$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27455da0-3f15-3ebc-8bb8-845a4026a3ee.roa File: 27455da0-3f15-3ebc-8bb8-845a4026a3ee.roa (raw, json) Hash identifier: ZPq2o74El1eADa6QezGEdqWqLGo+7pFHapiXm7wQXWU= Subject key identifier: F1:8B:EC:1C:18:12:62:3D:D0:A5:5C:BB:A2:41:C9:91:A8:00:51:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA94E07ABBC66213507B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27455da0-3f15-3ebc-8bb8-845a4026a3ee.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:94:e0:7a:bb:c6:62:13:50:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8c1b700d-9c53-4306-b897-d5c514481712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:14:81:d4:90:e1:da:70:25:e9:6e:d7:67: 35:67:e0:17:d5:81:c1:d7:25:fb:51:a7:17:fb:88: 4d:16:ee:a5:68:a9:f3:0a:f7:b2:ea:3b:16:1a:15: b6:2a:de:0b:9c:2a:86:88:20:e0:2b:76:d8:9d:b5: c0:be:9b:7f:d0:fb:58:eb:79:3f:69:98:f7:c7:b5: e9:34:01:ff:b2:f4:f8:25:da:18:37:f9:e2:85:95: 30:63:3c:27:80:fe:d2:16:ea:19:09:5d:5e:e0:4b: b2:8e:d7:b8:8b:5b:07:60:b9:f6:79:bb:bd:a1:0b: 8a:99:89:30:5d:e7:34:cc:6b:d5:8d:14:cb:2b:d6: 82:d5:73:ee:b1:9b:ce:3d:46:72:4f:03:76:6a:ea: cd:7e:87:9c:8f:9c:4d:b0:15:97:a2:dc:e8:aa:24: 03:b9:f1:ec:c4:d9:38:9d:c3:48:ca:b2:c2:ec:57: 36:34:b6:ed:61:88:b7:3b:c7:18:cb:06:b0:de:84: cd:56:ac:35:f2:65:2b:b8:91:d0:06:7e:5a:51:dc: b8:19:5e:69:12:7e:84:15:bf:ef:5f:98:74:b2:f1: b5:e7:8f:3c:af:ff:e6:f4:e8:2f:d9:05:2b:db:71: 5e:50:1a:f0:2e:f4:31:ea:bb:aa:5f:05:8a:53:f5: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8B:EC:1C:18:12:62:3D:D0:A5:5C:BB:A2:41:C9:91:A8:00:51:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27455da0-3f15-3ebc-8bb8-845a4026a3ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:dc:fd:55:53:7e:a3:b7:cd:e5:97:a0:6a:f5:65:21:5d:e3: f6:8d:12:f1:0c:38:28:36:6e:80:cc:02:b9:e4:36:f1:9f:c5: 74:ce:96:d9:79:a0:fb:31:7b:6b:50:37:9c:0c:20:dd:0b:a6: 09:58:ec:b4:ea:3f:c4:03:a4:55:f0:10:8f:64:47:07:65:52: f4:9a:4e:a6:0f:a3:b5:3d:f3:ed:cf:f5:16:cc:90:6c:35:89: 32:3d:a5:8e:fa:1a:d5:ab:9d:3a:21:f5:e1:c4:cb:28:46:01: 5e:3d:3c:d4:95:0f:e8:84:dd:ff:e8:b4:cf:f6:04:47:02:b4: d3:c3:cb:39:99:76:6b:36:bd:27:d1:ba:36:ce:15:b3:f1:03: fe:72:07:ff:fd:7f:23:02:04:67:68:dd:44:0b:59:91:dc:46: d3:18:34:9d:b6:6f:d4:a6:2a:4f:a4:4c:64:ac:70:1e:81:cc: e4:24:a0:1c:bd:ac:cd:dc:d0:b4:1d:dc:0e:6f:7e:96:61:56: 08:6c:6c:bf:a9:77:2b:ca:16:77:d8:24:d9:ee:f9:59:c4:b6: fe:b6:34:55:a6:68:39:75:06:d1:95:20:7f:35:c0:9f:bf:67: 60:29:42:1f:3f:52:5f:61:fd:89:19:f2:51:83:2e:4f:09:b3: d7:21:b3:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupTgervGYhNQewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGMxYjcwMGQtOWM1My00MzA2LWI4OTctZDVjNTE0NDgxNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspIUgdSQ4dpwJelu12c1Z+AX1YHB1yX7UacX +4hNFu6laKnzCvey6jsWGhW2Kt4LnCqGiCDgK3bYnbXAvpt/0PtY63k/aZj3x7Xp NAH/svT4JdoYN/nihZUwYzwngP7SFuoZCV1e4Euyjte4i1sHYLn2ebu9oQuKmYkw Xec0zGvVjRTLK9aC1XPusZvOPUZyTwN2aurNfoecj5xNsBWXotzoqiQDufHsxNk4 ncNIyrLC7Fc2NLbtYYi3O8cYywaw3oTNVqw18mUruJHQBn5aUdy4GV5pEn6EFb/v X5h0svG15488r//m9Ogv2QUr23FeUBrwLvQx6ruqXwWKU/VAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGL7BwYEmI90KVcu6JByZGoAFHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjc0NTVkYTAtM2YxNS0z ZWJjLThiYjgtODQ1YTQwMjZhM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLc/VVTfqO3zeWXoGr1ZSFd4/aNEvEMOCg2boDMArnkNvGfxXTOltl5 oPsxe2tQN5wMIN0LpglY7LTqP8QDpFXwEI9kRwdlUvSaTqYPo7U98+3P9RbMkGw1 iTI9pY76GtWrnToh9eHEyyhGAV49PNSVD+iE3f/otM/2BEcCtNPDyzmZdms2vSfR ujbOFbPxA/5yB//9fyMCBGdo3UQLWZHcRtMYNJ22b9SmKk+kTGSscB6BzOQkoBy9 rM3c0LQd3A5vfpZhVghsbL+pdyvKFnfYJNnu+VnEtv62NFWmaDl1BtGVIH81wJ+/ Z2ApQh8/Ul9h/YkZ8lGDLk8Js9chs2o= -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:46 2025 by rpki-client