$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa File: 3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa (raw, json) Hash identifier: zeP3DbPo2/90fuVS7Lz52l+j/o4rQZOsvrLY9ZxInTw= Subject key identifier: D0:E2:D5:2A:55:C2:E3:92:63:57:E4:10:1D:A8:5E:89:E6:0A:7C:16 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841104B0F8ACBEF325718580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:04:b0:f8:ac:be:f3:25:71:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8887185c-076a-459b-a791-49edb1115a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5c:49:a3:2b:85:5b:b7:04:8e:f9:ae:bb:9e: d0:f5:4c:be:1f:91:b5:79:ba:13:90:49:e4:74:4d: e9:a0:f6:d8:53:24:62:35:de:74:c1:ef:78:37:2f: f1:ea:94:0a:73:2c:40:5a:00:6c:1a:a5:9a:b7:06: 84:31:1f:86:ce:fd:11:1a:06:d3:35:24:49:79:4c: b1:90:e0:f5:0b:48:0c:af:fb:65:91:93:3f:ea:2c: ad:f5:50:fe:ad:7e:90:7e:56:b5:c2:ae:01:d4:20: 1a:b4:1e:6a:22:3c:01:4a:f5:26:61:23:31:da:f6: c6:79:98:c4:46:46:82:e7:95:12:fa:90:9b:fb:52: fe:2e:fe:c9:5e:e9:47:fb:0e:74:d1:b5:4f:84:0a: 9a:57:62:50:88:50:0f:52:21:d1:af:10:b5:d2:60: ee:1e:62:e5:21:aa:4f:78:55:41:63:68:5b:23:2c: 89:15:2a:4e:ee:f9:69:1d:5c:65:f0:90:d6:01:e8: b0:01:f6:4c:59:61:24:38:5b:66:87:8e:ba:1b:19: 0a:56:87:f1:d2:87:64:85:ea:8a:6e:9f:c2:f6:3b: b0:9b:59:e8:d2:37:d5:d2:07:e0:d2:59:46:ab:9b: af:31:c8:aa:f4:26:fa:d6:b9:c4:6e:35:70:ca:58: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E2:D5:2A:55:C2:E3:92:63:57:E4:10:1D:A8:5E:89:E6:0A:7C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:af:ec:05:d8:e3:f4:5a:4c:86:55:ef:4c:a4:c3:be:77:d1: 9e:98:6c:35:f5:47:31:4a:de:86:de:98:b2:cf:a8:0a:f0:19: f1:68:b6:12:6b:11:d7:ea:d6:9b:c3:bb:1b:bb:18:2f:ac:a6: ed:ca:66:c8:fc:a6:4e:be:a7:ed:ff:ba:68:29:14:82:9f:45: 69:65:e3:8e:a0:6e:45:88:52:e1:34:cd:96:57:2d:7d:cb:05: ef:45:62:90:a5:a6:6c:bd:00:6b:9e:3e:98:ef:ee:af:b0:ee: 42:12:90:cd:f5:b5:1d:9e:1b:01:80:b5:d4:de:db:ca:58:e5: d8:17:20:71:2e:e1:40:f1:ae:bc:2b:c9:af:5f:87:ac:0e:9e: c8:e9:76:20:aa:e8:5b:2a:7f:75:d0:cc:39:5d:e0:0d:9b:d9: f7:91:fa:95:e2:e3:f4:92:00:72:e7:77:a4:95:a4:14:87:b7: 9d:c9:d4:e4:ea:97:b9:22:d4:83:fb:59:23:e1:b6:73:5a:f8: 6c:b7:95:c9:be:dd:65:3c:04:f0:c3:4c:dc:16:47:fb:28:84: 16:61:25:b8:2b:eb:25:fd:a8:d8:4a:12:1c:66:33:9f:a2:b8: 87:2b:a2:cf:02:71:81:6f:ac:d9:34:79:06:bb:6a:69:ef:36: 36:18:c3:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQSw+Ky+8yVxhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODg4NzE4NWMtMDc2YS00NTliLWE3OTEtNDllZGIxMTE1YTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVxJoyuFW7cEjvmuu57Q9Uy+H5G1eboTkEnk dE3poPbYUyRiNd50we94Ny/x6pQKcyxAWgBsGqWatwaEMR+Gzv0RGgbTNSRJeUyx kOD1C0gMr/tlkZM/6iyt9VD+rX6Qfla1wq4B1CAatB5qIjwBSvUmYSMx2vbGeZjE RkaC55US+pCb+1L+Lv7JXulH+w500bVPhAqaV2JQiFAPUiHRrxC10mDuHmLlIapP eFVBY2hbIyyJFSpO7vlpHVxl8JDWAeiwAfZMWWEkOFtmh466GxkKVofx0odkheqK bp/C9juwm1no0jfV0gfg0llGq5uvMciq9Cb61rnEbjVwylimTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDi1SpVwuOSY1fkEB2oXonmCnwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FjYjVjZjAtN2IwZC0z OGFmLTllMjMtODYwZWUxYTliMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABav7AXY4/RaTIZV70ykw7530Z6YbDX1RzFK3obemLLPqArwGfFothJr Edfq1pvDuxu7GC+spu3KZsj8pk6+p+3/umgpFIKfRWll446gbkWIUuE0zZZXLX3L Be9FYpClpmy9AGuePpjv7q+w7kISkM31tR2eGwGAtdTe28pY5dgXIHEu4UDxrrwr ya9fh6wOnsjpdiCq6Fsqf3XQzDld4A2b2feR+pXi4/SSAHLnd6SVpBSHt53J1OTq l7ki1IP7WSPhtnNa+Gy3lcm+3WU8BPDDTNwWR/sohBZhJbgr6yX9qNhKEhxmM5+i uIcros8CcYFvrNk0eQa7amnvNjYYw9U= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:45 2025 by rpki-client