: 23:39:b9:1c:f5:74:e7:48:5c:00:e1:bc:96:79:fd: fa:56:45:54:eb:2a:65:98:cd:60:65:af:28:69:81: 4d:c1:c3:6f:52:29:b8:7d:02:8c:24:27:95:72:e0: c1:09:83:49:5d:42:f8:61:95:71:3c:75:24:74:6c: 8b:5c:2c:10:51:d3:e8:ec:e9:fb:86:65:d2:e3:6b: 15:bd:d8:d6:06:79:c4:54:c3:9a:87:d8:3c:b1:10: 60:df:1d:58:fa:13:85:11:d8:3e:89:df:36:47:73: 8f:56:65:39:dc:25:e8:55:9e:39:af:74:2e:84:cd: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:45:71:74:C4:9F:24:B1:59:EA:AD:A4:D3:FF:87:8B:0B:4C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2c29b15-cd11-35c8-acf6-cd212e61e8c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bd:44:72:f6:1c:be:78:9a:a5:58:d8:74:ab:e4:e0:c9:0c: 5f:38:84:9e:a8:3e:b6:f6:de:8a:04:9d:6a:5e:9b:89:da:d5: d3:c2:e5:7b:a9:26:3d:2a:fb:ca:f8:5b:b4:20:68:85:1e:7e: 89:5e:ef:bd:98:e6:1b:3d:89:06:5f:08:02:34:6f:ff:28:55: c2:10:c7:84:e2:5b:9f:43:01:09:89:5c:e1:94:09:88:cb:6f: 3e:f0:ac:32:d4:48:94:49:84:5d:40:e2:32:af:34:58:4a:cf: d0:25:b6:05:7c:32:05:6c:c6:22:9a:c2:44:b8:52:6c:36:d1: aa:73:c5:6e:92:28:d2:5e:a2:bf:38:8d:c3:08:57:8a:f8:d4: 44:07:fa:69:8f:33:1c:ed:5e:c8:ee:9c:a5:30:d9:18:27:ac: f6:91:92:49:50:7d:d5:5c:1f:8b:64:14:5e:22:d1:8b:c3:82: bf:38:34:fb:71:bd:09:ef:67:b2:43:17:e3:ee:39:2a:6b:11: b9:c8:42:6e:60:d7:9e:f7:1d:b3:2c:8f:fe:7f:a3:c4:2f:b1: a0:2d:78:a3:7f:4a:26:65:40:00:b8:a8:4b:0b:0f:22:ac:9c: 6f:dc:43:fa:67:32:5e:53:d0:9e:97:e4:de:a2:e6:98:09:7e: 39:b7:d1:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutrTIsMVK0XdMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODFmYjQ2YTgtMWM2Ni00ZjhlLTg4ODYtYmIxYzk5YzQ2ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyakfIHtRyTfEajtN30lShxXCGbic7faa3t82 5XVzvTUCHZe1A08jzkWw6siAw0JgBnjjo/hc4wa38pYjxG7qGND4hISBHne/6aKU YwcuvgaAKYzBroOMNZ5i2ulN5gwnFCfDDtLAKzMaLWjcwhWsLwlP1AzMUDgyUTS8 7rOz25nfHI/LsbsjObkc9XTnSFwA4byWef36VkVU6yplmM1gZa8oaYFNwcNvUim4 fQKMJCeVcuDBCYNJXUL4YZVxPHUkdGyLXCwQUdPo7On7hmXS42sVvdjWBnnEVMOa h9g8sRBg3x1Y+hOFEdg+id82R3OPVmU53CXoVZ45r3QuhM0/lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFORXF0xJ8ksVnqraTT/4eLC0wgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjJjMjliMTUtY2QxMS0z NWM4LWFjZjYtY2QyMTJlNjFlOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC9RHL2HL54mqVY2HSr5ODJDF84hJ6oPrb23ooEnWpem4na1dPC5Xup Jj0q+8r4W7QgaIUefole772Y5hs9iQZfCAI0b/8oVcIQx4TiW59DAQmJXOGUCYjL bz7wrDLUSJRJhF1A4jKvNFhKz9AltgV8MgVsxiKawkS4Umw20apzxW6SKNJeor84 jcMIV4r41EQH+mmPMxztXsjunKUw2RgnrPaRkklQfdVcH4tkFF4i0YvDgr84NPtx vQnvZ7JDF+PuOSprEbnIQm5g1573HbMsj/5/o8QvsaAteKN/SiZlQAC4qEsLDyKs nG/cQ/pnMl5T0J6X5N6i5pgJfjm30WY= -----END CERTIFICATE-----Generated at Tue May 6 13:14:10 2025 by rpki-client