$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa File: 05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa (raw, json) Hash identifier: NQDZWgvQ4XoG6PVy7UrKcPD2DWR2J+4ew5DcJ3tQ9dI= Subject key identifier: EC:72:B5:12:C1:C6:DC:6C:3A:B9:B5:03:EC:02:48:02:75:73:B8:C2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA99DE35FC138C790B8B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:99:de:35:fc:13:8c:79:0b:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f9646830-b0e9-4ac9-9d4d-7319d8b34c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:5c:b8:09:a3:94:8e:8d:e9:52:6a:7d:08: 09:e7:a0:a7:57:3c:43:46:38:f6:33:fd:52:08:27: b5:41:a9:fa:94:fb:99:cb:d0:bb:1d:9b:ec:2d:b1: 34:ca:6a:21:30:07:df:aa:6b:f2:a7:e8:be:d2:f9: 5f:c0:21:80:d9:03:ca:f5:ca:89:9f:87:5e:f0:a0: e2:ac:ab:fc:4e:fc:77:8c:c8:7d:30:41:73:c1:28: 03:a0:20:91:db:22:d6:0a:ce:d0:e1:f4:e8:90:4b: f4:d2:08:91:b0:b7:7b:20:0f:ee:8a:c6:d3:8b:10: 74:bf:fb:65:6c:45:6c:50:ac:c8:47:bd:ee:e8:2e: f3:cc:66:c0:36:cf:0f:46:67:04:0b:36:56:da:5a: 78:a9:5b:4b:f5:54:2b:af:e0:e5:5e:ad:5b:05:be: 86:5d:96:1e:81:53:63:90:d9:13:73:1c:bc:32:6e: bc:4b:24:b2:27:c5:dd:86:be:b2:3e:9b:68:c7:41: ea:cc:92:50:99:68:03:65:9b:c1:46:12:8e:12:94: 95:aa:87:cf:cb:db:a5:0b:86:97:aa:f4:65:56:64: b7:0a:ec:71:66:8f:77:3b:c0:a6:6a:af:0d:10:a8: f1:62:a1:bb:1d:a4:dd:79:8a:97:9c:87:0c:91:6b: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:72:B5:12:C1:C6:DC:6C:3A:B9:B5:03:EC:02:48:02:75:73:B8:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:b0:0a:9d:4f:82:4e:f6:40:08:b6:75:7a:03:bf:ec:9b:63: db:9b:5f:6a:5b:6f:56:32:45:a1:e0:42:0b:63:2c:cf:5b:62: da:c8:a5:d1:df:92:9e:96:39:9e:72:a8:75:0c:e0:84:5c:6c: 12:ee:e6:f5:96:f2:3f:7b:f0:70:fd:bc:ea:cf:ad:f9:e3:85: 54:21:9c:d3:7e:4d:e6:8d:0c:c5:22:fc:62:7f:b8:74:32:e3: ce:08:57:af:1c:be:64:23:a9:2e:fc:20:f0:21:e0:09:fc:41: 94:95:ea:09:99:4c:f4:c7:50:6e:e1:88:5b:0e:df:c6:b8:4e: 27:c4:c0:72:ab:50:19:f9:e3:3d:53:c5:da:1f:da:03:3d:9f: 04:c1:12:b2:94:de:6d:7b:aa:46:aa:11:72:0c:32:a3:2b:b8: fe:e8:99:bd:f5:d4:ed:1f:59:2e:4c:3f:99:da:69:c4:b1:94: e6:ff:c4:b7:a8:cd:37:1e:78:fb:75:e9:e0:23:1b:1d:95:48: 51:81:78:d2:c0:45:6d:cd:79:99:e9:d6:24:86:e9:ce:91:08: 60:1c:ba:99:50:af:03:96:0b:07:1d:d0:41:82:9b:5c:76:e7: 76:da:31:8e:63:e4:69:bf:8f:da:0f:11:68:67:a7:0e:2b:51: 3c:28:0f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupneNfwTjHkLi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Zjk2NDY4MzAtYjBlOS00YWM5LTlkNGQtNzMxOWQ4YjM0YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLFcuAmjlI6N6VJqfQgJ56CnVzxDRjj2M/1S CCe1Qan6lPuZy9C7HZvsLbE0ymohMAffqmvyp+i+0vlfwCGA2QPK9cqJn4de8KDi rKv8Tvx3jMh9MEFzwSgDoCCR2yLWCs7Q4fTokEv00giRsLd7IA/uisbTixB0v/tl bEVsUKzIR73u6C7zzGbANs8PRmcECzZW2lp4qVtL9VQrr+DlXq1bBb6GXZYegVNj kNkTcxy8Mm68SySyJ8Xdhr6yPptox0HqzJJQmWgDZZvBRhKOEpSVqofPy9ulC4aX qvRlVmS3CuxxZo93O8Cmaq8NEKjxYqG7HaTdeYqXnIcMkWvgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxytRLBxtxsOrm1A+wCSAJ1c7jCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDVjNmUxNDUtN2EwNC0z NWQ1LWI4YWEtYmViZjk0YWUwMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMuwCp1Pgk72QAi2dXoDv+ybY9ubX2pbb1YyRaHgQgtjLM9bYtrIpdHf kp6WOZ5yqHUM4IRcbBLu5vWW8j978HD9vOrPrfnjhVQhnNN+TeaNDMUi/GJ/uHQy 484IV68cvmQjqS78IPAh4An8QZSV6gmZTPTHUG7hiFsO38a4TifEwHKrUBn54z1T xdof2gM9nwTBErKU3m17qkaqEXIMMqMruP7omb311O0fWS5MP5naacSxlOb/xLeo zTceePt16eAjGx2VSFGBeNLARW3NeZnp1iSG6c6RCGAcuplQrwOWCwcd0EGCm1x2 53baMY5j5Gm/j9oPEWhnpw4rUTwoD5c= -----END CERTIFICATE-----Generated at Mon Apr 28 02:40:58 2025 by rpki-client