$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa File: 0b94eb6e-546d-3206-8024-f1e432ee56f0.roa (raw, json) Hash identifier: DLii3q6GeY+JERm0tmKYEiLCza0j/cIAN/y8ME3UMd4= Subject key identifier: 1D:3A:C6:61:F1:2C:5A:6D:D7:6A:66:48:9A:64:12:40:63:48:21:44 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3916CA22959FFA096300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:39:16:ca:22:95:9f:fa:09:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=13227842-2b30-4bcc-9e55-baf4c11b3bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:57:4a:a9:98:82:5d:6f:6e:3c:47:e6:6a: 8e:4f:08:51:b9:da:0b:cd:21:eb:5a:c4:5a:46:2b: 6a:01:85:9b:d9:63:b7:73:80:95:81:14:15:77:4e: e4:4b:35:e7:77:54:28:79:db:2e:a2:63:58:39:87: 26:ee:78:44:cb:c0:05:20:bb:57:2b:4b:eb:a1:b4: aa:b4:9f:4d:29:f7:1b:8a:75:4c:5f:cd:bc:1a:a6: 8e:ef:d2:52:49:c9:ba:18:bd:ef:45:33:74:67:46: 7e:f0:4e:00:03:35:b9:63:01:5f:3c:08:07:00:a9: a9:5c:c0:93:37:5d:dc:5d:3e:ff:7f:ab:e1:80:31: 31:05:23:a9:50:a3:f4:fd:98:bd:88:c9:b4:14:c4: 0d:c5:00:a5:d2:44:e1:12:a7:60:5e:14:12:46:ed: 6b:97:16:8f:ca:f2:28:ea:9c:01:ad:3c:4e:b4:19: 04:0f:e9:48:86:3b:d3:46:4e:c2:7d:d4:ca:01:b7: d4:f8:fc:6d:1f:e0:0d:db:e5:59:40:83:cd:92:64: d7:fe:e7:c1:1e:34:09:3e:d3:05:50:21:df:fd:06: ca:75:06:af:07:a2:00:35:a0:7e:5c:c6:95:fc:2d: fd:19:a3:f1:fa:e2:d9:2c:ef:64:0f:c0:b8:d1:49: 40:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3A:C6:61:F1:2C:5A:6D:D7:6A:66:48:9A:64:12:40:63:48:21:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a3:7b:62:32:42:e8:17:f4:73:50:fc:86:d9:b7:53:38:5a: 06:28:4a:e7:68:80:68:aa:e9:26:22:5e:00:c8:9b:ce:8d:68: b8:3e:b1:69:e2:61:a5:f6:03:66:b5:0a:29:2d:09:6b:ef:4c: 2a:5f:d8:44:a5:97:44:0b:f9:57:f4:47:34:f2:11:a6:60:86: 61:7c:82:c6:73:ee:34:7f:d0:76:9b:bf:3e:81:c8:09:50:e7: e6:17:d0:5c:c6:73:31:8f:b8:8f:b4:44:7e:73:e9:39:48:55: 49:e7:a9:72:b9:33:aa:1d:38:46:1b:c2:92:2e:71:51:b4:dd: 43:79:5e:eb:9a:d4:4c:ef:14:53:df:c8:d6:98:e0:fa:ac:7f: 25:23:04:c6:4b:bf:cb:da:01:a1:e8:51:24:87:29:64:43:1a: 2c:4e:94:12:86:77:7f:e6:39:c9:77:91:13:20:16:db:1c:46: e7:68:9c:04:04:22:6c:d6:df:2c:ee:bb:3f:86:da:4c:ac:a4: fa:8a:c0:8b:0d:ca:7c:21:f1:92:88:a9:3c:7d:5f:cf:c9:ed: 9d:98:f2:fe:c5:d7:ca:5c:19:ef:ce:2e:76:d2:34:f8:ba:4c: ce:cc:2c:af:03:b4:09:32:c2:36:28:f9:cf:d5:cc:84:9a:d7: 1b:a6:5e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzkWyiKVn/oJYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTMyMjc4NDItMmIzMC00YmNjLTllNTUtYmFmNGMxMWIzYmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0btXSqmYgl1vbjxH5mqOTwhRudoLzSHrWsRa RitqAYWb2WO3c4CVgRQVd07kSzXnd1QoedsuomNYOYcm7nhEy8AFILtXK0vrobSq tJ9NKfcbinVMX828GqaO79JSScm6GL3vRTN0Z0Z+8E4AAzW5YwFfPAgHAKmpXMCT N13cXT7/f6vhgDExBSOpUKP0/Zi9iMm0FMQNxQCl0kThEqdgXhQSRu1rlxaPyvIo 6pwBrTxOtBkED+lIhjvTRk7CfdTKAbfU+PxtH+AN2+VZQIPNkmTX/ufBHjQJPtMF UCHf/QbKdQavB6IANaB+XMaV/C39GaPx+uLZLO9kD8C40UlAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB06xmHxLFpt12pmSJpkEkBjSCFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI5NGViNmUtNTQ2ZC0z MjA2LTgwMjQtZjFlNDMyZWU1NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGje2IyQugX9HNQ/IbZt1M4WgYoSudogGiq6SYiXgDIm86NaLg+sWni YaX2A2a1CiktCWvvTCpf2ESll0QL+Vf0RzTyEaZghmF8gsZz7jR/0Habvz6ByAlQ 5+YX0FzGczGPuI+0RH5z6TlIVUnnqXK5M6odOEYbwpIucVG03UN5Xuua1EzvFFPf yNaY4PqsfyUjBMZLv8vaAaHoUSSHKWRDGixOlBKGd3/mOcl3kRMgFtscRudonAQE ImzW3yzuuz+G2kyspPqKwIsNynwh8ZKIqTx9X8/J7Z2Y8v7F18pcGe/OLnbSNPi6 TM7MLK8DtAkywjYo+c/VzISa1xumXn8= -----END CERTIFICATE-----Generated at Mon Apr 28 19:18:26 2025 by rpki-client