$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f2293c3-401c-395d-8cf7-ca4e170605d9.roa File: 1f2293c3-401c-395d-8cf7-ca4e170605d9.roa (raw, json) Hash identifier: 78PSRN1TqksJPQevZB2JBe2d6fMHGRteVn97X3FMNWk= Subject key identifier: 00:76:66:70:C0:1C:66:B0:FF:3A:83:0A:AE:6B:6B:16:16:64:BB:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9416C6B17AA580F09DE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f2293c3-401c-395d-8cf7-ca4e170605d9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:94:16:c6:b1:7a:a5:80:f0:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c246dc70-7e67-43df-974c-82f8c63593b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:ed:71:e0:f9:53:c0:21:8a:66:4e:51:f6: 6e:3d:df:61:fc:6f:c4:c1:28:c8:24:54:cf:d7:0d: e6:17:cd:e9:b8:42:c5:4b:68:24:e3:59:12:4f:ba: f1:b5:43:95:30:55:24:18:f9:12:fb:9b:6b:07:74: ec:47:9c:fe:dc:15:4e:b5:2d:3e:00:a5:06:ad:f7: 84:27:75:d6:7f:b5:66:74:85:0b:15:87:f8:6e:04: 35:ed:d7:c8:b9:89:4d:86:ec:23:d5:0d:6c:c8:cc: 29:d3:dd:dc:2f:27:b9:60:f2:12:0e:91:74:10:8b: 1f:e2:19:27:ab:65:74:9f:0b:ba:c6:49:4c:2b:28: 18:dd:e8:76:0d:a0:e8:75:41:94:a2:41:21:03:78: 30:ba:76:ea:c4:f3:01:14:96:4c:ae:4c:33:78:cc: b2:43:29:01:a9:d2:44:37:0f:85:e2:e3:61:bd:46: 08:33:b5:39:2c:b2:cb:9e:4c:85:17:1b:93:da:4f: 3e:8c:2d:66:2a:1e:f4:59:d3:dc:0b:5b:b0:ef:15: 8c:43:17:40:9f:43:36:bf:a7:82:39:9e:23:e0:10: 08:dd:6b:ff:14:14:37:3e:ab:88:03:8e:8e:4d:13: 19:27:34:4e:dd:97:a5:f8:98:f6:de:a8:9d:d9:5b: e8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:76:66:70:C0:1C:66:B0:FF:3A:83:0A:AE:6B:6B:16:16:64:BB:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f2293c3-401c-395d-8cf7-ca4e170605d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ca:7f:3d:ce:1f:79:20:82:1d:30:74:70:3b:d8:a7:e9:d3: 09:a7:0c:27:6a:40:87:18:5d:9b:d9:19:47:b1:de:42:04:40: 42:b3:1e:22:c9:ca:9c:f1:66:91:13:af:46:af:3f:f6:06:a7: 8c:98:98:b7:c0:b7:6f:7d:e8:1c:ca:ab:af:58:bc:82:60:c3: 85:91:e3:ec:38:bc:21:f9:17:6d:2e:dc:36:c9:e4:1e:3a:21: ac:09:d2:f0:70:12:b8:5d:c5:91:1e:fc:b8:65:0d:25:7e:ad: f2:cc:81:26:5c:d6:c2:d2:89:0b:c8:ad:8c:af:97:87:21:af: 76:ed:70:d6:1c:f0:c9:05:71:01:54:ea:8d:fb:31:83:93:72: 26:39:3f:c2:fa:e8:3b:f6:f5:6d:d9:79:3c:8e:44:3c:4a:06: d9:2f:c9:b8:76:cc:38:db:f8:a8:f2:dd:7d:be:30:a8:15:bd: 63:77:42:f6:46:95:62:c8:f0:bd:b5:0d:f8:6d:13:f3:25:21: fa:23:db:d8:05:bd:ec:cd:7a:77:e2:20:f8:cc:cd:ca:d8:3f: 44:2e:66:2b:c4:05:1c:53:68:b1:99:29:24:02:39:12:a2:2c: 74:0d:ea:77:91:65:e2:f7:3e:dd:42:2b:e2:3d:01:76:6a:bc: af:29:5b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupQWxrF6pYDwneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzI0NmRjNzAtN2U2Ny00M2RmLTk3NGMtODJmOGM2MzU5M2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEftceD5U8AhimZOUfZuPd9h/G/EwSjIJFTP 1w3mF83puELFS2gk41kST7rxtUOVMFUkGPkS+5trB3TsR5z+3BVOtS0+AKUGrfeE J3XWf7VmdIULFYf4bgQ17dfIuYlNhuwj1Q1syMwp093cLye5YPISDpF0EIsf4hkn q2V0nwu6xklMKygY3eh2DaDodUGUokEhA3gwunbqxPMBFJZMrkwzeMyyQykBqdJE Nw+F4uNhvUYIM7U5LLLLnkyFFxuT2k8+jC1mKh70WdPcC1uw7xWMQxdAn0M2v6eC OZ4j4BAI3Wv/FBQ3PquIA46OTRMZJzRO3Zel+Jj23qid2VvobQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB2ZnDAHGaw/zqDCq5raxYWZLtKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWYyMjkzYzMtNDAxYy0z OTVkLThjZjctY2E0ZTE3MDYwNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILKfz3OH3kggh0wdHA72Kfp0wmnDCdqQIcYXZvZGUex3kIEQEKzHiLJ ypzxZpETr0avP/YGp4yYmLfAt2996BzKq69YvIJgw4WR4+w4vCH5F20u3DbJ5B46 IawJ0vBwErhdxZEe/LhlDSV+rfLMgSZc1sLSiQvIrYyvl4chr3btcNYc8MkFcQFU 6o37MYOTciY5P8L66Dv29W3ZeTyORDxKBtkvybh2zDjb+Kjy3X2+MKgVvWN3QvZG lWLI8L21DfhtE/MlIfoj29gFvezNenfiIPjMzcrYP0QuZivEBRxTaLGZKSQCORKi LHQN6neRZeL3Pt1CK+I9AXZqvK8pW+A= -----END CERTIFICATE-----Generated at Mon Apr 28 02:46:38 2025 by rpki-client