$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/242c4531-c02d-3704-aa85-cb65a6258b43.roa File: 242c4531-c02d-3704-aa85-cb65a6258b43.roa (raw, json) Hash identifier: dk3PbaMarupneELSHjv14LJ8nSg82Z8NVJjZnSCKR4U= Subject key identifier: 5A:F8:43:6A:38:C3:6E:19:42:EB:C6:B3:2F:7D:BE:FE:FA:FA:27:28 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA97C46F6B9A893F9E1B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/242c4531-c02d-3704-aa85-cb65a6258b43.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:97:c4:6f:6b:9a:89:3f:9e:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bc87e511-97ed-4df6-a6e8-7d56c9ab3668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:19:60:f7:67:21:e8:62:4a:95:e1:6e:7c:7b: 59:f9:48:f4:d5:9a:ab:61:b7:74:83:bc:85:e7:ae: b4:79:b9:5f:04:20:cd:60:0a:bb:7c:3c:c7:fc:59: 48:4b:6f:d1:49:3a:71:7c:38:83:7b:5f:34:02:9b: c3:9a:fa:e9:5d:c0:05:a6:63:1b:09:2b:9d:36:d0: 5b:5b:63:02:01:de:81:b0:4b:de:a7:1c:31:94:aa: 26:f1:01:40:ec:ee:4b:0c:af:49:18:94:3c:01:ce: 71:c4:66:3c:13:8c:5f:6a:ac:4e:e0:0f:60:b4:76: cb:f1:df:45:76:8f:d2:c1:af:00:f1:54:b4:9c:52: f4:43:94:1c:18:2d:11:55:57:5e:80:cd:4b:a9:b2: fe:42:f2:53:07:d0:0c:3d:ff:4c:d7:d2:14:36:26: db:48:0d:b3:04:61:43:dc:99:70:94:64:4d:6a:b9: e6:15:aa:0c:e4:52:91:64:a9:a9:18:bc:7b:64:01: a0:be:cd:2f:22:74:f4:ef:2a:72:dd:66:54:7f:e8: 17:59:df:45:19:66:c6:8b:21:0d:e8:d1:16:94:5f: 45:77:c6:96:f1:7e:21:93:cf:c3:6b:6d:60:61:9d: e2:63:db:db:82:0a:66:c2:1a:05:ac:09:9d:0a:ec: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F8:43:6A:38:C3:6E:19:42:EB:C6:B3:2F:7D:BE:FE:FA:FA:27:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/242c4531-c02d-3704-aa85-cb65a6258b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:79:00:c8:6d:33:fd:08:7d:7a:7d:17:08:79:f0:ef:4c:e1: de:40:1d:54:f5:f3:3a:78:29:b7:0b:75:5b:91:ac:fb:46:a7: 4e:01:35:9a:b1:04:17:5d:4a:9d:70:06:b4:62:df:01:30:13: 16:2e:29:af:47:19:eb:85:fa:9a:30:da:47:41:dd:0d:d3:7e: 9c:93:d0:1a:b0:58:f3:09:32:15:54:ad:61:9b:c3:0f:53:2f: a7:a7:52:db:32:e1:65:4e:fb:36:5e:88:de:f8:f2:26:e0:a0: 88:cb:15:d5:7e:04:70:da:2e:42:b1:33:e7:94:cd:d2:d1:db: e8:93:8e:c7:a5:7d:84:35:73:33:70:31:93:3c:fc:b5:96:de: 7f:70:fd:d3:2c:9d:45:86:73:99:e5:a9:60:ac:df:01:10:73: 2a:5f:27:a1:b1:59:d9:fa:2f:a2:bf:d4:ca:df:26:5c:24:fe: 7c:22:0a:f0:03:81:bb:ec:16:3e:16:50:a3:d8:d3:f3:03:b9: c3:4b:da:ef:81:2b:ff:49:ee:b9:2e:46:2b:e6:a5:ad:a8:4a: c0:6e:1f:06:37:1c:ea:72:74:0a:7e:3e:b8:a1:9d:f0:00:8a: 9d:ab:58:bc:a3:64:c7:a2:59:b0:7a:e9:99:3e:ec:47:bc:d3: b2:e0:8b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupfEb2uaiT+eG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmM4N2U1MTEtOTdlZC00ZGY2LWE2ZTgtN2Q1NmM5YWIzNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxlg92ch6GJKleFufHtZ+Uj01ZqrYbd0g7yF 5660eblfBCDNYAq7fDzH/FlIS2/RSTpxfDiDe180ApvDmvrpXcAFpmMbCSudNtBb W2MCAd6BsEvepxwxlKom8QFA7O5LDK9JGJQ8Ac5xxGY8E4xfaqxO4A9gtHbL8d9F do/Swa8A8VS0nFL0Q5QcGC0RVVdegM1LqbL+QvJTB9AMPf9M19IUNibbSA2zBGFD 3JlwlGRNarnmFaoM5FKRZKmpGLx7ZAGgvs0vInT07ypy3WZUf+gXWd9FGWbGiyEN 6NEWlF9Fd8aW8X4hk8/Da21gYZ3iY9vbggpmwhoFrAmdCuwH1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr4Q2o4w24ZQuvGsy99vv76+icoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjQyYzQ1MzEtYzAyZC0z NzA0LWFhODUtY2I2NWE2MjU4YjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMV5AMhtM/0IfXp9Fwh58O9M4d5AHVT18zp4KbcLdVuRrPtGp04BNZqx BBddSp1wBrRi3wEwExYuKa9HGeuF+pow2kdB3Q3TfpyT0BqwWPMJMhVUrWGbww9T L6enUtsy4WVO+zZeiN748ibgoIjLFdV+BHDaLkKxM+eUzdLR2+iTjselfYQ1czNw MZM8/LWW3n9w/dMsnUWGc5nlqWCs3wEQcypfJ6GxWdn6L6K/1MrfJlwk/nwiCvAD gbvsFj4WUKPY0/MDucNL2u+BK/9J7rkuRivmpa2oSsBuHwY3HOpydAp+PrihnfAA ip2rWLyjZMeiWbB66Zk+7Ee807LgixY= -----END CERTIFICATE-----Generated at Sun Apr 27 02:22:14 2025 by rpki-client