$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1be98563-1bfc-371f-ada1-f4d338ca23cf.roa File: 1be98563-1bfc-371f-ada1-f4d338ca23cf.roa (raw, json) Hash identifier: 6y1+0lKlIBG0mOMESi/UmhKmxaFJCnLxuxTyytnO0xo= Subject key identifier: 5D:03:EB:C1:C1:5F:7B:AF:4F:77:66:84:91:98:14:58:5D:53:FC:CF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841101915D8EF09AA3C14040 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1be98563-1bfc-371f-ada1-f4d338ca23cf.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:01:91:5d:8e:f0:9a:a3:c1:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0e210b0f-bc49-47f2-b25c-f830e6fed8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:42:30:ec:d9:ab:43:92:63:44:8a:8f:3b:05: d4:af:60:28:64:b5:01:43:f6:92:5c:2c:c7:63:34: c8:de:3a:6d:87:98:13:05:0a:88:07:9d:53:e4:41: 3e:b5:ba:4b:32:e3:e3:6a:a1:d8:df:4d:9c:d0:cc: 9d:aa:d1:f6:d7:d9:3a:66:74:89:1e:2a:c7:f9:05: 29:08:78:99:7d:7e:6b:d2:85:f0:ad:b4:b2:25:00: cf:36:6e:d8:88:0e:c1:8a:61:75:b3:82:32:5a:21: 15:99:e5:a3:45:1f:09:c8:cc:f5:92:cc:eb:a7:d8: d9:e6:ba:09:35:ab:9a:50:a6:6f:97:dd:7c:a7:e5: 07:c9:6c:b3:71:c3:3e:b7:82:1f:ae:b0:34:f8:9e: 86:2d:6e:b8:f9:27:bc:37:5d:ef:5b:21:28:89:80: 5a:d8:3e:2c:52:89:16:51:42:d2:5d:2f:9b:99:97: 59:36:a9:35:10:ec:20:03:4e:dd:d7:6b:16:e9:27: ac:7d:4a:5b:8c:b8:0e:72:41:4c:6b:17:2c:ac:38: c4:ef:12:89:4b:50:21:39:1a:6a:92:c9:3f:8a:ec: f2:07:4e:af:60:0d:dc:55:ec:45:c5:ca:41:96:5b: 90:aa:97:01:99:26:ca:c8:58:91:9c:e5:6f:ae:97: 8f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:03:EB:C1:C1:5F:7B:AF:4F:77:66:84:91:98:14:58:5D:53:FC:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1be98563-1bfc-371f-ada1-f4d338ca23cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:82:06:00:73:a2:3c:0f:33:c7:46:e5:53:50:85:56:9c:a7: f2:7b:f7:9f:f9:1e:e5:3f:95:1b:32:96:77:e6:54:60:94:7c: 80:24:0e:82:c4:9f:6a:49:9e:21:b3:d7:77:7f:ce:c0:bb:cc: a3:5d:00:a8:82:aa:7f:19:79:6b:4f:76:ec:0a:ef:ba:9f:82: f5:65:9b:06:62:2a:77:6a:ed:56:9d:cb:b2:fa:68:1a:4f:23: 2a:37:1e:b0:1d:b4:17:59:bf:f3:36:65:99:e2:89:63:f6:4d: 8f:ea:58:e4:36:1a:57:cf:d8:83:da:0f:7d:d2:a0:e4:bb:2b: 60:61:cc:2b:46:e0:2d:ef:10:e3:75:ac:37:70:52:d4:0d:af: f8:cf:4b:f0:f2:5e:c5:8d:f6:85:89:a0:43:21:97:00:e2:23: 33:1f:e3:7a:72:1c:48:16:77:d3:43:52:c9:d3:9f:27:68:3c: b2:66:64:1a:2f:53:93:3c:ff:cf:a9:66:4c:10:9e:c4:b4:78: b6:97:58:3a:c7:88:42:45:34:99:a5:83:eb:c5:fd:8b:22:d8: bc:5d:9f:72:68:53:b7:ec:89:25:74:33:4e:4b:60:7c:9b:3a: a9:21:29:e8:b7:74:11:98:96:f5:8b:ed:cc:81:5f:70:9d:ff: 2f:8a:9e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQGRXY7wmqPBQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGUyMTBiMGYtYmM0OS00N2YyLWIyNWMtZjgzMGU2ZmVkOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9kIw7NmrQ5JjRIqPOwXUr2AoZLUBQ/aSXCzH YzTI3jpth5gTBQqIB51T5EE+tbpLMuPjaqHY302c0MydqtH219k6ZnSJHirH+QUp CHiZfX5r0oXwrbSyJQDPNm7YiA7BimF1s4IyWiEVmeWjRR8JyMz1kszrp9jZ5roJ NauaUKZvl918p+UHyWyzccM+t4IfrrA0+J6GLW64+Se8N13vWyEoiYBa2D4sUokW UULSXS+bmZdZNqk1EOwgA07d12sW6SesfUpbjLgOckFMaxcsrDjE7xKJS1AhORpq ksk/iuzyB06vYA3cVexFxcpBlluQqpcBmSbKyFiRnOVvrpePMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0D68HBX3uvT3dmhJGYFFhdU/zPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWJlOTg1NjMtMWJmYy0z NzFmLWFkYTEtZjRkMzM4Y2EyM2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+CBgBzojwPM8dG5VNQhVacp/J795/5HuU/lRsylnfmVGCUfIAkDoLE n2pJniGz13d/zsC7zKNdAKiCqn8ZeWtPduwK77qfgvVlmwZiKndq7Vady7L6aBpP Iyo3HrAdtBdZv/M2ZZniiWP2TY/qWOQ2GlfP2IPaD33SoOS7K2BhzCtG4C3vEON1 rDdwUtQNr/jPS/DyXsWN9oWJoEMhlwDiIzMf43pyHEgWd9NDUsnTnydoPLJmZBov U5M8/8+pZkwQnsS0eLaXWDrHiEJFNJmlg+vF/Ysi2Lxdn3JoU7fsiSV0M05LYHyb OqkhKei3dBGYlvWL7cyBX3Cd/y+KnnE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:06 2025 by rpki-client