$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dce501f-82e9-30be-894d-a1b9ebe0a73c.roa File: 6dce501f-82e9-30be-894d-a1b9ebe0a73c.roa (raw, json) Hash identifier: ypHdO4LEhYZ3mYkR3tb0rE3VHUYttaG0JcnRQ7wtUi0= Subject key identifier: E2:10:9D:2C:F3:3B:40:1F:CD:C6:16:7E:BF:41:3F:76:9E:EB:79:B2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849568EB5988FE38AF3CA462300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dce501f-82e9-30be-894d-a1b9ebe0a73c.roa Signing time: Fri 28 Mar 2025 13:00:51 +0000 ROA not before: Fri 28 Mar 2025 13:00:51 +0000 ROA not after: Thu 26 Jun 2025 13:00:51 +0000 asID: 7155 IP address blocks: 70.41.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:56:8e:b5:98:8f:e3:8a:f3:ca:46:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 28 13:00:51 2025 GMT Not After : Jun 26 13:00:51 2025 GMT Subject: CN=53ac816d-327f-447c-8cc1-ca4b28bb94a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:8a:dc:6a:66:d1:c9:40:c8:3d:9c:d4:45: 9b:55:c9:fc:70:25:d5:99:fc:f5:58:1b:96:3e:63: 0a:50:04:5b:b7:e5:f4:38:64:92:ed:ad:bf:82:6d: 8f:0a:04:ee:4a:37:f6:f9:10:81:84:e9:44:f9:68: b6:9d:8b:72:53:e7:d9:1a:3c:9b:a2:51:a0:2d:60: 4a:cb:01:b6:f8:e3:f2:ce:5a:29:a0:57:fc:ee:5c: cd:84:eb:47:cd:1e:e9:79:df:32:44:68:86:49:7a: 33:56:16:bd:b7:a6:40:55:ad:17:21:b5:eb:4e:30: 87:16:d0:82:cb:0c:6e:5f:68:24:bf:0b:d7:96:29: 7c:40:0b:7b:23:ae:da:2f:fa:81:71:30:70:10:92: 4b:34:e7:d5:da:35:c5:53:2a:a6:50:ca:48:4b:1b: 09:39:c7:f7:a9:8b:ba:3b:b8:56:ff:ef:25:93:7a: 38:d5:ba:6c:55:ac:6a:5d:36:70:ed:da:0d:af:3a: 2d:6c:aa:8e:42:0f:be:21:c7:eb:c6:8a:7d:54:fb: 77:89:9d:80:08:10:e0:60:49:ad:e6:a3:9a:f2:35: 32:7c:18:c6:bf:31:a8:e7:7e:59:91:50:ce:1f:49: df:17:e3:4d:19:1f:48:14:b7:21:3a:9f:19:f6:6f: fe:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:9D:2C:F3:3B:40:1F:CD:C6:16:7E:BF:41:3F:76:9E:EB:79:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dce501f-82e9-30be-894d-a1b9ebe0a73c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:19:d3:f1:d8:f1:1a:d0:e7:a6:91:79:12:20:ae:a5:e3:59: ec:dd:31:36:bc:e8:b7:4c:14:69:b0:94:16:0c:d0:d5:be:29: 95:bb:a1:30:a0:a8:0a:65:55:03:37:4b:76:1a:ab:9a:54:d6: cb:b8:c9:54:14:7c:1f:2f:82:41:a2:57:02:b8:86:d5:01:b0: 81:b9:fe:76:57:56:02:f1:40:06:fc:f1:df:a4:82:72:5c:5c: 08:11:49:ec:0e:98:fe:6d:80:df:31:3e:84:c5:2d:6e:09:60: 06:27:9b:1c:5d:9e:3f:cb:ee:93:90:0d:43:60:aa:01:dc:dc: 01:8e:0d:ee:38:40:8c:66:a2:c6:7c:4a:3d:ab:b7:93:26:ee: 63:05:ea:53:08:8f:d2:81:3b:4a:30:70:e2:3a:c5:76:c7:b7: 7b:c4:7b:dd:e3:68:5d:e7:0e:04:68:c6:99:a7:e1:26:a9:28: ad:62:f9:89:14:cc:3d:e4:e6:ec:0b:1b:99:86:6c:a3:e3:3b: 6c:c1:bb:cf:b6:6a:42:df:86:23:d8:7d:8c:da:c6:00:7c:c3: 4a:dc:3b:32:04:0c:48:5f:79:1c:68:fe:dd:26:db:65:ce:bd: 7b:8d:f6:e9:48:f6:10:b7:20:a8:72:05:66:13:19:c2:f9:07: 57:bf:a3:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElWjrWYj+OK88pGIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDMyODEzMDA1MVoXDTI1MDYyNjEzMDA1MVowLzEtMCsGA1UEAxMk NTNhYzgxNmQtMzI3Zi00NDdjLThjYzEtY2E0YjI4YmI5NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+aK3Gpm0clAyD2c1EWbVcn8cCXVmfz1WBuW PmMKUARbt+X0OGSS7a2/gm2PCgTuSjf2+RCBhOlE+Wi2nYtyU+fZGjybolGgLWBK ywG2+OPyzlopoFf87lzNhOtHzR7ped8yRGiGSXozVha9t6ZAVa0XIbXrTjCHFtCC ywxuX2gkvwvXlil8QAt7I67aL/qBcTBwEJJLNOfV2jXFUyqmUMpISxsJOcf3qYu6 O7hW/+8lk3o41bpsVaxqXTZw7doNrzotbKqOQg++Icfrxop9VPt3iZ2ACBDgYEmt 5qOa8jUyfBjGvzGo535ZkVDOH0nfF+NNGR9IFLchOp8Z9m/+mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIQnSzzO0AfzcYWfr9BP3ae63myMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmRjZTUwMWYtODJlOS0z MGJlLTg5NGQtYTFiOWViZTBhNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRincMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYZ0/HY8RrQ56aReRIgrqXjWezdMTa86LdMFGmwlBYM0NW+KZW7oTCg qAplVQM3S3Yaq5pU1su4yVQUfB8vgkGiVwK4htUBsIG5/nZXVgLxQAb88d+kgnJc XAgRSewOmP5tgN8xPoTFLW4JYAYnmxxdnj/L7pOQDUNgqgHc3AGODe44QIxmosZ8 Sj2rt5Mm7mMF6lMIj9KBO0owcOI6xXbHt3vEe93jaF3nDgRoxpmn4SapKK1i+YkU zD3k5uwLG5mGbKPjO2zBu8+2akLfhiPYfYzaxgB8w0rcOzIEDEhfeRxo/t0m22XO vXuN9ulI9hC3IKhyBWYTGcL5B1e/ow0= -----END CERTIFICATE-----Generated at Tue Apr 15 05:04:47 2025 by rpki-client