$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25f51f5-5d4b-397c-9fbe-1825b7d48a30.roa File: c25f51f5-5d4b-397c-9fbe-1825b7d48a30.roa (raw, json) Hash identifier: pqyYr6SaX0ZJ16t2uTbKMrM9zy0aqYlpgAz+A6DEf7I= Subject key identifier: F7:C5:F6:7E:B5:43:34:DF:49:3A:CC:C1:17:C7:F0:05:43:D0:47:41 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411A98CA33692E186501640 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25f51f5-5d4b-397c-9fbe-1825b7d48a30.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:a9:8c:a3:36:92:e1:86:50:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5ae49125-f5e4-4fe7-9ecb-4aa2cea4517b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:a2:7b:32:47:2a:43:d4:a3:4e:5d:a6:ae: 61:ee:e1:83:9e:15:48:d4:75:76:8a:3d:74:8d:60: 46:14:db:96:a1:35:62:42:b1:03:26:ba:12:9a:f0: 96:44:bc:9d:47:bb:55:e8:e4:d2:57:99:81:88:86: 09:07:fc:10:e0:c3:b2:f9:79:11:5e:f2:cf:08:b5: 30:63:d2:44:79:9b:bd:2a:df:25:53:c6:7f:fc:a1: ab:63:24:1e:e7:b5:4b:67:36:eb:51:aa:dc:ac:57: 70:67:8f:af:97:7e:22:f4:30:40:2f:a5:13:c6:ea: 74:1b:2a:4d:6c:2a:2e:b0:b7:1c:70:fd:cb:88:31: 99:42:9c:0f:79:ee:d8:d6:e7:7f:18:92:78:87:49: e4:04:49:41:0e:c7:86:ee:8a:82:f8:65:a6:4c:da: c9:d7:11:8a:4c:ed:d4:f7:e3:bb:c9:d7:b4:d1:70: 4a:c3:db:1a:68:74:d5:8d:91:67:7b:15:20:2b:4b: 9c:91:b7:c4:b0:46:89:92:a6:39:54:1a:8e:a5:1d: 8a:58:81:20:ff:c7:3b:be:b8:17:3e:32:a4:3f:7e: 5c:04:b4:50:88:f2:51:9c:3c:c1:48:c2:c3:69:fc: 1d:14:48:6a:c1:9d:77:1e:c5:ea:ce:07:e7:a7:48: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C5:F6:7E:B5:43:34:DF:49:3A:CC:C1:17:C7:F0:05:43:D0:47:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25f51f5-5d4b-397c-9fbe-1825b7d48a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4e:5a:3d:96:fa:02:ab:5c:ea:ce:12:5a:c5:34:a0:5b:b3: 89:8e:65:77:46:54:8d:2c:e4:52:77:64:7e:27:ff:eb:a8:02: 4c:50:41:4d:b4:5e:b8:54:d4:d9:ec:25:2f:26:c0:db:d4:cf: 7b:e0:63:4b:22:c5:7b:6a:3c:46:6e:50:52:ab:62:43:c1:52: 72:27:42:0b:78:45:2c:95:9b:e7:ad:83:91:7e:95:10:8b:fb: 9b:62:fa:b4:1d:77:81:aa:1f:eb:8e:40:0e:51:91:25:74:c0: 39:45:9c:de:06:e6:cc:79:00:2b:1e:7b:40:21:00:e8:e1:bd: cd:99:f5:2f:2e:e6:c7:cd:74:39:d6:6c:a6:2c:8d:b3:16:4c: 10:48:a4:da:a4:f4:29:98:92:31:89:45:93:98:67:96:f4:30: 31:83:10:da:35:bd:f9:30:db:0b:c0:fb:4d:08:be:4f:00:3b: ce:1e:65:4f:6b:0c:c2:20:8c:b3:28:22:45:8f:e7:7b:aa:78: f7:fd:9e:6e:8b:8b:55:de:47:17:c9:47:5d:7d:02:34:ad:66: 9a:49:57:f9:7e:f5:73:98:1a:a2:b7:e1:b6:c0:15:fd:e7:fd: dd:df:d6:89:60:10:0b:c9:b9:d6:ad:10:ed:d3:5b:4b:2c:0a: f6:58:80:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEamMozaS4YZQFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NWFlNDkxMjUtZjVlNC00ZmU3LTllY2ItNGFhMmNlYTQ1MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAiiezJHKkPUo05dpq5h7uGDnhVI1HV2ij10 jWBGFNuWoTViQrEDJroSmvCWRLydR7tV6OTSV5mBiIYJB/wQ4MOy+XkRXvLPCLUw Y9JEeZu9Kt8lU8Z//KGrYyQe57VLZzbrUarcrFdwZ4+vl34i9DBAL6UTxup0GypN bCousLcccP3LiDGZQpwPee7Y1ud/GJJ4h0nkBElBDseG7oqC+GWmTNrJ1xGKTO3U 9+O7yde00XBKw9saaHTVjZFnexUgK0uckbfEsEaJkqY5VBqOpR2KWIEg/8c7vrgX PjKkP35cBLRQiPJRnDzBSMLDafwdFEhqwZ13HsXqzgfnp0iS6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfF9n61QzTfSTrMwRfH8AVD0EdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzI1ZjUxZjUtNWQ0Yi0z OTdjLTlmYmUtMTgyNWI3ZDQ4YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhOWj2W+gKrXOrOElrFNKBbs4mOZXdGVI0s5FJ3ZH4n/+uoAkxQQU20 XrhU1NnsJS8mwNvUz3vgY0sixXtqPEZuUFKrYkPBUnInQgt4RSyVm+etg5F+lRCL +5ti+rQdd4GqH+uOQA5RkSV0wDlFnN4G5sx5ACsee0AhAOjhvc2Z9S8u5sfNdDnW bKYsjbMWTBBIpNqk9CmYkjGJRZOYZ5b0MDGDENo1vfkw2wvA+00Ivk8AO84eZU9r DMIgjLMoIkWP53uqePf9nm6Li1XeRxfJR119AjStZppJV/l+9XOYGqK34bbAFf3n /d3f1olgEAvJudatEO3TW0ssCvZYgOM= -----END CERTIFICATE-----Generated at Sat Jul 26 11:32:21 2025 by rpki-client