$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76c0c763-aba5-33d6-8ac9-0ea6883cc56c.roa File: 76c0c763-aba5-33d6-8ac9-0ea6883cc56c.roa (raw, json) Hash identifier: JL1pDO4h06XH1uEGHxJER56aUI2lO0ab5Hf6TKrXGH8= Subject key identifier: 66:49:A7:64:3B:8A:F0:CB:36:C7:0B:68:F0:92:52:BA:5C:61:87:F7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841100C61A636B57BB4B3600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76c0c763-aba5-33d6-8ac9-0ea6883cc56c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:00:c6:1a:63:6b:57:bb:4b:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f8632323-bc12-420d-8393-f1b914a9f298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:02:73:5f:bf:e8:a7:e7:f4:da:87:2b:0d: 1b:a1:cc:52:30:15:f4:e5:09:0c:ad:5b:f6:37:ae: c3:64:bd:52:ea:39:71:97:2f:5a:b9:27:68:44:13: 72:b6:c1:2a:49:18:58:cb:36:4b:63:de:86:03:eb: 93:0d:b1:2f:1a:d2:22:80:37:bb:01:f6:0a:45:68: a5:7c:fc:a4:b8:c5:a3:26:d2:5c:66:6c:5f:48:06: 95:18:89:16:e7:48:95:ad:24:8b:fe:a9:f9:a4:97: b5:1f:74:e0:d4:32:9d:52:7f:50:89:ff:8b:25:a9: 05:a3:5f:a0:2e:6b:b6:b2:a3:04:9e:f4:c9:80:13: fc:2e:b5:38:9f:4e:38:3d:75:b5:d1:db:fc:69:b8: d0:ac:4c:fd:ea:c7:b3:49:c2:e4:d9:4d:f6:ed:7b: 59:6a:24:02:cf:d1:af:2a:27:d7:2f:33:ac:10:2c: 29:e7:2a:12:39:53:46:50:0a:06:a5:d9:6b:38:48: a3:40:4e:9c:3f:a2:8e:68:20:8d:cd:bc:45:f8:c0: 87:bc:0b:90:40:85:92:64:e1:23:ef:d0:b3:bb:b3: 54:f1:b4:df:0c:29:53:b9:b2:56:88:b3:be:bf:b9: 1e:11:a8:60:f0:c3:11:dc:32:03:9c:46:73:ae:3a: e1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:49:A7:64:3B:8A:F0:CB:36:C7:0B:68:F0:92:52:BA:5C:61:87:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76c0c763-aba5-33d6-8ac9-0ea6883cc56c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:21:be:9a:10:6b:4b:39:cb:12:4f:0c:d6:03:a7:bc:eb:61: e7:1c:05:48:57:b5:98:eb:80:9c:4e:ea:cb:30:d3:c8:02:9a: 93:b1:af:e3:a1:9c:27:6b:8e:e4:a9:d6:e8:fa:21:69:3d:c1: bf:cd:a8:a2:cc:20:fd:a4:99:f3:b4:4e:b2:95:70:71:96:d3: 04:ed:b4:1c:83:52:5f:1e:34:60:0b:6a:ad:d2:1b:64:a5:d0: 36:b1:21:d8:b4:d4:06:79:c9:39:58:71:de:6b:8a:cf:c1:ec: 35:c9:27:ed:eb:86:28:13:32:db:08:54:04:8a:be:21:97:e0: 08:fa:d6:21:4d:d5:4c:c9:b7:26:1b:77:e7:d2:9b:dd:6c:e0: 58:7b:b6:bc:c0:fe:8b:81:52:ad:e8:52:2b:c9:ea:19:23:7d: 91:cd:48:da:9d:c6:54:21:b3:b3:11:85:3f:23:73:4b:14:4e: 59:df:2c:3e:33:3f:f6:07:b7:af:27:98:1e:ef:04:0f:78:b7: b2:b1:12:ad:3e:b4:3e:20:dc:5b:0c:30:39:1b:c3:39:f1:39: 58:db:8f:45:57:46:fa:8e:83:93:7e:0a:ca:98:6d:90:40:c5: 1e:8d:a1:c5:d2:7e:99:6f:b9:98:f2:08:d6:21:fd:8e:70:4a: 68:9f:28:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQDGGmNrV7tLNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Zjg2MzIzMjMtYmMxMi00MjBkLTgzOTMtZjFiOTE0YTlmMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX8Cc1+/6Kfn9NqHKw0bocxSMBX05QkMrVv2 N67DZL1S6jlxly9auSdoRBNytsEqSRhYyzZLY96GA+uTDbEvGtIigDe7AfYKRWil fPykuMWjJtJcZmxfSAaVGIkW50iVrSSL/qn5pJe1H3Tg1DKdUn9Qif+LJakFo1+g Lmu2sqMEnvTJgBP8LrU4n044PXW10dv8abjQrEz96sezScLk2U327XtZaiQCz9Gv KifXLzOsECwp5yoSOVNGUAoGpdlrOEijQE6cP6KOaCCNzbxF+MCHvAuQQIWSZOEj 79Czu7NU8bTfDClTubJWiLO+v7keEahg8MMR3DIDnEZzrjrhdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZJp2Q7ivDLNscLaPCSUrpcYYf3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzZjMGM3NjMtYWJhNS0z M2Q2LThhYzktMGVhNjg4M2NjNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAchvpoQa0s5yxJPDNYDp7zrYeccBUhXtZjrgJxO6ssw08gCmpOxr+Oh nCdrjuSp1uj6IWk9wb/NqKLMIP2kmfO0TrKVcHGW0wTttByDUl8eNGALaq3SG2Sl 0DaxIdi01AZ5yTlYcd5ris/B7DXJJ+3rhigTMtsIVASKviGX4Aj61iFN1UzJtyYb d+fSm91s4Fh7trzA/ouBUq3oUivJ6hkjfZHNSNqdxlQhs7MRhT8jc0sUTlnfLD4z P/YHt68nmB7vBA94t7KxEq0+tD4g3FsMMDkbwznxOVjbj0VXRvqOg5N+CsqYbZBA xR6NocXSfplvuZjyCNYh/Y5wSmifKKo= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:02 2025 by rpki-client