$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c8e4532-a434-347a-8168-16975ac7e03d.roa File: 3c8e4532-a434-347a-8168-16975ac7e03d.roa (raw, json) Hash identifier: HbeoDgXNU9onm0SF1L77pGCHeOAZQAAyws+AdQpTRes= Subject key identifier: 0F:6F:C8:D3:8E:A7:EE:E4:13:C1:A9:A2:D6:2B:DE:F2:84:1D:13:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411ABA32AA41D7D62C0C080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c8e4532-a434-347a-8168-16975ac7e03d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ab:a3:2a:a4:1d:7d:62:c0:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b1d9becc-1201-4f39-b558-f8f884456799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:43:7c:29:d4:e2:c7:59:02:a2:c6:67:73: 53:a5:04:18:55:bb:63:db:c5:73:31:21:eb:d3:29: 66:f0:08:02:ef:5e:f9:f6:af:11:be:ce:27:c4:f1: 07:f9:ca:e2:4d:4f:8d:02:a5:42:bd:cc:96:71:87: 8e:75:15:92:b8:d8:d5:23:4e:8d:af:1e:59:7b:47: 22:b9:41:ea:cd:fd:c0:0b:d5:8d:b2:0e:f7:4e:49: 7a:a5:14:2d:45:76:f0:a5:b4:93:d8:07:e9:93:2f: 9f:4c:be:9f:12:f5:7f:c5:a2:79:f0:ed:16:a8:0f: 2f:ef:8f:97:6c:84:81:ac:db:aa:32:8b:55:08:f2: b4:c6:45:87:b7:93:37:3e:7e:87:49:42:da:f4:4e: 3f:1a:8a:7f:28:36:b4:71:9d:08:a5:7c:9b:07:8a: 24:3a:67:9a:96:fc:f0:12:85:f8:04:7b:db:95:a7: a0:67:52:77:09:ae:91:9c:06:29:65:52:df:0e:e1: 0c:10:42:b2:11:59:ac:94:d2:30:6b:21:b7:22:98: 76:aa:63:32:9e:72:41:ce:4a:33:fc:0c:d7:50:b3: cc:b9:c3:d2:30:0a:30:7c:17:5e:08:0f:dc:35:34: e4:eb:a8:7a:c5:36:67:2c:e4:42:b1:71:d0:7e:47: 34:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6F:C8:D3:8E:A7:EE:E4:13:C1:A9:A2:D6:2B:DE:F2:84:1D:13:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c8e4532-a434-347a-8168-16975ac7e03d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:aa:45:30:82:c2:97:d9:25:02:d7:c3:21:7e:dc:01:30:5a: 20:2a:7b:95:26:04:fc:90:3e:e7:dd:14:96:5f:af:a8:24:ca: fe:bb:90:43:42:f2:12:ee:15:1a:6f:c1:ca:f8:df:35:ce:26: 5a:4e:c9:b6:61:53:17:54:5e:d4:c0:3c:e5:9a:c1:30:98:2e: 3e:aa:37:07:e7:18:c8:e1:03:14:88:4d:82:25:d0:bc:b7:8d: 53:eb:b7:f6:95:dd:7a:2e:f7:46:5c:0d:ab:d3:59:7f:f5:1e: 74:b4:ff:71:3a:8e:4d:b4:7f:84:de:fd:52:00:9d:ca:57:ac: 38:bf:e8:f5:ff:7e:fa:26:3b:2b:7e:0d:f7:b2:cd:5f:47:c4: 15:e7:70:b9:8a:29:5c:49:38:45:cf:20:1e:e5:ab:51:92:c1: 42:33:fe:44:3b:3d:00:51:90:76:ab:1a:0e:85:38:d9:6b:91: 35:9e:a1:3f:65:f9:31:3e:0d:e1:e5:4b:98:ba:41:99:d3:18: f7:4e:7c:a5:c3:19:c1:c6:a2:95:8f:90:b6:69:b2:46:e1:d7: 47:fd:ce:ab:e4:92:ca:ee:f4:a4:8f:4d:fd:7e:6c:ee:70:c4: 00:fa:2d:b5:f6:0f:39:49:5b:30:ae:21:56:51:22:a3:78:26: 79:21:ca:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEaujKqQdfWLAwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjFkOWJlY2MtMTIwMS00ZjM5LWI1NTgtZjhmODg0NDU2Nzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVBDfCnU4sdZAqLGZ3NTpQQYVbtj28VzMSHr 0ylm8AgC71759q8Rvs4nxPEH+criTU+NAqVCvcyWcYeOdRWSuNjVI06Nrx5Ze0ci uUHqzf3AC9WNsg73Tkl6pRQtRXbwpbST2Afpky+fTL6fEvV/xaJ58O0WqA8v74+X bISBrNuqMotVCPK0xkWHt5M3Pn6HSULa9E4/Gop/KDa0cZ0IpXybB4okOmealvzw EoX4BHvblaegZ1J3Ca6RnAYpZVLfDuEMEEKyEVmslNIwayG3Iph2qmMynnJBzkoz /AzXULPMucPSMAowfBdeCA/cNTTk66h6xTZnLORCsXHQfkc0pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9vyNOOp+7kE8GpotYr3vKEHRMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M4ZTQ1MzItYTQzNC0z NDdhLTgxNjgtMTY5NzVhYzdlMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqqRTCCwpfZJQLXwyF+3AEwWiAqe5UmBPyQPufdFJZfr6gkyv67kENC 8hLuFRpvwcr43zXOJlpOybZhUxdUXtTAPOWawTCYLj6qNwfnGMjhAxSITYIl0Ly3 jVPrt/aV3Xou90ZcDavTWX/1HnS0/3E6jk20f4Te/VIAncpXrDi/6PX/fvomOyt+ DfeyzV9HxBXncLmKKVxJOEXPIB7lq1GSwUIz/kQ7PQBRkHarGg6FONlrkTWeoT9l +TE+DeHlS5i6QZnTGPdOfKXDGcHGopWPkLZpskbh10f9zqvkksru9KSPTf1+bO5w xAD6LbX2DzlJWzCuIVZRIqN4Jnkhyms= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:56 2025 by rpki-client