$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17f4de36-5a5d-3582-85d4-0fc224e2765c.roa File: 17f4de36-5a5d-3582-85d4-0fc224e2765c.roa (raw, json) Hash identifier: 61HoiFrlckJ9so9yEoAbnfqeTCnmsiRDA2fsXxk3ExM= Subject key identifier: 45:9E:0E:00:20:FC:77:29:E8:52:36:2B:90:42:DA:A3:E6:E5:0A:1E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB35421AD25C8A1FE52BC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17f4de36-5a5d-3582-85d4-0fc224e2765c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:35:42:1a:d2:5c:8a:1f:e5:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a2703031-eacf-4f04-b872-dba9cc5f8078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:72:52:fc:e6:01:98:b6:3c:f2:b7:3c:ec: 31:20:15:38:9f:b9:e3:0a:53:77:1d:f1:0c:c0:32: bf:0c:29:c0:f2:5d:28:6e:3d:9f:78:49:7e:84:be: 95:c1:e6:ce:a0:75:0d:c9:d0:f5:a1:96:33:7b:e0: 81:4c:28:e4:31:53:dc:40:fc:72:2f:cc:21:64:83: 62:1c:83:44:03:5e:2e:c9:6b:46:41:a6:ef:8c:4b: 7d:81:16:a0:cb:ec:15:96:58:0c:e8:5f:fb:ce:d2: 06:fc:a0:27:ba:3a:5b:42:5c:fe:52:39:d5:ce:ab: 15:70:71:d6:a2:53:5c:3c:0a:b8:1d:26:73:48:bb: ab:3e:e0:60:d9:99:56:f6:e5:8a:40:bd:68:0d:2a: 49:68:fa:1a:6b:01:0d:e0:85:e1:c7:58:20:d0:24: 8a:b9:94:ab:16:f7:55:46:d0:d4:d8:d8:c8:44:1d: c4:e6:75:7b:f7:c5:da:1c:cd:fb:f6:ee:f4:f1:57: dc:a6:2f:44:7e:3c:bc:5d:3b:5e:7e:b5:9d:3f:99: fd:19:08:07:3e:30:1b:01:4d:e7:77:94:c1:60:47: 5e:5e:00:7d:14:5f:79:40:3c:c0:31:0d:f1:f6:d7: 54:ff:a8:9d:5f:5c:83:9c:1d:15:a3:e7:94:93:7d: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9E:0E:00:20:FC:77:29:E8:52:36:2B:90:42:DA:A3:E6:E5:0A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17f4de36-5a5d-3582-85d4-0fc224e2765c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:24:f8:58:a3:74:5a:91:51:90:fa:2d:b2:ce:c3:f5:90:1a: 33:82:03:f6:b2:4b:51:bb:00:0f:86:0c:f5:dc:dd:aa:35:94: 37:0c:e4:e2:61:af:29:f8:17:b6:60:cc:23:e8:96:2e:6d:6e: 9d:33:c3:82:a4:23:3d:81:23:1c:ef:e5:e7:8f:91:f5:55:8b: b0:99:1a:74:49:d9:f1:0e:f3:6e:e3:c9:4e:0c:83:3d:64:50: d6:68:10:76:83:ee:5c:17:8f:d9:59:b4:07:d6:a2:f8:b5:31: 54:f0:40:94:7e:21:28:77:96:57:31:3f:90:ec:6b:4c:18:ab: a4:35:40:7b:12:2c:1d:01:0d:48:eb:22:82:e0:4b:0f:ad:c0: c0:9d:57:80:8c:57:50:79:49:f4:5c:e1:3c:a0:05:9f:67:d1: 54:31:b0:cb:3c:57:05:ad:3c:33:6d:c7:e8:5f:d1:27:dd:c4: 3c:14:60:60:29:ae:c7:a8:f9:4a:ee:23:8e:bc:d2:36:d1:b7: 84:89:01:42:ee:46:de:e6:cb:4a:3d:cf:d1:88:e6:9f:17:08: 30:02:bf:4c:30:25:32:a6:da:0c:9d:94:41:e7:40:7d:6b:91: 82:b7:25:f7:0c:8c:82:4c:fd:16:94:47:ee:c8:61:28:49:89: 4c:0b:2f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzVCGtJcih/lK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTI3MDMwMzEtZWFjZi00ZjA0LWI4NzItZGJhOWNjNWY4MDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxRyUvzmAZi2PPK3POwxIBU4n7njClN3HfEM wDK/DCnA8l0obj2feEl+hL6VwebOoHUNydD1oZYze+CBTCjkMVPcQPxyL8whZINi HINEA14uyWtGQabvjEt9gRagy+wVllgM6F/7ztIG/KAnujpbQlz+UjnVzqsVcHHW olNcPAq4HSZzSLurPuBg2ZlW9uWKQL1oDSpJaPoaawEN4IXhx1gg0CSKuZSrFvdV RtDU2NjIRB3E5nV798XaHM379u708Vfcpi9Efjy8XTtefrWdP5n9GQgHPjAbAU3n d5TBYEdeXgB9FF95QDzAMQ3x9tdU/6idX1yDnB0Vo+eUk305UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWeDgAg/Hcp6FI2K5BC2qPm5QoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTdmNGRlMzYtNWE1ZC0z NTgyLTg1ZDQtMGZjMjI0ZTI3NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANAk+FijdFqRUZD6LbLOw/WQGjOCA/ayS1G7AA+GDPXc3ao1lDcM5OJh ryn4F7ZgzCPoli5tbp0zw4KkIz2BIxzv5eePkfVVi7CZGnRJ2fEO827jyU4Mgz1k UNZoEHaD7lwXj9lZtAfWovi1MVTwQJR+ISh3llcxP5Dsa0wYq6Q1QHsSLB0BDUjr IoLgSw+twMCdV4CMV1B5SfRc4TygBZ9n0VQxsMs8VwWtPDNtx+hf0SfdxDwUYGAp rseo+UruI4680jbRt4SJAULuRt7my0o9z9GI5p8XCDACv0wwJTKm2gydlEHnQH1r kYK3JfcMjIJM/RaUR+7IYShJiUwLLxQ= -----END CERTIFICATE-----Generated at Sun Apr 27 02:04:04 2025 by rpki-client