$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245d9aab-e4cc-33b7-9156-63ebab607835.roa File: 245d9aab-e4cc-33b7-9156-63ebab607835.roa (raw, json) Hash identifier: md2bmhyrJqJWa20kJXH/k2L0Tn+YQ2auZnXjFDP65Zs= Subject key identifier: 27:AA:45:F4:47:7A:E8:40:53:38:3F:65:06:D2:6F:E2:DC:D6:71:78 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA966C2AF6AA4DB5B6F3A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245d9aab-e4cc-33b7-9156-63ebab607835.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:96:6c:2a:f6:aa:4d:b5:b6:f3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d8b6bd29-7699-4779-8d78-c38055751ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:0e:40:08:41:3e:b5:ab:d5:d8:cf:93:fa: 2c:89:55:5f:0f:4e:87:3a:94:fd:e0:0e:4d:82:30: 75:e7:9e:ac:7f:df:94:98:90:ce:a5:6f:ea:99:ef: df:26:c5:d8:70:e6:6e:29:09:f3:b2:5f:b7:27:b4: af:6d:34:d5:36:42:67:eb:51:46:5d:02:77:d5:08: a5:2c:75:3c:a0:09:34:69:0b:c2:a6:c8:48:be:e8: 57:12:f7:8b:a5:a2:5a:50:bc:a3:f0:4d:af:a8:a2: 08:62:b2:34:27:13:b3:68:69:b6:94:04:4b:ee:d7: e5:ad:e1:55:58:6e:5c:17:86:21:21:07:2b:fd:1e: a1:6b:86:b9:2b:c0:07:b4:8a:ec:12:65:13:79:b1: 49:40:ed:8f:d9:6a:71:62:13:e9:70:cc:a4:ae:28: 7a:23:bd:7d:5b:1f:be:1a:d7:66:61:85:89:0f:0e: 7c:34:23:1d:22:28:07:f8:0e:af:96:16:64:4a:cf: 51:b8:4d:15:a8:93:16:fb:b1:b7:47:15:61:42:74: f4:57:09:4b:98:33:1d:da:33:7d:53:f7:de:a1:95: fe:c8:ce:33:87:42:9a:93:05:97:b3:36:f8:36:60: 99:5e:33:b4:a4:64:45:50:22:5e:e7:62:57:47:df: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AA:45:F4:47:7A:E8:40:53:38:3F:65:06:D2:6F:E2:DC:D6:71:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245d9aab-e4cc-33b7-9156-63ebab607835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e5:f3:a7:37:af:9d:bc:71:fb:b9:75:5d:98:3c:60:39:92: dc:7a:24:c0:93:1a:94:ac:b0:06:6c:1c:70:1f:d6:02:f3:96: da:a2:0e:e7:9f:cb:1c:0a:e3:5e:68:e1:d6:d0:ba:89:6b:0b: ea:35:ed:62:65:de:d7:3c:34:ed:31:66:ef:ad:4e:7e:19:31: 34:8e:53:91:e1:97:e2:5c:8a:03:4c:e6:04:d4:0b:46:a1:e1: 19:0c:ff:aa:8b:8b:4f:0e:17:5b:f7:83:f3:aa:51:64:d4:de: 57:8f:90:55:c1:ad:7a:7c:61:d2:c7:0d:10:63:23:b7:4b:74: f2:2a:d7:13:69:00:b8:67:ef:99:a0:db:81:c9:c7:c0:a2:bd: a4:c0:e1:b9:c9:ec:aa:f0:67:11:5c:e0:40:e1:bd:cb:d8:d1: 17:1b:82:6a:0c:b0:c0:fa:0a:c5:8c:16:2b:01:a7:b2:5c:17: c2:12:29:ad:c6:43:29:2f:94:ab:cc:73:19:30:15:d8:b1:75: 9e:aa:61:ff:be:5e:c1:b7:08:23:6c:21:cb:89:28:c2:9d:36: e0:08:72:1a:01:bb:56:2e:ac:dc:90:04:b4:db:7d:78:0b:3b: 68:07:cf:bd:78:c4:0a:18:a9:19:73:a4:8f:72:b4:f0:cc:1f: 05:3e:fc:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupZsKvaqTbW286AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDhiNmJkMjktNzY5OS00Nzc5LThkNzgtYzM4MDU1NzUxZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3UOQAhBPrWr1djPk/osiVVfD06HOpT94A5N gjB1556sf9+UmJDOpW/qme/fJsXYcOZuKQnzsl+3J7SvbTTVNkJn61FGXQJ31Qil LHU8oAk0aQvCpshIvuhXEveLpaJaULyj8E2vqKIIYrI0JxOzaGm2lARL7tflreFV WG5cF4YhIQcr/R6ha4a5K8AHtIrsEmUTebFJQO2P2WpxYhPpcMykrih6I719Wx++ GtdmYYWJDw58NCMdIigH+A6vlhZkSs9RuE0VqJMW+7G3RxVhQnT0VwlLmDMd2jN9 U/feoZX+yM4zh0KakwWXszb4NmCZXjO0pGRFUCJe52JXR9+FFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeqRfRHeuhAUzg/ZQbSb+Lc1nF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjQ1ZDlhYWItZTRjYy0z M2I3LTkxNTYtNjNlYmFiNjA3ODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLl86c3r528cfu5dV2YPGA5ktx6JMCTGpSssAZsHHAf1gLzltqiDuef yxwK415o4dbQuolrC+o17WJl3tc8NO0xZu+tTn4ZMTSOU5Hhl+JcigNM5gTUC0ah 4RkM/6qLi08OF1v3g/OqUWTU3lePkFXBrXp8YdLHDRBjI7dLdPIq1xNpALhn75mg 24HJx8CivaTA4bnJ7KrwZxFc4EDhvcvY0RcbgmoMsMD6CsWMFisBp7JcF8ISKa3G QykvlKvMcxkwFdixdZ6qYf++XsG3CCNsIcuJKMKdNuAIchoBu1YurNyQBLTbfXgL O2gHz714xAoYqRlzpI9ytPDMHwU+/JI= -----END CERTIFICATE-----Generated at Sun Apr 27 04:09:06 2025 by rpki-client