$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caf31f28-46d2-3511-88b1-6baa6bdaf52c.roa File: caf31f28-46d2-3511-88b1-6baa6bdaf52c.roa (raw, json) Hash identifier: xKtCVt8UV98AACm/N/y05Esk0q5IhKP47gssq0WrQ8A= Subject key identifier: 40:66:AC:38:B8:A6:98:4A:72:26:5F:21:FE:64:55:9D:1D:8E:5C:05 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84119EE4CA52EA232449D880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caf31f28-46d2-3511-88b1-6baa6bdaf52c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:9e:e4:ca:52:ea:23:24:49:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=99c8eef1-8917-48be-b99c-637e44bdddba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:d6:b2:b6:66:1e:05:5e:f4:63:22:6d:6d: b1:d5:8c:13:68:ca:99:ef:b6:35:ca:ea:40:ca:d9: 7f:cd:54:e8:eb:72:60:28:d2:6f:8d:bf:f7:e5:ab: 02:9c:59:23:16:35:e3:8f:b3:56:1a:e5:e3:c5:1e: 36:cc:e0:19:41:e6:70:69:09:70:b6:af:90:43:90: de:47:b8:c7:eb:b2:17:bd:b1:81:94:a3:22:e5:6f: 99:6f:74:73:c2:8d:70:0e:5e:62:37:03:60:5e:a4: 49:79:e5:de:90:7d:99:41:d4:39:2b:5a:9e:57:15: 73:e9:93:33:7b:5d:25:78:3f:6e:2e:18:00:5b:96: 57:13:2d:62:0b:0e:c5:80:ba:a2:ad:4a:42:ef:db: 50:4a:ff:8f:7c:66:59:81:5a:0d:37:d6:8d:44:0a: d6:e0:a5:d1:95:18:bc:92:b9:03:41:42:58:c0:7f: 54:91:81:e0:cf:b6:eb:ee:8b:bf:c3:fc:50:a4:da: 29:97:a0:53:b5:9d:00:fa:c6:57:17:d6:4d:ae:b5: 27:2d:62:1a:09:78:84:cd:02:a8:75:7c:2f:e1:8c: ef:f2:d1:05:e8:b8:70:ce:0e:ef:af:f7:9b:04:12: 33:be:35:b2:3f:c0:10:1d:13:0c:5a:fc:21:c2:20: e4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:AC:38:B8:A6:98:4A:72:26:5F:21:FE:64:55:9D:1D:8E:5C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/caf31f28-46d2-3511-88b1-6baa6bdaf52c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:89:0c:3f:e1:2b:e8:0a:c0:ab:dd:a4:6d:c9:55:e6:60:b9: 95:ad:38:82:ba:b8:85:f9:68:bd:9c:81:85:61:31:f7:f6:a6: b6:f3:3d:b4:ff:f5:73:b3:aa:9a:f6:4e:e2:ac:75:eb:44:d9: 57:21:40:2c:65:b6:7d:06:31:af:1f:21:99:99:79:4f:e9:3e: dd:a6:79:8f:8b:a8:8c:79:da:2e:a9:79:c3:bb:b9:04:0b:b7: a6:c1:45:4b:85:38:60:95:84:68:9b:82:ba:a1:01:fa:bf:c6: 7d:42:ed:78:f2:59:8a:58:a3:c5:03:90:b5:47:7d:94:57:7e: 8a:1a:d3:90:2f:2e:e4:74:b3:e8:05:85:98:e1:ae:df:e5:0e: b9:a4:09:2f:5b:cb:f0:b2:b2:b2:4b:09:6f:e5:0b:5e:a4:bb: e5:c0:76:2d:92:8f:c4:22:77:f7:d7:95:c8:d7:5a:12:80:98: 87:bc:7a:0d:7a:e6:cc:4c:1f:87:27:5b:16:03:60:c6:b3:10: b9:62:c0:ab:30:25:38:12:cb:9a:8f:d3:18:5a:c7:86:25:12: 26:e2:e0:68:23:a6:67:8c:3b:a8:78:8e:ab:f9:a0:a0:bb:30: 4a:71:a7:1f:28:1a:bf:d9:50:59:f8:a0:59:54:9e:7a:1a:12: 5c:a3:25:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZ7kylLqIyRJ2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTljOGVlZjEtODkxNy00OGJlLWI5OWMtNjM3ZTQ0YmRkZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg7WsrZmHgVe9GMibW2x1YwTaMqZ77Y1yupA ytl/zVTo63JgKNJvjb/35asCnFkjFjXjj7NWGuXjxR42zOAZQeZwaQlwtq+QQ5De R7jH67IXvbGBlKMi5W+Zb3Rzwo1wDl5iNwNgXqRJeeXekH2ZQdQ5K1qeVxVz6ZMz e10leD9uLhgAW5ZXEy1iCw7FgLqirUpC79tQSv+PfGZZgVoNN9aNRArW4KXRlRi8 krkDQUJYwH9UkYHgz7br7ou/w/xQpNopl6BTtZ0A+sZXF9ZNrrUnLWIaCXiEzQKo dXwv4Yzv8tEF6Lhwzg7vr/ebBBIzvjWyP8AQHRMMWvwhwiDkCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBmrDi4pphKciZfIf5kVZ0djlwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2FmMzFmMjgtNDZkMi0z NTExLTg4YjEtNmJhYTZiZGFmNTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeJDD/hK+gKwKvdpG3JVeZguZWtOIK6uIX5aL2cgYVhMff2prbzPbT/ 9XOzqpr2TuKsdetE2VchQCxltn0GMa8fIZmZeU/pPt2meY+LqIx52i6pecO7uQQL t6bBRUuFOGCVhGibgrqhAfq/xn1C7XjyWYpYo8UDkLVHfZRXfooa05AvLuR0s+gF hZjhrt/lDrmkCS9by/CysrJLCW/lC16ku+XAdi2Sj8Qid/fXlcjXWhKAmIe8eg16 5sxMH4cnWxYDYMazELliwKswJTgSy5qP0xhax4YlEibi4GgjpmeMO6h4jqv5oKC7 MEpxpx8oGr/ZUFn4oFlUnnoaElyjJf4= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:20 2025 by rpki-client