$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa File: a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa (raw, json) Hash identifier: A+oH1DiFuWg1/93n4CZnNXCDj1LajLngmDcBvkpCrDw= Subject key identifier: D2:F5:EB:0D:7E:B8:13:1B:7D:E2:09:52:69:4A:4E:09:57:31:09:BE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411000EDB8107FF8F4E4740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:00:0e:db:81:07:ff:8f:4e:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bd939ca8-b7e0-4c1d-be1f-f35d12141f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b9:f0:ab:e4:61:b1:91:72:6c:99:43:2a:7e: 03:92:9d:7b:e4:5f:98:ec:af:dd:0a:9a:7b:52:1a: 49:38:e0:47:9b:c8:b5:df:6e:f9:62:73:78:f0:69: 1f:77:e5:67:15:92:0a:71:a1:8d:71:7b:10:93:d1: 75:3f:2d:da:34:3d:b5:e6:c3:12:7d:56:28:67:42: fb:d1:7e:91:dc:c9:03:74:aa:5a:1a:9e:59:38:7d: eb:33:dd:ff:0b:15:a7:1d:37:49:5e:d7:68:35:ef: 0d:a0:a1:a6:e3:5b:85:ce:08:4e:44:10:bc:8c:47: 6b:fe:ca:b7:94:8d:38:f7:8d:d6:1b:14:70:46:92: 8a:65:1b:81:fd:d1:fb:59:7d:0d:c7:14:bd:95:7f: a6:aa:e9:db:ab:f9:c7:44:1f:dc:e7:79:87:c2:40: a6:21:18:4d:54:88:e9:15:1f:3c:c6:16:bf:b6:e9: b1:d8:f0:0e:6a:3d:b0:06:5e:5a:af:32:6c:d5:d6: f8:83:26:84:8d:69:47:71:9e:3f:71:03:94:7e:d4: f4:02:3d:2c:08:68:b8:bf:3f:14:a7:10:4f:50:7e: 84:40:8b:d6:38:df:d0:ee:26:3c:cc:e8:f0:b5:47: a8:36:89:4e:cf:2d:f0:45:88:bc:97:4d:56:ba:9d: ba:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F5:EB:0D:7E:B8:13:1B:7D:E2:09:52:69:4A:4E:09:57:31:09:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5e:5a:1a:b9:1b:34:71:a6:99:07:c1:bd:29:66:21:a2:12: 9b:3f:45:4d:b4:16:2c:f8:be:22:f7:44:84:35:0c:7b:6d:6c: db:de:ee:20:24:c8:ed:a1:74:b7:37:ae:b8:93:c3:f4:c4:70: c7:65:22:79:b6:e8:9b:74:e9:82:c7:19:eb:07:f0:73:3e:5c: 07:6f:a7:d3:fa:86:60:02:bd:83:71:66:99:dd:20:cd:71:79: 4f:d5:94:91:3f:8a:16:ad:7b:d8:a5:a9:e2:6b:64:07:12:71: d7:f5:38:5d:bb:46:96:d3:f8:54:b8:93:3a:6c:39:25:d1:dc: 10:fd:6f:57:97:6d:5e:f8:0a:01:14:34:a5:a9:dc:89:d3:8c: 28:c0:77:fa:5f:cf:66:15:ae:77:65:5f:55:b5:97:fa:69:be: ec:a3:21:c7:e5:2e:06:4f:14:1c:1d:14:3d:9a:07:4b:bc:1a: fa:a8:86:f1:f6:2a:c6:9f:e9:93:63:67:e0:95:e0:40:33:b7: be:c6:f9:71:19:06:fe:55:9d:49:2e:5b:d9:f0:2a:74:bb:10: f7:00:5c:60:4b:55:92:39:34:24:8b:4d:bf:a6:60:b4:03:98: fa:e2:26:d5:d1:88:82:16:fa:53:2f:e4:f5:f2:1b:40:be:ce: c5:e2:0b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQAO24EH/49OR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmQ5MzljYTgtYjdlMC00YzFkLWJlMWYtZjM1ZDEyMTQxZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrnwq+RhsZFybJlDKn4Dkp175F+Y7K/dCpp7 UhpJOOBHm8i13275YnN48Gkfd+VnFZIKcaGNcXsQk9F1Py3aND215sMSfVYoZ0L7 0X6R3MkDdKpaGp5ZOH3rM93/CxWnHTdJXtdoNe8NoKGm41uFzghORBC8jEdr/sq3 lI04943WGxRwRpKKZRuB/dH7WX0NxxS9lX+mqunbq/nHRB/c53mHwkCmIRhNVIjp FR88xha/tumx2PAOaj2wBl5arzJs1db4gyaEjWlHcZ4/cQOUftT0Aj0sCGi4vz8U pxBPUH6EQIvWON/Q7iY8zOjwtUeoNolOzy3wRYi8l01Wup26xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL16w1+uBMbfeIJUmlKTglXMQm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTI1Y2I3YWItZWUzYi0z N2Q4LTk4OTYtNzFkNzZjMDhkYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVeWhq5GzRxppkHwb0pZiGiEps/RU20Fiz4viL3RIQ1DHttbNve7iAk yO2hdLc3rriTw/TEcMdlInm26Jt06YLHGesH8HM+XAdvp9P6hmACvYNxZpndIM1x eU/VlJE/ihate9ilqeJrZAcScdf1OF27RpbT+FS4kzpsOSXR3BD9b1eXbV74CgEU NKWp3InTjCjAd/pfz2YVrndlX1W1l/ppvuyjIcflLgZPFBwdFD2aB0u8GvqohvH2 Ksaf6ZNjZ+CV4EAzt77G+XEZBv5VnUkuW9nwKnS7EPcAXGBLVZI5NCSLTb+mYLQD mPriJtXRiIIW+lMv5PXyG0C+zsXiC9E= -----END CERTIFICATE-----Generated at Sat Jul 26 11:15:02 2025 by rpki-client