$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa File: 17e38567-d7a8-3785-88e8-65dc6ba74930.roa (raw, json) Hash identifier: fA2YrmNJJE/xM141l4bhtmj+N/7yP5jR/4s+HCgevOw= Subject key identifier: 4D:1C:CD:B0:11:10:1C:81:F4:4D:3B:EF:E0:85:93:91:EE:86:3A:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B3EA44655B80BCF3680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:3e:a4:46:55:b8:0b:cf:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6c5b1bce-c892-479e-9266-e7f207680440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ab:f6:9f:2f:38:50:db:9c:46:00:cb:0a:ec: e6:5b:f5:41:59:a0:34:7a:40:e0:19:bf:71:d3:46: 46:02:05:a0:08:5b:b8:65:2c:91:08:2a:1d:74:8b: 0b:50:b5:14:cf:9c:9d:01:74:f8:e7:03:cc:5a:ee: e7:5e:3a:9f:13:52:a4:7b:d1:53:80:76:1b:ec:f5: 0b:9b:d3:e4:07:06:cc:e0:f7:4a:f7:9e:7d:60:4e: 20:b2:b2:90:df:2f:1b:f0:86:16:83:8c:10:85:a3: 65:21:e6:c2:c2:ed:33:74:b3:43:d1:44:26:6d:6c: fb:ec:79:69:01:cd:47:66:6c:03:a4:aa:19:b7:2c: ee:d0:2c:28:2a:08:6c:d6:3e:28:4a:9e:19:91:f4: b7:4d:2b:b5:2f:40:69:82:6e:5e:a3:76:e2:43:87: a5:9c:6b:47:50:eb:18:5c:2d:2a:ca:21:0b:2a:dc: be:38:d1:a5:23:8d:17:2f:10:fb:f9:85:3d:ce:2d: 10:57:10:bf:8b:b0:62:fa:e3:58:aa:b3:a4:4f:a2: bd:f2:71:40:e7:2d:8a:40:eb:e6:7a:09:04:5f:c6: 28:f2:5a:c1:c5:0f:66:eb:d7:de:a6:1e:1e:2b:95: 3f:06:62:db:64:1c:f1:ae:bb:75:dc:2d:33:9d:db: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1C:CD:B0:11:10:1C:81:F4:4D:3B:EF:E0:85:93:91:EE:86:3A:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:05:7f:c0:4c:55:69:9f:90:03:a2:51:f6:52:ef:4c:67:70: c0:e9:e3:4c:bb:65:8d:51:40:a6:e3:44:ea:bc:31:7b:31:d1: f3:64:9e:92:24:7c:df:4c:b0:02:de:c0:61:6f:61:a5:50:cd: b8:a3:99:24:d9:f1:a5:81:7b:9f:c2:ad:9d:2d:a8:74:8f:27: de:19:24:21:11:1a:aa:4e:dd:1c:24:48:b0:55:5b:e8:61:f0: 7e:4b:e1:ff:15:cd:90:42:b0:2b:0a:22:63:81:92:6c:cc:f8: 90:42:15:6d:9c:80:31:ac:23:da:c7:29:f0:4c:0c:9b:13:b6: c3:c9:ee:ca:c8:85:39:92:2f:aa:eb:6e:7c:74:ae:54:83:d5: 91:cf:14:b2:b3:dc:1b:4b:3d:20:80:5a:38:ac:1a:4f:d6:c9: 60:62:10:ed:59:d1:01:a3:6b:16:8f:47:db:6d:c2:97:03:54: fa:34:01:fb:2c:61:ef:cc:d1:63:5e:25:7b:4b:8e:1b:96:85: 92:be:75:ec:3f:30:95:b0:a5:6f:d8:ac:2c:e0:b1:e4:1b:c4: 3c:45:3d:b2:7e:8f:b6:e5:45:d7:69:f9:f7:df:e6:6c:6c:f0: f5:58:84:50:a1:bb:f3:f3:06:df:c9:83:6e:a8:51:df:85:35: 3e:b4:dd:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzs+pEZVuAvPNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmM1YjFiY2UtYzg5Mi00NzllLTkyNjYtZTdmMjA3NjgwNDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqv2ny84UNucRgDLCuzmW/VBWaA0ekDgGb9x 00ZGAgWgCFu4ZSyRCCoddIsLULUUz5ydAXT45wPMWu7nXjqfE1Kke9FTgHYb7PUL m9PkBwbM4PdK9559YE4gsrKQ3y8b8IYWg4wQhaNlIebCwu0zdLND0UQmbWz77Hlp Ac1HZmwDpKoZtyzu0CwoKghs1j4oSp4ZkfS3TSu1L0Bpgm5eo3biQ4elnGtHUOsY XC0qyiELKty+ONGlI40XLxD7+YU9zi0QVxC/i7Bi+uNYqrOkT6K98nFA5y2KQOvm egkEX8Yo8lrBxQ9m69feph4eK5U/BmLbZBzxrrt13C0zndtdbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0czbAREByB9E077+CFk5HuhjoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTdlMzg1NjctZDdhOC0z Nzg1LTg4ZTgtNjVkYzZiYTc0OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIFf8BMVWmfkAOiUfZS70xncMDp40y7ZY1RQKbjROq8MXsx0fNknpIk fN9MsALewGFvYaVQzbijmSTZ8aWBe5/CrZ0tqHSPJ94ZJCERGqpO3RwkSLBVW+hh 8H5L4f8VzZBCsCsKImOBkmzM+JBCFW2cgDGsI9rHKfBMDJsTtsPJ7srIhTmSL6rr bnx0rlSD1ZHPFLKz3BtLPSCAWjisGk/WyWBiEO1Z0QGjaxaPR9ttwpcDVPo0Afss Ye/M0WNeJXtLjhuWhZK+dew/MJWwpW/YrCzgseQbxDxFPbJ+j7blRddp+fff5mxs 8PVYhFChu/PzBt/Jg26oUd+FNT603fE= -----END CERTIFICATE-----Generated at Sun Apr 27 10:36:25 2025 by rpki-client