$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa File: 967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa (raw, json) Hash identifier: bxZ9AvuUgav2ga6vS9l/nP0CBbPwJVQw4LUUWECCDGQ= Subject key identifier: E0:4F:5B:89:90:32:6B:2F:23:40:03:0D:0B:D8:E4:83:ED:19:30:F2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8410F839A4C8C2C19EEE0380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 16491 IP address blocks: 70.41.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:f8:39:a4:c8:c2:c1:9e:ee:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=faf2cecb-337d-4f0f-ae03-c457b2c9229f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:c9:be:9b:f3:a1:ca:f4:f1:a0:d0:7d:b5: d4:32:e0:f2:5d:91:e9:8a:02:f0:6a:e8:0c:b1:1b: 72:e9:73:0e:93:b4:69:6d:8b:26:7f:df:cf:c4:2b: 19:01:3e:d4:12:99:ec:f3:cf:29:30:91:1d:bb:2d: 55:1b:0f:81:ed:db:c1:9d:20:10:41:c4:dc:ba:21: 73:68:bd:ed:5e:80:5d:76:1f:00:4d:9f:71:90:28: 9e:b3:93:fe:b8:95:24:1b:c3:9c:db:fa:0d:50:6d: 1a:96:7f:2e:a2:51:23:15:bf:87:3d:4d:a4:5c:e1: b3:82:ba:73:27:41:07:da:a1:72:69:e2:00:86:d6: 64:cc:f3:c6:bc:28:27:99:72:f7:32:f0:c9:f7:41: c3:59:44:7d:12:56:5a:02:d8:5f:ba:ea:1c:3e:7b: 08:8c:a1:35:a7:dc:c4:16:cf:2f:e4:65:9b:23:7b: 69:e4:a2:1f:e2:84:ea:dd:c4:ed:12:c3:33:4a:aa: 33:4c:5e:29:13:f1:50:cd:73:6f:d3:e9:74:68:a8: e7:25:eb:8b:8f:19:09:72:79:b1:ec:80:50:74:ea: 2b:b8:2c:5a:0e:12:4f:85:34:8f:c2:38:b2:9f:04: 03:10:3d:c3:c6:39:43:3e:70:d2:51:5d:4f:36:aa: 81:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4F:5B:89:90:32:6B:2F:23:40:03:0D:0B:D8:E4:83:ED:19:30:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967c7534-3065-3eaf-b81f-4f4f2f4f99e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:61:1e:2d:60:d4:b1:9b:6b:5d:e8:9a:8e:8f:2d:bb:bd:6a: 39:b1:10:7f:4d:02:14:01:dd:fa:72:c6:f7:55:05:45:77:60: d7:8e:a8:52:6d:d4:2f:d7:57:09:7a:c1:94:d6:27:10:07:ae: 81:cd:1f:39:5b:57:57:cc:33:7e:0a:8d:ae:c0:5b:0a:4e:d0: 13:c3:9b:c1:63:b9:8a:da:8e:2b:f6:89:19:a0:dc:51:94:45: 78:06:59:58:1b:fe:a3:a8:f6:08:dd:f7:d1:77:b0:da:bc:20: fb:41:a7:33:84:3c:d9:87:e5:43:e4:4c:17:59:27:27:85:b3: c8:0f:18:b0:6b:d4:52:bf:39:51:3b:6f:23:b5:22:3e:53:62: 1c:e4:c1:b0:22:a3:f3:d9:aa:2f:7b:12:86:84:30:81:d2:53: e8:e0:2b:8b:84:df:0d:38:d9:43:26:fa:8d:0d:e9:e7:38:44: 97:1a:ed:69:df:70:50:c0:96:f1:23:4b:b5:06:67:15:f2:de: d6:47:55:de:36:7c:0d:6e:10:09:15:3e:26:14:50:80:61:b2: 03:87:46:cd:57:9d:53:d4:2e:5d:1c:ce:89:29:d6:36:44:c5: dd:05:eb:05:86:d8:a7:a6:8a:2c:a9:85:fd:0f:0a:03:ec:81: 0e:0a:37:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEPg5pMjCwZ7uA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmFmMmNlY2ItMzM3ZC00ZjBmLWFlMDMtYzQ1N2IyYzkyMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuPJvpvzocr08aDQfbXUMuDyXZHpigLwaugM sRty6XMOk7RpbYsmf9/PxCsZAT7UEpns888pMJEduy1VGw+B7dvBnSAQQcTcuiFz aL3tXoBddh8ATZ9xkCies5P+uJUkG8Oc2/oNUG0aln8uolEjFb+HPU2kXOGzgrpz J0EH2qFyaeIAhtZkzPPGvCgnmXL3MvDJ90HDWUR9ElZaAthfuuocPnsIjKE1p9zE Fs8v5GWbI3tp5KIf4oTq3cTtEsMzSqozTF4pE/FQzXNv0+l0aKjnJeuLjxkJcnmx 7IBQdOoruCxaDhJPhTSPwjiynwQDED3DxjlDPnDSUV1PNqqB8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBPW4mQMmsvI0ADDQvY5IPtGTDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTY3Yzc1MzQtMzA2NS0z ZWFmLWI4MWYtNGY0ZjJmNGY5OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhhHi1g1LGba13omo6PLbu9ajmxEH9NAhQB3fpyxvdVBUV3YNeOqFJt 1C/XVwl6wZTWJxAHroHNHzlbV1fMM34Kja7AWwpO0BPDm8FjuYrajiv2iRmg3FGU RXgGWVgb/qOo9gjd99F3sNq8IPtBpzOEPNmH5UPkTBdZJyeFs8gPGLBr1FK/OVE7 byO1Ij5TYhzkwbAio/PZqi97EoaEMIHSU+jgK4uE3w042UMm+o0N6ec4RJca7Wnf cFDAlvEjS7UGZxXy3tZHVd42fA1uEAkVPiYUUIBhsgOHRs1XnVPULl0czokp1jZE xd0F6wWG2Kemiiyphf0PCgPsgQ4KN5A= -----END CERTIFICATE-----Generated at Fri Jul 25 00:57:20 2025 by rpki-client