$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03e1436d-39f2-39db-98a6-a5d6583cbf16.roa File: 03e1436d-39f2-39db-98a6-a5d6583cbf16.roa (raw, json) Hash identifier: gIYPPj5/DjXjIuLeTJBtQP9EVxsVoM9kT7mQTaqyOko= Subject key identifier: AF:E8:B4:F5:5F:62:DF:5A:2D:56:90:CC:22:C1:01:90:CB:CE:C5:A9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9809D4B38EAD46451200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03e1436d-39f2-39db-98a6-a5d6583cbf16.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:98:09:d4:b3:8e:ad:46:45:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=261587d9-813d-4322-82b2-1bae861a44d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:9f:b5:2e:e9:3e:73:4c:26:bf:cf:21:b8: 86:66:2f:c1:2e:cf:15:ae:35:3f:99:6f:7b:71:87: 24:13:17:f9:fa:61:28:8d:f2:f3:90:58:8a:2d:c5: 75:b5:04:51:0c:ba:1e:9b:38:e7:7f:db:12:dd:b6: cc:21:90:63:86:f7:13:76:fe:06:fa:f0:ee:d6:d6: 69:c7:71:52:5f:ff:58:8b:da:05:9f:6b:de:76:ab: 0a:fb:83:d6:70:f7:2a:4e:47:8a:65:ba:bf:49:0f: 9c:24:e5:47:16:db:e2:68:98:12:a6:00:5f:69:fa: 5a:5c:6e:fa:09:a8:a7:89:08:8b:ab:36:e7:42:36: c0:fe:72:ea:a0:5c:0e:6b:fc:36:3f:a7:f8:9f:e2: ff:18:83:fd:8b:aa:ef:4e:e6:20:f2:e3:a0:25:05: 6c:b7:83:54:11:1e:35:a4:e4:81:15:1e:77:9c:ba: 3f:69:e4:2f:f6:a2:c2:d0:26:9d:e9:29:91:4a:2c: d3:df:ed:a5:c0:c2:13:27:3d:94:e9:51:82:7d:ba: 21:45:ec:90:9c:41:ea:6f:b0:d5:fa:d6:99:b6:ad: fc:c9:fb:d7:b1:31:7f:74:f3:15:d0:a7:d9:6e:94: fa:2e:72:a3:36:11:03:b5:a6:56:03:40:00:09:fc: 44:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E8:B4:F5:5F:62:DF:5A:2D:56:90:CC:22:C1:01:90:CB:CE:C5:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03e1436d-39f2-39db-98a6-a5d6583cbf16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:36:08:a7:73:a1:e3:2d:f5:3b:d9:29:67:7e:ab:14:9b:63: 5b:f9:ef:ba:8e:46:10:5e:91:74:16:63:22:8d:31:b0:0e:a1: d6:e6:cd:ed:55:85:03:d5:64:ce:a4:a9:66:b8:8f:a2:91:01: 92:62:9d:5f:e7:92:b6:b9:18:a6:0d:ba:a1:46:66:67:01:eb: ad:4b:de:9a:ba:3f:87:1f:5a:0d:a0:59:70:f2:25:e4:79:56: ff:87:ce:5f:fd:08:4d:92:e5:58:46:fd:e6:67:4f:7e:82:c8: 32:68:05:ee:f7:4d:0c:51:10:9b:bd:49:41:2d:f0:50:8a:22: bc:d0:73:e6:03:69:5c:78:24:d5:36:f9:5e:54:79:d8:4c:bf: 0d:57:00:92:fa:87:4a:a1:bb:79:04:5a:fd:41:24:8f:aa:8c: 4e:c6:d9:3b:76:98:e6:e4:9a:56:ad:5a:5f:19:35:dc:88:1d: eb:e2:cf:31:77:74:1a:28:e5:a1:45:35:22:1b:92:51:64:c8: 18:b7:33:80:6f:f0:69:4d:95:00:b9:a0:b6:3d:32:ff:a2:4d: fd:58:61:5b:2d:93:d2:da:6d:63:65:72:cd:3b:86:26:49:ff: 32:b0:b5:56:14:a2:d9:15:24:b8:61:29:55:71:3a:c7:6f:f0: 08:8e:31:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupgJ1LOOrUZFEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjYxNTg3ZDktODEzZC00MzIyLTgyYjItMWJhZTg2MWE0NGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfqftS7pPnNMJr/PIbiGZi/BLs8VrjU/mW97 cYckExf5+mEojfLzkFiKLcV1tQRRDLoemzjnf9sS3bbMIZBjhvcTdv4G+vDu1tZp x3FSX/9Yi9oFn2vedqsK+4PWcPcqTkeKZbq/SQ+cJOVHFtviaJgSpgBfafpaXG76 CainiQiLqzbnQjbA/nLqoFwOa/w2P6f4n+L/GIP9i6rvTuYg8uOgJQVst4NUER41 pOSBFR53nLo/aeQv9qLC0Cad6SmRSizT3+2lwMITJz2U6VGCfbohReyQnEHqb7DV +taZtq38yfvXsTF/dPMV0KfZbpT6LnKjNhEDtaZWA0AACfxEIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/otPVfYt9aLVaQzCLBAZDLzsWpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDNlMTQzNmQtMzlmMi0z OWRiLTk4YTYtYTVkNjU4M2NiZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI82CKdzoeMt9TvZKWd+qxSbY1v577qORhBekXQWYyKNMbAOodbmze1V hQPVZM6kqWa4j6KRAZJinV/nkra5GKYNuqFGZmcB661L3pq6P4cfWg2gWXDyJeR5 Vv+Hzl/9CE2S5VhG/eZnT36CyDJoBe73TQxREJu9SUEt8FCKIrzQc+YDaVx4JNU2 +V5UedhMvw1XAJL6h0qhu3kEWv1BJI+qjE7G2Tt2mObkmlatWl8ZNdyIHevizzF3 dBoo5aFFNSIbklFkyBi3M4Bv8GlNlQC5oLY9Mv+iTf1YYVstk9LabWNlcs07hiZJ /zKwtVYUotkVJLhhKVVxOsdv8AiOMeE= -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:32 2025 by rpki-client