$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e96f3c69-9d2d-378a-ab24-bc68e03c3043.roa File: e96f3c69-9d2d-378a-ab24-bc68e03c3043.roa (raw, json) Hash identifier: miHqMb/otOh6M5Ombkh8PW02pZ9LP6R8LGHHHXE8utI= Subject key identifier: 76:64:DD:31:0E:7A:1F:68:19:72:CA:8F:D8:CF:22:1F:0A:8D:23:90 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE5C061FC5E2D02BE1A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e96f3c69-9d2d-378a-ab24-bc68e03c3043.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 70.41.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e5:c0:61:fc:5e:2d:02:be:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=731a5cbe-472f-4bea-9a55-d51bd2b0e064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:0c:c8:86:93:82:c9:bf:6c:8f:c5:78:5d: cc:4c:d0:d3:e2:1e:0d:85:45:88:0b:01:0a:40:0a: f8:fe:0e:c4:73:5f:6e:c8:09:59:7c:7f:ff:2a:ca: 5c:fe:95:ee:7e:36:28:f0:df:d3:d2:6b:56:37:93: b5:3d:b8:39:43:f8:3f:6e:c9:fa:a1:5d:4b:28:09: 91:34:df:48:5f:6c:a7:be:39:33:6e:ea:39:f3:c6: 76:bd:09:54:56:a3:5f:c6:f1:a4:20:90:25:f2:52: 09:a4:4c:6c:af:55:74:85:73:a2:46:0e:5d:3b:67: bb:e4:8b:e5:67:c5:a7:cd:3e:39:02:93:59:b8:69: a1:74:65:4d:06:59:98:9d:d9:59:a2:c5:ed:5a:45: 1c:9c:da:39:f7:cb:ef:34:9a:90:85:87:54:38:9a: 26:40:56:42:39:52:c2:31:ee:03:49:1d:cb:b5:6a: 87:8c:33:86:f3:98:b3:fd:32:4a:4f:dd:03:cd:da: e2:94:bc:e5:f7:a2:fb:d1:af:d1:f4:68:13:59:15: 16:21:65:16:89:90:7c:a2:56:08:52:7d:db:5d:ee: 0d:37:ef:f6:ba:fb:46:73:8c:74:59:7f:db:57:b2: 30:e6:50:10:3a:7e:0d:8e:50:04:99:12:a4:00:36: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:64:DD:31:0E:7A:1F:68:19:72:CA:8F:D8:CF:22:1F:0A:8D:23:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e96f3c69-9d2d-378a-ab24-bc68e03c3043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:05:71:10:3e:10:3c:fb:29:1c:e8:7a:6f:3f:44:74:fd:c4: 84:5e:8c:f7:12:35:45:85:0f:12:27:f5:a1:3c:32:39:02:9c: 34:f5:af:a8:b6:96:d0:e9:3d:7d:9f:bb:1d:79:31:55:b2:63: 6f:98:9a:b8:58:07:ce:61:fc:dd:fb:73:db:cb:12:84:a7:9d: ac:4a:a1:38:cb:42:53:e4:30:bf:91:d8:ed:ed:fe:47:65:ab: cb:60:16:df:8f:26:59:1f:fa:1c:c6:db:8b:90:a2:ff:8e:a6: ce:98:87:bf:d2:80:1c:54:14:fc:ca:b7:35:0b:47:cb:a6:f4: 7b:f6:1e:c7:b5:e0:a2:7a:4a:69:33:95:08:66:16:6d:e6:73: 14:d8:13:fc:48:1c:e7:6b:9a:2f:f5:16:23:a6:dd:29:1a:b2: 18:b1:44:94:b1:ee:31:e0:a0:18:ff:e7:a1:0d:73:de:6c:5c: f1:c8:4c:95:9c:ac:4a:64:cb:dc:dc:d8:b5:0a:b7:26:6d:8f: 48:24:b6:a5:57:f0:7e:a4:99:0f:8d:61:3d:cb:c8:c9:64:34: 37:3b:41:4e:46:4f:c5:c3:b7:db:d6:48:f3:f5:6f:6e:e2:3c: 7d:d1:2e:39:19:56:49:3d:67:f7:80:5f:c8:e4:c4:83:e3:05: 1c:39:f4:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuXAYfxeLQK+GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzMxYTVjYmUtNDcyZi00YmVhLTlhNTUtZDUxYmQyYjBlMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJQMyIaTgsm/bI/FeF3MTNDT4h4NhUWICwEK QAr4/g7Ec19uyAlZfH//Kspc/pXufjYo8N/T0mtWN5O1Pbg5Q/g/bsn6oV1LKAmR NN9IX2ynvjkzbuo588Z2vQlUVqNfxvGkIJAl8lIJpExsr1V0hXOiRg5dO2e75Ivl Z8WnzT45ApNZuGmhdGVNBlmYndlZosXtWkUcnNo598vvNJqQhYdUOJomQFZCOVLC Me4DSR3LtWqHjDOG85iz/TJKT90DzdrilLzl96L70a/R9GgTWRUWIWUWiZB8olYI Un3bXe4NN+/2uvtGc4x0WX/bV7Iw5lAQOn4NjlAEmRKkADamBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZk3TEOeh9oGXLKj9jPIh8KjSOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTk2ZjNjNjktOWQyZC0z NzhhLWFiMjQtYmM2OGUwM2MzMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARintMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYFcRA+EDz7KRzoem8/RHT9xIRejPcSNUWFDxIn9aE8MjkCnDT1r6i2 ltDpPX2fux15MVWyY2+YmrhYB85h/N37c9vLEoSnnaxKoTjLQlPkML+R2O3t/kdl q8tgFt+PJlkf+hzG24uQov+Ops6Yh7/SgBxUFPzKtzULR8um9Hv2Hse14KJ6Smkz lQhmFm3mcxTYE/xIHOdrmi/1FiOm3SkashixRJSx7jHgoBj/56ENc95sXPHITJWc rEpky9zc2LUKtyZtj0gktqVX8H6kmQ+NYT3LyMlkNDc7QU5GT8XDt9vWSPP1b27i PH3RLjkZVkk9Z/eAX8jkxIPjBRw59EE= -----END CERTIFICATE-----Generated at Sat Jun 7 04:21:55 2025 by rpki-client