$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce73eda0-0411-3c17-baeb-695cd812b6f2.roa File: ce73eda0-0411-3c17-baeb-695cd812b6f2.roa (raw, json) Hash identifier: 2c1TT+c6KcrkRJRo/McIqltJgot6Rt1Zf9wi3JOUpkI= Subject key identifier: 0D:BE:16:CA:CA:F3:F5:00:FF:4E:9E:FF:29:3F:EF:27:B1:45:4E:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841104755E6F2F2F86354F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce73eda0-0411-3c17-baeb-695cd812b6f2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 70.41.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:04:75:5e:6f:2f:2f:86:35:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=79fe57f9-d16c-4469-946a-bba133f3f523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:19:5e:d1:99:2d:19:14:cd:c6:88:4b:d2: b9:48:cc:bf:f0:fd:cb:0a:08:78:cc:7c:03:25:28: 8f:c6:53:03:55:36:a8:53:df:85:8f:14:ae:af:d5: 3c:58:9b:96:df:4a:40:22:d5:ae:ba:78:07:b2:53: c5:79:b5:a3:73:94:cb:fe:6f:5b:ff:c9:fb:d3:39: de:98:0c:62:83:f9:68:0d:f3:a8:ad:e0:4b:d3:d8: da:14:0a:29:3c:be:5a:67:d1:2d:8a:6b:2c:e4:db: 68:40:7b:85:98:f0:e6:92:cc:d6:36:e6:e1:91:17: d1:dc:c8:32:bf:e6:5a:72:d6:13:c8:cf:44:30:56: ce:55:d4:38:56:d2:4e:f6:c4:77:2c:6e:02:97:57: 3f:ff:6b:30:9d:e1:c8:51:8e:55:7f:07:4d:35:cf: 05:38:a2:da:7d:83:9f:43:28:db:6e:2d:4f:8b:1a: 9b:a7:86:dc:f7:7a:08:49:47:b8:71:ac:3a:66:b6: d5:09:6f:39:46:f4:c7:8e:65:d0:33:cd:a7:52:1e: 81:de:e1:56:c7:e5:88:ca:7b:60:e3:74:5d:c2:e3: a0:b1:98:30:e2:62:dc:c9:3e:d5:65:fb:09:fd:9b: d0:08:5b:73:9a:7f:d3:13:15:b0:e9:f7:0b:9c:24: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BE:16:CA:CA:F3:F5:00:FF:4E:9E:FF:29:3F:EF:27:B1:45:4E:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce73eda0-0411-3c17-baeb-695cd812b6f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e9:ea:44:17:34:9f:8b:fb:d9:b1:fb:06:c9:0c:33:8a:61: 32:36:4c:f4:4a:3f:f2:0f:86:a8:fa:23:09:60:a0:d4:67:98: 3a:83:50:99:18:33:2b:e8:b0:00:ee:c3:13:2b:c1:42:44:1c: a8:a6:66:62:1a:71:40:a8:6d:b3:f4:60:e1:63:bc:31:d6:bb: c3:e7:39:2d:a0:09:91:59:05:21:a8:37:18:98:76:dd:15:ca: 48:e8:66:43:9b:1f:36:93:67:83:3c:ce:73:91:03:4c:1c:2b: 73:73:79:d0:de:b1:dd:d7:67:a3:27:42:17:2c:34:7a:b8:1d: 07:fa:ad:12:6a:dd:4a:24:7a:c3:c7:d2:22:a4:b8:09:9a:04: 34:2e:18:57:2c:b7:c9:e4:7c:12:f0:38:b1:61:d9:c6:23:c7: 3a:f3:d3:8b:3f:94:a0:b1:9d:18:50:25:1c:d7:6c:d1:2e:39: 51:e2:7e:fd:d2:b1:53:38:6c:f8:14:cb:83:bc:bf:a5:a5:25: d4:5d:07:ec:57:4a:9b:91:49:a8:26:e8:ed:8f:52:be:93:28: 82:4c:a7:44:f3:3d:d2:5b:15:3a:dd:83:fa:1b:b2:f0:87:41: 8b:f1:f7:82:cf:ab:e2:55:be:3d:0c:21:7f:13:2f:c2:02:b9: f0:fe:c4:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQR1Xm8vL4Y1T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzlmZTU3ZjktZDE2Yy00NDY5LTk0NmEtYmJhMTMzZjNmNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotIZXtGZLRkUzcaIS9K5SMy/8P3LCgh4zHwD JSiPxlMDVTaoU9+FjxSur9U8WJuW30pAItWuungHslPFebWjc5TL/m9b/8n70zne mAxig/loDfOoreBL09jaFAopPL5aZ9Etimss5NtoQHuFmPDmkszWNubhkRfR3Mgy v+ZactYTyM9EMFbOVdQ4VtJO9sR3LG4Cl1c//2swneHIUY5VfwdNNc8FOKLafYOf Qyjbbi1Pixqbp4bc93oISUe4caw6ZrbVCW85RvTHjmXQM82nUh6B3uFWx+WIyntg 43RdwuOgsZgw4mLcyT7VZfsJ/ZvQCFtzmn/TExWw6fcLnCRziQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2+FsrK8/UA/06e/yk/7yexRU5uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2U3M2VkYTAtMDQxMS0z YzE3LWJhZWItNjk1Y2Q4MTJiNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrp6kQXNJ+L+9mx+wbJDDOKYTI2TPRKP/IPhqj6IwlgoNRnmDqDUJkY MyvosADuwxMrwUJEHKimZmIacUCobbP0YOFjvDHWu8PnOS2gCZFZBSGoNxiYdt0V ykjoZkObHzaTZ4M8znORA0wcK3NzedDesd3XZ6MnQhcsNHq4HQf6rRJq3UokesPH 0iKkuAmaBDQuGFcst8nkfBLwOLFh2cYjxzrz04s/lKCxnRhQJRzXbNEuOVHifv3S sVM4bPgUy4O8v6WlJdRdB+xXSpuRSagm6O2PUr6TKIJMp0TzPdJbFTrdg/obsvCH QYvx94LPq+JVvj0MIX8TL8ICufD+xLQ= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:46 2025 by rpki-client