$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f82c008-3604-309e-8397-e57514230640.roa File: 6f82c008-3604-309e-8397-e57514230640.roa (raw, json) Hash identifier: YXnYuwpAaa/IfXMtXNncWu+y70HHNIfkVoKAdBS7TI0= Subject key identifier: 5A:30:4C:A9:15:EB:63:28:F2:5C:02:8E:44:60:88:A6:38:B7:DA:77 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411ABF3E4B55AA05725920E Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f82c008-3604-309e-8397-e57514230640.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ab:f3:e4:b5:5a:a0:57:25:92:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=256c3f4d-d340-4f99-8711-c0c0c365df7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:34:f0:e6:82:be:b4:89:bd:61:95:aa:77: c0:c4:42:79:67:d7:4d:fe:14:e3:4e:bf:a1:a1:f5: 1f:e1:aa:0f:3d:a5:d4:72:14:81:bb:99:52:f2:d3: 3f:b3:ca:5f:65:1c:12:1f:47:63:64:e0:4e:1b:cc: c1:64:dd:79:b7:80:87:db:4a:bd:9c:fd:57:db:f7: d0:7f:65:57:5c:f6:fc:21:e9:a5:3f:60:6a:f3:b5: ec:b5:9a:b6:d3:81:dd:7c:0a:97:c7:91:20:7e:a7: 74:27:f9:6f:43:b7:6b:c9:47:7c:2a:29:13:de:38: c2:53:0c:29:35:62:ed:d7:a5:5e:23:e0:e5:ab:86: 30:c4:1e:3a:ac:c7:47:69:8b:f3:40:70:31:1c:69: 0b:b4:2b:f4:8e:3e:26:ac:c7:3b:51:68:4c:4c:a5: fd:78:3e:a2:df:e8:71:42:d4:c4:4a:60:b7:b0:f0: 08:cf:70:50:b6:47:9d:eb:3d:14:37:eb:e0:23:5d: dd:61:59:e1:fd:24:ac:17:c5:80:60:7d:f1:c1:ce: 57:e3:7d:fc:30:6a:11:ca:e7:fd:70:ad:eb:97:a1: df:4a:62:cf:62:be:96:d0:9d:26:66:b5:93:1b:2a: 35:93:44:8a:dd:68:82:99:8e:7b:57:8b:51:15:1a: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:30:4C:A9:15:EB:63:28:F2:5C:02:8E:44:60:88:A6:38:B7:DA:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6f82c008-3604-309e-8397-e57514230640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4f:fa:78:b8:f2:91:43:6d:ef:cf:ac:d3:33:ee:e1:62:1c: e0:a0:47:09:1c:d9:af:99:2d:49:05:8e:6f:f6:d9:d3:e9:d1: c9:2b:d5:c4:cf:47:ab:fe:25:90:01:05:03:43:1b:77:fa:51: fa:c7:ab:39:a4:45:4a:81:4c:d5:41:84:dc:c7:92:01:d6:1f: ab:9d:e9:38:8f:f0:78:b2:65:a9:1b:0b:bb:5c:bd:71:f4:0c: fd:58:71:e9:83:74:aa:f9:81:fa:5b:26:db:f7:6c:09:a2:7d: 29:9a:ff:f6:ba:df:d1:9e:c4:43:c1:e5:67:25:34:31:93:d5: e5:b9:87:57:95:8a:d0:5b:94:45:ef:b6:65:b1:bc:35:f3:e3: 55:7e:16:d3:e5:98:f8:83:cc:c2:1d:d1:3e:ca:19:c1:95:b0: 83:a4:c6:86:da:99:31:ba:94:0b:1e:23:75:5f:fe:f0:1f:cc: 7f:dd:81:09:7e:46:4c:ff:1e:a3:2a:e2:cc:fb:e1:47:af:1f: 93:c2:f2:4d:c1:dd:fa:19:a2:0f:63:e4:de:c0:1a:a0:dd:79: 63:e3:df:ed:9d:42:55:20:84:23:56:84:05:56:c8:28:8f:e8: 8b:7b:27:29:66:14:44:7b:17:59:cc:14:05:59:80:aa:66:a7: 86:26:a9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEavz5LVaoFclkg4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjU2YzNmNGQtZDM0MC00Zjk5LTg3MTEtYzBjMGMzNjVkZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1808OaCvrSJvWGVqnfAxEJ5Z9dN/hTjTr+h ofUf4aoPPaXUchSBu5lS8tM/s8pfZRwSH0djZOBOG8zBZN15t4CH20q9nP1X2/fQ f2VXXPb8IemlP2Bq87XstZq204HdfAqXx5Egfqd0J/lvQ7dryUd8KikT3jjCUwwp NWLt16VeI+Dlq4YwxB46rMdHaYvzQHAxHGkLtCv0jj4mrMc7UWhMTKX9eD6i3+hx QtTESmC3sPAIz3BQtked6z0UN+vgI13dYVnh/SSsF8WAYH3xwc5X4338MGoRyuf9 cK3rl6HfSmLPYr6W0J0mZrWTGyo1k0SK3WiCmY57V4tRFRoUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFowTKkV62Mo8lwCjkRgiKY4t9p3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmY4MmMwMDgtMzYwNC0z MDllLTgzOTctZTU3NTE0MjMwNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARingMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFP+ni48pFDbe/PrNMz7uFiHOCgRwkc2a+ZLUkFjm/22dPp0ckr1cTP R6v+JZABBQNDG3f6UfrHqzmkRUqBTNVBhNzHkgHWH6ud6TiP8HiyZakbC7tcvXH0 DP1YcemDdKr5gfpbJtv3bAmifSma//a639GexEPB5WclNDGT1eW5h1eVitBblEXv tmWxvDXz41V+FtPlmPiDzMId0T7KGcGVsIOkxobamTG6lAseI3Vf/vAfzH/dgQl+ Rkz/HqMq4sz74UevH5PC8k3B3foZog9j5N7AGqDdeWPj3+2dQlUghCNWhAVWyCiP 6It7JylmFER7F1nMFAVZgKpmp4YmqdM= -----END CERTIFICATE-----Generated at Sat Jul 26 00:15:39 2025 by rpki-client