$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61c68045-0b56-36a3-8ea2-283636f4d986.roa File: 61c68045-0b56-36a3-8ea2-283636f4d986.roa (raw, json) Hash identifier: wxcPNv4AYAAZfyGIl18Pj6XTGJFbnIJG9tQJvrx4+1Y= Subject key identifier: F0:B7:66:36:41:67:40:BE:F8:39:21:40:4C:B5:A8:31:85:3F:B7:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411A865BBD48888CD69C680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61c68045-0b56-36a3-8ea2-283636f4d986.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:a8:65:bb:d4:88:88:cd:69:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b7f99114-104b-4b3b-98b9-97c687f8dcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:20:d2:65:22:93:56:1c:4d:12:0a:86:ed: 0e:41:ba:e3:7d:b1:45:01:46:34:3e:94:d5:1d:8f: 1a:31:ee:b4:1c:94:24:a5:53:14:de:b6:69:73:c3: b5:07:f1:b0:6a:39:48:2f:13:93:92:29:de:04:ba: a5:07:0d:31:20:67:2d:62:21:28:2e:bd:16:a1:03: e1:59:c5:05:ba:21:f3:f4:1f:7e:92:32:59:3a:1e: 8e:08:9d:18:a3:51:a9:cf:c8:2d:ae:21:54:86:98: 2e:1d:ac:53:6d:5a:b2:9c:18:c7:d5:ed:a1:b8:19: 55:bc:a7:62:61:f1:9d:33:b8:17:ca:d3:95:29:74: 2f:ce:8d:3f:c8:5a:ab:94:f8:55:02:f6:35:0f:48: 2f:bf:45:4e:61:53:6d:58:00:23:b1:fa:52:3f:d7: 28:b9:9a:a1:8f:da:19:ff:52:8d:8b:3d:94:16:7e: 6d:76:c8:05:a5:e0:d4:93:6e:fa:31:04:ef:9a:85: 8b:a3:8c:52:52:bd:7e:ce:7a:38:aa:a4:47:b1:ba: a3:37:fe:90:8b:61:10:0e:98:f6:0e:fc:2d:da:32: 2d:90:69:96:a2:fc:95:d8:03:18:c4:a9:aa:52:00: b8:9d:07:41:6e:82:4c:ee:6d:49:34:99:96:8e:79: 49:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B7:66:36:41:67:40:BE:F8:39:21:40:4C:B5:A8:31:85:3F:B7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/61c68045-0b56-36a3-8ea2-283636f4d986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:41:b2:4f:01:42:82:91:45:e2:07:d9:cc:5e:27:5e:45:58: 86:a3:90:9f:fc:ed:1f:45:94:6b:72:f5:58:e2:80:07:7d:cd: 53:ec:52:65:18:12:43:3f:de:73:03:ad:1a:26:e7:92:49:37: 4b:dd:09:28:36:47:3a:3d:46:ae:fb:90:89:61:39:dc:3c:6a: 9a:40:e6:f8:81:c1:5f:b3:29:3a:7d:78:7f:14:af:6b:ca:6a: ca:45:7c:7b:08:84:23:33:c6:7e:3d:ad:75:40:8b:04:de:5d: 7a:51:f0:eb:f0:7c:b9:1e:d6:e9:af:81:f0:57:4b:17:f1:e6: 26:eb:be:f3:66:c7:1a:28:36:4f:a3:fd:0e:61:18:be:0c:40: 1c:ed:ae:40:b6:1d:04:4c:85:33:76:10:27:e6:de:c4:ab:d8: 73:9e:4d:98:7e:1b:f8:43:be:44:6c:d5:b0:c8:ad:45:6b:a4: 3f:aa:b8:29:53:46:8a:af:53:47:9d:50:d5:3a:9a:e7:28:d5: 65:38:15:e1:ec:bb:5b:f8:e8:c4:e0:6f:86:1e:71:4b:c4:93: 6c:2e:ec:95:bf:b5:b3:db:e9:0e:b9:e0:bb:4e:a9:f8:dd:11: 74:e4:61:02:3a:83:7c:43:4a:3d:11:18:c6:fc:ca:7e:99:5d: 84:af:79:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEahlu9SIiM1pxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjdmOTkxMTQtMTA0Yi00YjNiLTk4YjktOTdjNjg3ZjhkY2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDIg0mUik1YcTRIKhu0OQbrjfbFFAUY0PpTV HY8aMe60HJQkpVMU3rZpc8O1B/GwajlILxOTkineBLqlBw0xIGctYiEoLr0WoQPh WcUFuiHz9B9+kjJZOh6OCJ0Yo1Gpz8gtriFUhpguHaxTbVqynBjH1e2huBlVvKdi YfGdM7gXytOVKXQvzo0/yFqrlPhVAvY1D0gvv0VOYVNtWAAjsfpSP9couZqhj9oZ /1KNiz2UFn5tdsgFpeDUk276MQTvmoWLo4xSUr1+zno4qqRHsbqjN/6Qi2EQDpj2 Dvwt2jItkGmWovyV2AMYxKmqUgC4nQdBboJM7m1JNJmWjnlJCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC3ZjZBZ0C++DkhQEy1qDGFP7dsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjFjNjgwNDUtMGI1Ni0z NmEzLThlYTItMjgzNjM2ZjRkOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExBsk8BQoKRReIH2cxeJ15FWIajkJ/87R9FlGty9VjigAd9zVPsUmUY EkM/3nMDrRom55JJN0vdCSg2Rzo9Rq77kIlhOdw8appA5viBwV+zKTp9eH8Ur2vK aspFfHsIhCMzxn49rXVAiwTeXXpR8OvwfLke1umvgfBXSxfx5ibrvvNmxxooNk+j /Q5hGL4MQBztrkC2HQRMhTN2ECfm3sSr2HOeTZh+G/hDvkRs1bDIrUVrpD+quClT RoqvU0edUNU6muco1WU4FeHsu1v46MTgb4YecUvEk2wu7JW/tbPb6Q654LtOqfjd EXTkYQI6g3xDSj0RGMb8yn6ZXYSveek= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:33 2025 by rpki-client