$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa File: 8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa (raw, json) Hash identifier: mcXikhB1tXmn+/e9ZbqTRP37gakVii4r/28RRWWOFU0= Subject key identifier: 6D:57:F4:1E:BB:97:41:96:72:8E:FB:77:1B:9C:3C:53:98:CE:99:39 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411AAC687E06C3C61651800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:aa:c6:87:e0:6c:3c:61:65:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=022a08c5-4299-4057-aaa4-3bd236bb7148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:70:1d:e6:e9:31:ee:c5:b7:f1:98:0a:b5: bf:1e:1d:2e:75:b0:af:d7:4b:11:7c:9d:02:7a:67: b6:e6:a6:f8:b9:6b:e6:37:e9:d0:78:9d:99:fe:fe: fe:d3:51:56:17:27:a1:0b:d4:65:ba:38:3a:ae:a3: 23:42:7c:a4:13:c1:3c:9c:b6:07:6f:6d:df:ac:b3: 4b:a5:0e:9a:73:de:99:53:26:67:76:49:2d:8e:41: da:68:d4:2c:a4:37:2c:c2:99:f7:f4:6b:b3:d9:e3: 1f:69:9e:9c:89:7b:8f:7b:d6:c3:d7:7c:b0:1d:b9: eb:75:60:2e:c3:f2:4f:9d:d2:38:26:68:20:48:52: 5c:df:c7:0e:56:6c:4c:73:1f:3b:c0:4e:07:b3:cb: 44:33:c8:4f:11:f7:75:d3:19:ed:f1:38:17:9a:61: 3c:3a:0a:a6:9c:6e:cf:9a:eb:bc:f6:22:19:02:a6: 96:9b:88:d9:a1:09:dc:f3:12:9f:77:39:40:91:43: 38:4c:4e:44:12:76:99:a8:3c:c0:48:81:5f:bf:a5: db:c5:24:20:63:18:d6:4c:51:ce:a0:a8:37:f5:38: 16:b4:1a:59:cd:4d:90:ac:ab:f6:3e:0c:28:f0:50: e0:9c:ae:4b:4b:98:2d:17:64:5c:d5:bd:84:69:0f: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:57:F4:1E:BB:97:41:96:72:8E:FB:77:1B:9C:3C:53:98:CE:99:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b94e17b-9c3a-3d24-bae7-a69f7d3ac036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:56:f0:21:2e:dc:20:db:95:e7:22:d9:f1:91:46:dd:b5:45: 1c:88:ed:d9:69:00:5a:fc:26:03:b8:24:f8:87:c1:db:a4:ac: dc:42:5a:94:cb:57:49:bb:67:b9:87:2a:84:4c:3c:76:53:04: 70:c7:08:5f:dc:2e:41:c7:d8:ac:30:37:01:01:69:0e:65:b1: 8e:58:00:4f:02:2e:51:72:99:ae:59:fa:99:5c:27:6b:ad:be: 35:8f:d1:ad:3f:4a:f3:14:8c:0c:e4:6b:42:9f:45:16:49:32: 27:7b:a3:cc:9f:60:5d:b9:ef:a2:a5:c8:3d:58:e0:3a:2c:6d: 75:22:bc:c6:92:45:da:cc:09:b2:87:8a:9e:a2:71:d1:2c:ba: 3b:5f:32:60:7a:a7:ce:e6:a5:f7:16:e0:82:e1:90:7c:d7:fa: 9e:fd:9b:69:14:1e:e0:80:b6:74:58:ba:0c:a0:e4:0d:54:0f: 83:4e:f8:8f:00:47:78:07:c1:68:13:b4:59:95:0f:14:6d:1f: db:1d:e0:b1:f7:d5:87:72:b1:e9:9a:b5:56:2f:80:2b:18:a7: 88:2c:e8:be:a3:32:98:2d:a7:0f:35:81:d3:81:98:09:19:8f: bf:f4:ce:ae:97:52:1d:b3:d9:92:b8:70:3e:50:97:99:3c:c3: c1:48:98:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEarGh+BsPGFlGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDIyYTA4YzUtNDI5OS00MDU3LWFhYTQtM2JkMjM2YmI3MTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXZwHebpMe7Ft/GYCrW/Hh0udbCv10sRfJ0C eme25qb4uWvmN+nQeJ2Z/v7+01FWFyehC9Rlujg6rqMjQnykE8E8nLYHb23frLNL pQ6ac96ZUyZndkktjkHaaNQspDcswpn39Guz2eMfaZ6ciXuPe9bD13ywHbnrdWAu w/JPndI4JmggSFJc38cOVmxMcx87wE4Hs8tEM8hPEfd10xnt8TgXmmE8OgqmnG7P muu89iIZAqaWm4jZoQnc8xKfdzlAkUM4TE5EEnaZqDzASIFfv6XbxSQgYxjWTFHO oKg39TgWtBpZzU2QrKv2Pgwo8FDgnK5LS5gtF2Rc1b2EaQ+Y5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1X9B67l0GWco77dxucPFOYzpk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGI5NGUxN2ItOWMzYS0z ZDI0LWJhZTctYTY5ZjdkM2FjMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBW8CEu3CDbleci2fGRRt21RRyI7dlpAFr8JgO4JPiHwdukrNxCWpTL V0m7Z7mHKoRMPHZTBHDHCF/cLkHH2KwwNwEBaQ5lsY5YAE8CLlFyma5Z+plcJ2ut vjWP0a0/SvMUjAzka0KfRRZJMid7o8yfYF2576KlyD1Y4DosbXUivMaSRdrMCbKH ip6icdEsujtfMmB6p87mpfcW4ILhkHzX+p79m2kUHuCAtnRYugyg5A1UD4NO+I8A R3gHwWgTtFmVDxRtH9sd4LH31YdysematVYvgCsYp4gs6L6jMpgtpw81gdOBmAkZ j7/0zq6XUh2z2ZK4cD5Ql5k8w8FImJE= -----END CERTIFICATE-----Generated at Fri Jul 25 23:57:55 2025 by rpki-client