$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78c8369d-91fe-33c0-94a9-35c6bbe9ce20.roa File: 78c8369d-91fe-33c0-94a9-35c6bbe9ce20.roa (raw, json) Hash identifier: 9a3bMY0JuPwdOwua2a57ezT2JoVY9oONLQERplmtmdY= Subject key identifier: 96:9A:7F:45:B0:37:B1:AF:14:D9:CE:06:D1:77:F2:7B:ED:0C:D8:38 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110180061D41746BEDEC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78c8369d-91fe-33c0-94a9-35c6bbe9ce20.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:01:80:06:1d:41:74:6b:ed:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bec76ea6-0826-4ae0-ba59-e942522c0dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4b:3d:ec:61:49:2c:0c:6a:29:df:3a:8e:63: 08:c1:6a:3e:86:e5:20:3a:ac:ab:90:d5:9c:44:e5: e2:41:e2:92:a9:b5:13:19:43:80:05:a4:c2:9d:54: 17:40:d9:b8:ac:ff:08:3f:51:19:f4:f8:49:9e:4f: f0:ff:eb:cf:b6:f3:55:02:e6:dd:de:72:89:3e:c7: fa:6d:27:19:ba:5a:84:be:47:e8:27:91:46:e7:aa: 22:ce:57:b9:8c:3b:3a:f4:93:c9:53:f4:30:60:05: fc:3e:53:84:d2:e9:28:db:13:50:44:56:b3:0a:28: d2:14:51:8e:a3:d3:c5:8f:84:49:1c:8e:c2:b5:93: 4b:29:f0:2d:15:53:05:75:9e:85:53:78:70:f5:c9: a6:4f:fe:96:11:2b:a6:c7:8a:98:06:cb:7e:fd:a7: 75:f7:c8:b1:b4:04:be:24:40:66:6d:fc:41:37:0a: 90:55:69:82:65:02:2b:9c:8b:ec:53:47:6e:1b:52: 21:f2:bc:6b:74:8e:58:4f:7f:bf:d3:2b:9c:bf:51: cf:82:be:15:cf:d8:ff:4b:10:fb:be:b8:ea:92:5b: 70:bb:dc:a5:40:b1:6f:bb:65:09:50:0f:9d:d1:a3: 6b:aa:1c:f5:d1:6d:d4:c0:ca:da:dc:1d:9f:b4:fb: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9A:7F:45:B0:37:B1:AF:14:D9:CE:06:D1:77:F2:7B:ED:0C:D8:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78c8369d-91fe-33c0-94a9-35c6bbe9ce20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f0:c1:94:26:3e:3f:99:f5:03:74:e9:b7:35:f1:61:41:09: 54:18:df:70:c5:cc:b5:7e:e8:f5:0b:6d:d2:8b:9a:80:50:e5: ab:dd:a3:44:b9:eb:11:0c:5e:fc:59:eb:d5:eb:e9:68:71:cc: 7e:22:47:7e:f1:f6:15:0e:29:95:c4:e4:d3:00:49:2e:e4:71: 65:55:f4:cf:14:03:03:b6:87:63:27:46:36:ce:8e:42:2b:08: 1c:83:dc:14:72:87:6b:c3:0d:84:c7:0e:4e:f0:76:68:a7:26: a6:a7:de:f5:35:04:aa:da:a4:d7:be:77:e6:54:69:17:a3:f3: 3c:6e:b2:82:8f:d1:6c:5e:ea:27:10:a4:52:36:63:23:6a:b0: 54:f6:df:af:83:a0:f2:fb:5a:b2:d2:1c:90:8b:8d:00:ca:3d: be:c5:4a:89:16:64:42:a4:9f:65:fa:b4:98:1a:c3:98:24:65: 7c:49:0c:da:54:ca:a5:ac:6c:5d:48:c5:96:bb:44:a7:2f:ac: f9:3d:43:88:f4:35:6c:06:5e:70:8b:eb:74:ee:37:04:92:ce: 92:4d:a9:eb:44:e2:ec:a2:72:70:b8:d5:07:d0:83:1b:fa:ca: 8b:78:12:b8:aa:91:68:a0:0a:0e:d3:31:09:de:90:85:5c:65: db:32:62:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQGABh1BdGvt7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmVjNzZlYTYtMDgyNi00YWUwLWJhNTktZTk0MjUyMmMwZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwks97GFJLAxqKd86jmMIwWo+huUgOqyrkNWc ROXiQeKSqbUTGUOABaTCnVQXQNm4rP8IP1EZ9PhJnk/w/+vPtvNVAubd3nKJPsf6 bScZulqEvkfoJ5FG56oizle5jDs69JPJU/QwYAX8PlOE0uko2xNQRFazCijSFFGO o9PFj4RJHI7CtZNLKfAtFVMFdZ6FU3hw9cmmT/6WESumx4qYBst+/ad198ixtAS+ JEBmbfxBNwqQVWmCZQIrnIvsU0duG1Ih8rxrdI5YT3+/0yucv1HPgr4Vz9j/SxD7 vrjqkltwu9ylQLFvu2UJUA+d0aNrqhz10W3UwMra3B2ftPtIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaaf0WwN7GvFNnOBtF38nvtDNg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzhjODM2OWQtOTFmZS0z M2MwLTk0YTktMzVjNmJiZTljZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHwwZQmPj+Z9QN06bc18WFBCVQY33DFzLV+6PULbdKLmoBQ5avdo0S5 6xEMXvxZ69Xr6WhxzH4iR37x9hUOKZXE5NMASS7kcWVV9M8UAwO2h2MnRjbOjkIr CByD3BRyh2vDDYTHDk7wdminJqan3vU1BKrapNe+d+ZUaRej8zxusoKP0Wxe6icQ pFI2YyNqsFT236+DoPL7WrLSHJCLjQDKPb7FSokWZEKkn2X6tJgaw5gkZXxJDNpU yqWsbF1IxZa7RKcvrPk9Q4j0NWwGXnCL63TuNwSSzpJNqetE4uyicnC41QfQgxv6 yot4EriqkWigCg7TMQnekIVcZdsyYug= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:10 2025 by rpki-client