$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c4f5c2f-f2e5-3b4a-8fe5-241c89b36112.roa File: 0c4f5c2f-f2e5-3b4a-8fe5-241c89b36112.roa (raw, json) Hash identifier: M3w2MnXyrCTLhEUoc9ia9G+YtvAyB4UkDxuyBydntCA= Subject key identifier: 45:F2:9B:EE:BF:FD:24:56:DA:50:17:57:2A:AC:B3:FE:54:30:D7:A4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3CBC3EE1136B051FA660 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c4f5c2f-f2e5-3b4a-8fe5-241c89b36112.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3c:bc:3e:e1:13:6b:05:1f:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5ccc4f1b-0355-45c9-aa5c-1a510ce669a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:b6:b1:73:68:25:9c:67:e3:46:68:2b:0d: aa:3c:5a:14:2d:e4:d0:c3:53:59:d6:49:40:ec:ce: 11:88:45:2c:f6:e3:fa:e4:11:4a:ed:e2:1a:3b:5d: 36:f0:c2:bb:da:c9:44:ba:bd:25:78:8e:6a:7e:6c: dd:6a:ad:ae:dd:7f:f3:63:76:ce:8d:cf:d4:8f:d0: 7e:1b:65:5b:ef:cf:98:1c:11:f5:64:a7:f9:60:76: 2d:91:81:0e:90:eb:45:4e:74:24:fa:90:6f:36:96: 3e:9c:8e:67:e5:5a:a4:93:1c:42:62:a8:da:0d:a2: ec:7f:3a:0d:77:85:20:7a:df:ef:4c:97:ac:e2:87: 6e:30:64:4f:14:be:8d:c8:e9:c4:39:30:80:ae:ee: e3:48:2a:f4:52:c4:8d:b3:77:a5:23:12:ec:88:9b: 54:7c:44:81:77:a6:24:74:36:10:64:0d:a6:46:6b: f4:a2:36:59:6c:ba:16:0e:b1:8e:9e:a9:8d:72:89: 01:89:ec:7a:b1:0d:35:f7:17:0e:3f:c7:fe:4f:bd: 92:88:b9:74:89:48:08:c9:0c:34:69:4e:3f:40:98: b1:8c:5c:84:3d:07:4a:f7:54:d6:0a:81:f2:88:62: 59:44:3a:9e:e8:4e:f7:e4:e9:aa:af:3c:7e:4e:56: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F2:9B:EE:BF:FD:24:56:DA:50:17:57:2A:AC:B3:FE:54:30:D7:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c4f5c2f-f2e5-3b4a-8fe5-241c89b36112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cf:cb:59:7b:65:fb:ab:56:0b:4d:9b:3f:18:91:64:77:56: d1:3d:81:aa:1f:b7:ce:aa:5f:9e:a3:85:1c:f5:5d:88:08:b0: 76:9b:cd:c2:1e:9f:36:86:d7:92:b4:bb:c6:11:9a:5e:1f:a7: e5:1b:1c:db:a3:70:b9:be:16:7a:4c:29:12:11:ad:9d:57:b7: 3c:63:4b:76:e1:bd:17:aa:9f:ee:34:38:bd:c3:07:bd:ac:c0: ba:f7:1a:6b:36:41:4c:eb:43:e8:cf:4b:27:37:58:c1:de:a5: ab:bb:4e:05:b5:fd:0c:64:7e:29:8d:6e:34:82:f4:d5:a7:c2: c2:d5:c7:7e:33:a4:3a:2a:fe:37:af:d6:27:b5:63:c1:c7:1e: 9d:82:6a:12:20:8d:1b:5a:94:ab:6c:a7:48:e3:da:37:a8:c3: a2:b8:0e:20:46:21:7c:ef:64:a0:10:b6:a0:ba:e5:79:28:38: bc:71:b4:99:d7:28:67:f4:53:88:3a:ac:f0:fa:6c:06:b6:04: 41:82:8f:4b:8c:a1:28:ca:92:b0:7a:c2:3d:ee:23:e5:2a:63: 98:c8:9c:8b:84:79:f8:c4:d3:73:15:b7:75:b8:e3:d6:0f:cc: 0a:f4:88:55:64:66:f2:58:0b:3c:b5:01:4d:af:3e:c6:f4:4d: e1:d1:4f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzy8PuETawUfpmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWNjYzRmMWItMDM1NS00NWM5LWFhNWMtMWE1MTBjZTY2OWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuC2sXNoJZxn40ZoKw2qPFoULeTQw1NZ1klA 7M4RiEUs9uP65BFK7eIaO1028MK72slEur0leI5qfmzdaq2u3X/zY3bOjc/Uj9B+ G2Vb78+YHBH1ZKf5YHYtkYEOkOtFTnQk+pBvNpY+nI5n5VqkkxxCYqjaDaLsfzoN d4Uget/vTJes4oduMGRPFL6NyOnEOTCAru7jSCr0UsSNs3elIxLsiJtUfESBd6Yk dDYQZA2mRmv0ojZZbLoWDrGOnqmNcokBiex6sQ019xcOP8f+T72SiLl0iUgIyQw0 aU4/QJixjFyEPQdK91TWCoHyiGJZRDqe6E735Omqrzx+TlZckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXym+6//SRW2lAXVyqss/5UMNekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGM0ZjVjMmYtZjJlNS0z YjRhLThmZTUtMjQxYzg5YjM2MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPO7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfPy1l7ZfurVgtNmz8YkWR3VtE9gaoft86qX56jhRz1XYgIsHabzcIe nzaG15K0u8YRml4fp+UbHNujcLm+FnpMKRIRrZ1XtzxjS3bhvReqn+40OL3DB72s wLr3Gms2QUzrQ+jPSyc3WMHepau7TgW1/QxkfimNbjSC9NWnwsLVx34zpDoq/jev 1ie1Y8HHHp2CahIgjRtalKtsp0jj2jeow6K4DiBGIXzvZKAQtqC65XkoOLxxtJnX KGf0U4g6rPD6bAa2BEGCj0uMoSjKkrB6wj3uI+UqY5jInIuEefjE03MVt3W449YP zAr0iFVkZvJYCzy1AU2vPsb0TeHRT7Y= -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:36 2025 by rpki-client