$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa File: 083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa (raw, json) Hash identifier: optPtRheS5coJuZoBZlqg1dC0UQDadhGJTCjKMezw5o= Subject key identifier: 18:84:79:E4:17:5D:1C:E8:E4:8B:DA:D5:98:95:0B:22:BC:98:66:83 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA94810F20AE105D5A4C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:94:81:0f:20:ae:10:5d:5a:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=180541c3-ef58-486f-8cc7-31ee0863ba81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9e:e6:4e:2e:08:38:56:59:4d:7d:18:9a:d4: bc:fa:ef:ce:91:41:ea:23:b7:30:c6:b0:5b:b7:c5: f9:d9:9f:a6:cf:15:8c:75:58:a5:53:a7:ab:af:ab: 6e:f1:19:52:f5:66:06:7d:ff:fa:4c:5f:3a:30:63: 41:a4:6c:6f:b0:6b:ff:88:73:e7:4e:4a:79:47:12: b8:e8:a7:2b:26:a9:a5:3b:b3:89:6d:9f:93:9b:ba: cd:94:f4:48:52:7e:33:7b:fb:e3:af:f5:04:a9:da: 20:22:c2:8c:58:98:da:43:55:63:ff:00:af:b3:80: ff:91:f2:1f:40:3a:47:73:60:5d:43:f3:af:8d:f1: fb:72:7b:64:24:cd:02:f0:41:7e:77:3a:88:db:a2: 34:6c:ea:c7:7d:ac:cf:bd:82:cd:39:79:34:6e:52: c6:ac:f2:07:e0:ed:c6:ae:39:8b:9e:ba:09:18:74: 54:a2:41:3e:19:bc:59:a4:8d:56:1f:9e:c8:5d:4d: 8b:b0:4d:e4:9d:4a:8e:b1:83:14:78:d7:74:ed:ce: 80:31:d4:74:c1:1a:09:40:72:be:b5:d1:1b:9d:e3: 3c:48:db:85:4a:10:01:eb:bb:a5:49:ee:72:e6:f6: e0:a0:26:9c:41:b5:26:5e:89:21:bf:78:45:b3:a7: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:84:79:E4:17:5D:1C:E8:E4:8B:DA:D5:98:95:0B:22:BC:98:66:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:17:40:55:bc:27:91:b9:16:7b:f8:6f:37:ac:f9:ff:9b:9d: c1:02:bf:49:44:1b:c0:57:02:7a:03:dd:5b:c9:8b:0e:d0:7d: 5b:a6:63:84:1c:8c:b2:4a:c8:d2:5e:cf:3b:b5:f7:b1:03:cc: 3f:c0:d9:f8:a2:9c:08:05:a8:b0:31:a2:a8:67:16:cc:51:dd: d4:35:93:9f:e0:b9:66:12:3b:85:4a:6e:7a:ec:90:3f:e7:1e: 18:6f:77:7e:e1:bd:d4:21:34:19:55:61:b3:34:59:f5:72:9b: 05:3e:4f:ed:31:44:94:6a:a2:ae:ed:3d:bf:81:d3:c6:f8:76: db:d0:17:09:fb:3c:47:5d:84:6a:06:60:24:76:22:34:4c:a9: ed:ff:8c:e6:75:37:32:9a:3d:72:ce:5d:e2:01:36:95:d6:f0: 3f:d6:f5:ec:0d:a9:bf:a6:da:ef:5d:55:06:e9:f5:9f:4a:fa: 32:be:9e:e9:63:2b:2e:49:9e:f4:41:21:c2:d6:1b:57:e7:07: 4d:be:c5:5b:49:0e:01:84:57:e8:da:97:2f:17:ca:db:9a:87: 59:e1:6b:f8:35:97:94:c3:2a:b3:cf:77:47:a7:9e:40:35:a6: de:8d:03:1a:b2:1b:48:1a:c8:73:af:51:d4:5a:63:9b:23:7b: 04:ba:8e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupSBDyCuEF1aTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTgwNTQxYzMtZWY1OC00ODZmLThjYzctMzFlZTA4NjNiYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg57mTi4IOFZZTX0YmtS8+u/OkUHqI7cwxrBb t8X52Z+mzxWMdVilU6err6tu8RlS9WYGff/6TF86MGNBpGxvsGv/iHPnTkp5RxK4 6KcrJqmlO7OJbZ+Tm7rNlPRIUn4ze/vjr/UEqdogIsKMWJjaQ1Vj/wCvs4D/kfIf QDpHc2BdQ/OvjfH7cntkJM0C8EF+dzqI26I0bOrHfazPvYLNOXk0blLGrPIH4O3G rjmLnroJGHRUokE+GbxZpI1WH57IXU2LsE3knUqOsYMUeNd07c6AMdR0wRoJQHK+ tdEbneM8SNuFShAB67ulSe5y5vbgoCacQbUmXokhv3hFs6ffnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiEeeQXXRzo5Iva1ZiVCyK8mGaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDgzYzEwZjItMWFkOS0z NDkxLTlhMzUtNGNmMWEwYjI1ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8XQFW8J5G5Fnv4bzes+f+bncECv0lEG8BXAnoD3VvJiw7QfVumY4Qc jLJKyNJezzu197EDzD/A2fiinAgFqLAxoqhnFsxR3dQ1k5/guWYSO4VKbnrskD/n Hhhvd37hvdQhNBlVYbM0WfVymwU+T+0xRJRqoq7tPb+B08b4dtvQFwn7PEddhGoG YCR2IjRMqe3/jOZ1NzKaPXLOXeIBNpXW8D/W9ewNqb+m2u9dVQbp9Z9K+jK+nulj Ky5JnvRBIcLWG1fnB02+xVtJDgGEV+jaly8Xytuah1nha/g1l5TDKrPPd0ennkA1 pt6NAxqyG0gayHOvUdRaY5sjewS6jrY= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:43 2025 by rpki-client