$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa File: a08ce2be-b409-35c4-a379-ba55950d59ea.roa (raw, json) Hash identifier: A94cMzsXTVq+Ora5uSfZF0YklDNoEmYO94NMSJ42H5k= Subject key identifier: 61:F9:25:1F:91:22:16:16:E0:B1:FE:55:DA:FF:F5:3A:45:75:1B:08 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411AC968F255DCE310B2500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ac:96:8f:25:5d:ce:31:0b:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=02ff8fc4-a572-47bf-bfcc-0d75329a93de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:50:0e:a3:6e:81:57:42:1d:3d:a0:48:04:ce: 4c:20:6a:ba:45:05:64:83:bd:3e:6b:48:18:f3:55: fc:e6:88:bf:cd:f9:91:c7:23:36:67:0d:ae:a6:c0: d5:d4:19:69:66:49:25:e9:d9:e0:3d:04:64:a9:ee: 0e:b7:e6:8b:c1:31:b6:33:eb:5e:de:66:97:6d:74: d5:d2:e8:44:aa:09:aa:cd:59:6b:80:66:17:9b:0c: 27:37:1e:f0:b3:b5:b1:6a:3a:b3:45:1d:f6:b6:3c: 2e:61:0d:de:c4:7d:68:26:4f:f3:60:9a:4d:f0:dd: 36:c7:0c:47:62:84:c7:47:a5:eb:22:87:dd:ba:64: d7:4a:5e:4c:2e:b2:79:65:88:c1:94:b1:71:e9:13: f8:81:61:62:81:ae:00:62:7f:b9:6b:34:41:65:81: a0:a1:ba:c0:4d:89:ab:7a:83:f1:d9:87:71:4f:6f: f2:42:35:c9:b4:79:65:3c:49:b1:15:d7:4d:76:38: 08:06:3a:01:07:28:1b:18:d8:bf:09:2e:ea:8f:d8: 27:e2:93:46:cd:03:dc:72:0d:ce:4b:37:1a:8f:de: 3a:c4:a9:bd:5d:31:c3:09:d6:3a:6e:e4:c0:1d:9a: 4c:6e:97:ab:77:17:60:74:a8:79:99:ef:d9:ee:52: 50:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F9:25:1F:91:22:16:16:E0:B1:FE:55:DA:FF:F5:3A:45:75:1B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:2c:32:a9:e2:5c:c2:32:84:74:6f:e6:a9:8e:ae:87:63:34: c1:24:99:50:e0:a1:9e:cb:c3:2f:b4:e7:14:11:9b:98:2e:d6: dd:60:26:9e:95:26:55:9f:02:c6:96:c8:60:d7:79:50:76:52: 5e:b5:83:4b:20:91:9b:b3:44:e2:22:6d:50:a4:9d:bb:71:16: 03:42:1d:45:14:54:6a:24:c7:b1:46:5d:82:7d:3e:58:8d:a5: 46:f6:e6:cb:21:15:06:4d:4e:19:10:ca:f1:90:06:14:ed:a1: 5f:72:7f:5e:ff:10:e6:90:90:f8:ef:ef:d9:b9:46:cf:d3:5d: 0b:f4:b6:b9:b9:90:d0:ba:4b:46:20:72:29:e9:97:7e:cf:4b: 51:7a:e6:60:82:f9:09:a3:7d:56:15:ee:0a:33:d9:3d:93:af: 0f:bc:d4:a7:21:49:10:6f:4f:0e:ce:8c:87:65:2b:2e:04:84: 8b:d1:df:a4:f9:e3:b0:7c:36:5c:ae:32:ea:e8:57:7d:e3:75: ce:36:c7:45:f8:21:38:9a:e6:74:2f:61:0c:e3:ae:31:95:f8: d3:95:5a:4a:95:e3:e3:d2:0c:97:73:80:e2:9c:c0:2c:87:9f: a7:82:c6:e8:4c:c3:f5:eb:d2:c0:d3:b8:01:37:99:70:44:dd: 5e:2c:ce:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEayWjyVdzjELJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDJmZjhmYzQtYTU3Mi00N2JmLWJmY2MtMGQ3NTMyOWE5M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFAOo26BV0IdPaBIBM5MIGq6RQVkg70+a0gY 81X85oi/zfmRxyM2Zw2upsDV1BlpZkkl6dngPQRkqe4Ot+aLwTG2M+te3maXbXTV 0uhEqgmqzVlrgGYXmwwnNx7ws7WxajqzRR32tjwuYQ3exH1oJk/zYJpN8N02xwxH YoTHR6XrIofdumTXSl5MLrJ5ZYjBlLFx6RP4gWFiga4AYn+5azRBZYGgobrATYmr eoPx2YdxT2/yQjXJtHllPEmxFddNdjgIBjoBBygbGNi/CS7qj9gn4pNGzQPccg3O Szcaj946xKm9XTHDCdY6buTAHZpMbperdxdgdKh5me/Z7lJQMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH5JR+RIhYW4LH+Vdr/9TpFdRsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTA4Y2UyYmUtYjQwOS0z NWM0LWEzNzktYmE1NTk1MGQ1OWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQsMqniXMIyhHRv5qmOrodjNMEkmVDgoZ7Lwy+05xQRm5gu1t1gJp6V JlWfAsaWyGDXeVB2Ul61g0sgkZuzROIibVCknbtxFgNCHUUUVGokx7FGXYJ9PliN pUb25sshFQZNThkQyvGQBhTtoV9yf17/EOaQkPjv79m5Rs/TXQv0trm5kNC6S0Yg cinpl37PS1F65mCC+QmjfVYV7goz2T2Trw+81KchSRBvTw7OjIdlKy4EhIvR36T5 47B8NlyuMuroV33jdc42x0X4ITia5nQvYQzjrjGV+NOVWkqV4+PSDJdzgOKcwCyH n6eCxuhMw/Xr0sDTuAE3mXBE3V4szu4= -----END CERTIFICATE-----Generated at Sat Jul 26 20:12:05 2025 by rpki-client