$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0245c88d-88c7-339c-b71d-d3d508229cde.roa File: 0245c88d-88c7-339c-b71d-d3d508229cde.roa (raw, json) Hash identifier: KG0dMD5vB1f3pQP0wIac0p1zHpMjvmc9oCRXMctOe9I= Subject key identifier: D3:15:00:49:7B:F6:94:4A:E5:15:EC:4F:58:84:5D:A6:46:53:92:66 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84119E880EBD0CB0A8C34564 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0245c88d-88c7-339c-b71d-d3d508229cde.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:9e:88:0e:bd:0c:b0:a8:c3:45:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6efac41a-39d5-419d-b7d3-667a845c1cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cd:02:41:d5:5f:2b:66:f0:75:5a:93:da:89: b0:08:8e:e2:b0:94:29:58:56:db:ef:ce:6a:f8:5c: 07:b1:1d:54:f5:fd:f8:d5:87:35:22:0c:bd:70:eb: 73:66:5e:4d:d4:d3:19:7f:47:44:7e:cb:ec:12:42: c0:82:3d:83:77:0c:50:6d:0d:e4:57:12:57:cc:99: 31:8e:eb:63:8c:20:c6:5c:3c:19:75:1f:e8:f6:b6: cc:5a:70:e5:8d:36:41:8b:6e:f0:79:c4:96:9c:33: c6:99:8d:4a:8c:3a:ad:04:7c:7e:3b:71:d2:28:40: 80:1b:5f:1e:8a:1a:2d:4d:c1:fb:72:54:33:32:ae: 7e:58:8b:af:08:1f:f2:8c:83:35:50:ee:97:d5:a0: 2a:38:fd:79:44:26:99:35:72:45:b8:b6:94:e5:59: 3b:ec:0d:d8:15:e6:ca:fb:74:af:bb:5e:08:62:3c: c6:87:24:73:ba:e0:c8:2e:87:ba:d7:74:02:bf:25: 86:a7:ad:f8:40:cb:8a:01:b3:16:77:f0:05:99:dd: b1:88:3b:08:7e:ad:1c:4b:7d:28:2e:14:1c:9d:c2: 83:dd:97:19:23:fd:28:1a:41:bd:2d:81:b0:6a:24: 57:ab:3f:3b:12:a4:76:f6:96:1f:7d:c7:8f:de:1d: 3c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:15:00:49:7B:F6:94:4A:E5:15:EC:4F:58:84:5D:A6:46:53:92:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0245c88d-88c7-339c-b71d-d3d508229cde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:10:06:2e:5e:92:dc:32:7f:50:cc:02:f4:ea:e3:83:f2:11: b7:ae:72:08:cc:52:e1:39:89:87:02:f7:9e:21:6d:9e:b6:70: 1c:e3:18:a3:61:5f:77:2d:cb:50:e7:03:a3:40:c6:a4:0e:35: 92:69:48:cd:21:94:b6:18:7f:ba:38:8f:e6:d6:cb:b1:8d:13: 31:f5:bf:02:9e:52:1f:a5:0c:c1:2d:5a:ce:ec:35:ad:93:b7: 06:74:9b:15:ae:23:10:31:c6:9e:c6:c0:ce:6f:9d:d0:bb:9a: 76:1f:c8:10:c0:b8:96:77:70:72:ac:39:21:23:32:e4:54:d7: 2e:f1:50:09:1d:87:31:1d:dd:4c:4a:3b:d7:0b:22:30:08:01: 70:41:56:5e:2d:05:a4:67:50:d1:c8:20:2a:d6:65:6a:43:fb: 4d:ab:00:86:75:49:ba:5e:5c:3e:7c:f0:9a:07:3a:b9:2d:1e: b1:f9:00:58:a9:9d:17:5a:71:6b:49:80:a5:22:35:97:f2:83: 86:91:0e:2a:0b:5b:09:28:99:cf:9b:37:d3:23:4c:8b:bf:6e: 29:26:b9:b6:f8:b0:e8:3a:7a:0a:56:5c:bb:01:93:9f:43:d1: 4b:dc:ed:cd:8a:a1:b7:7f:e7:9a:22:bd:c2:ac:7a:bb:d6:d7: 03:b8:5d:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZ6IDr0MsKjDRWQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmVmYWM0MWEtMzlkNS00MTlkLWI3ZDMtNjY3YTg0NWMxY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs0CQdVfK2bwdVqT2omwCI7isJQpWFbb785q +FwHsR1U9f341Yc1Igy9cOtzZl5N1NMZf0dEfsvsEkLAgj2DdwxQbQ3kVxJXzJkx jutjjCDGXDwZdR/o9rbMWnDljTZBi27wecSWnDPGmY1KjDqtBHx+O3HSKECAG18e ihotTcH7clQzMq5+WIuvCB/yjIM1UO6X1aAqOP15RCaZNXJFuLaU5Vk77A3YFebK +3Svu14IYjzGhyRzuuDILoe613QCvyWGp634QMuKAbMWd/AFmd2xiDsIfq0cS30o LhQcncKD3ZcZI/0oGkG9LYGwaiRXqz87EqR29pYffceP3h08YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMVAEl79pRK5RXsT1iEXaZGU5JmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDI0NWM4OGQtODhjNy0z MzljLWI3MWQtZDNkNTA4MjI5Y2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoQBi5ektwyf1DMAvTq44PyEbeucgjMUuE5iYcC954hbZ62cBzjGKNh X3cty1DnA6NAxqQONZJpSM0hlLYYf7o4j+bWy7GNEzH1vwKeUh+lDMEtWs7sNa2T twZ0mxWuIxAxxp7GwM5vndC7mnYfyBDAuJZ3cHKsOSEjMuRU1y7xUAkdhzEd3UxK O9cLIjAIAXBBVl4tBaRnUNHIICrWZWpD+02rAIZ1SbpeXD588JoHOrktHrH5AFip nRdacWtJgKUiNZfyg4aRDioLWwkomc+bN9MjTIu/bikmubb4sOg6egpWXLsBk59D 0Uvc7c2Kobd/55oivcKservW1wO4XdI= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:15 2025 by rpki-client