$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa File: 290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa (raw, json) Hash identifier: I6pHzcpOBXnNSy27A+XfFQxpRLo/UdarUvUVnPgufDM= Subject key identifier: 56:D8:5B:66:DC:FA:3C:41:24:30:8C:2F:95:B6:87:8B:AA:1E:90:56 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA94EBDBD7D4E4F2CE2780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:94:eb:db:d7:d4:e4:f2:ce:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0062460a-08d8-4364-a9e5-985e70b7b9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0e:74:ed:52:6f:3d:60:3b:d7:84:a8:70:a0: 3f:f6:ac:4a:5f:55:c1:e8:b7:4b:ac:e7:fa:d6:ad: 37:1f:f3:df:a0:85:46:4e:c6:e6:69:95:b6:b6:3f: 39:3f:fc:e2:04:d9:ce:81:aa:89:93:51:e1:d0:6e: a7:20:56:0f:ed:c6:99:d5:6c:1a:06:5a:34:3f:ea: aa:db:28:33:2a:78:56:b2:58:18:cf:2f:07:77:ad: 3f:79:78:3e:7f:48:3e:3b:15:c8:b2:ef:3d:04:7f: 02:66:f7:34:5e:a4:78:1c:a9:c4:0c:e1:f7:d8:cf: 66:5f:91:e8:91:c2:4a:5d:3b:af:90:91:9b:02:b9: 39:fb:52:5b:82:4c:ea:00:95:67:b9:56:b7:f9:79: 69:5d:ac:8a:a2:23:4e:14:fe:62:9e:34:26:a2:94: 4b:33:e5:a1:66:27:39:cd:15:b7:a6:e9:4d:fb:b4: 0c:0c:ee:17:36:18:35:e3:91:d1:12:75:5b:f3:f4: bc:e3:52:ce:a2:49:a3:6b:13:a1:27:6e:5f:0a:20: f6:df:d8:c5:33:86:93:66:66:70:d7:37:7c:de:d5: 71:62:22:90:d3:6e:b5:85:d2:0a:9a:70:17:7c:6e: e6:00:bd:9b:7b:47:90:ee:1c:f6:70:b3:f8:a1:6e: 9c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D8:5B:66:DC:FA:3C:41:24:30:8C:2F:95:B6:87:8B:AA:1E:90:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:92:b2:5a:23:02:84:4e:f4:ff:29:da:8b:0e:71:5e:6c:7a: 23:be:f8:43:82:18:3c:e5:00:46:54:9f:32:03:7b:90:7a:1c: b2:d0:69:ba:fe:fd:aa:d1:a9:b1:a1:dc:c0:39:48:09:b3:bd: c1:a6:89:97:09:88:c7:b5:d3:26:4f:7e:a9:e7:25:95:e7:27: 51:8e:d5:03:17:f2:8f:7f:b1:bb:30:0d:b2:88:d7:6c:35:c1: 44:f5:02:b2:1a:7d:a1:0c:cc:4c:5e:cf:00:3b:dd:14:ab:a7: 07:a9:ea:63:18:58:9f:10:9c:a2:df:6c:55:8b:07:d4:a9:51: 09:83:82:90:74:8f:0d:67:c1:7f:c6:fe:e2:52:04:76:47:d9: 16:b8:9b:15:fd:63:b6:c8:01:75:1c:04:67:43:1b:a1:9e:50: 5a:e6:e1:75:6f:58:72:c1:d0:8d:42:5b:6f:de:e1:78:b6:53: 49:13:9c:f5:d7:5f:51:f6:43:4e:71:ca:8d:14:40:0b:a5:bc: ee:26:9f:9d:94:25:8c:d5:13:47:cd:76:ce:50:04:cc:c5:18: c5:7f:60:83:6a:54:6e:79:6f:a2:8a:c5:b5:b8:56:ac:85:6f: 3c:6e:37:6e:5e:a1:3a:4f:8e:cb:0b:95:63:e4:00:05:38:1b: b0:ed:b0:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupTr29fU5PLOJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDA2MjQ2MGEtMDhkOC00MzY0LWE5ZTUtOTg1ZTcwYjdiOWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ507VJvPWA714SocKA/9qxKX1XB6LdLrOf6 1q03H/PfoIVGTsbmaZW2tj85P/ziBNnOgaqJk1Hh0G6nIFYP7caZ1WwaBlo0P+qq 2ygzKnhWslgYzy8Hd60/eXg+f0g+OxXIsu89BH8CZvc0XqR4HKnEDOH32M9mX5Ho kcJKXTuvkJGbArk5+1JbgkzqAJVnuVa3+XlpXayKoiNOFP5injQmopRLM+WhZic5 zRW3pulN+7QMDO4XNhg145HREnVb8/S841LOokmjaxOhJ25fCiD239jFM4aTZmZw 1zd83tVxYiKQ0261hdIKmnAXfG7mAL2be0eQ7hz2cLP4oW6c4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbYW2bc+jxBJDCML5W2h4uqHpBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjkwZmNmZDQtMTdjYi0z MzhhLWI2NTItM2NmMjMwNWUyYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2SslojAoRO9P8p2osOcV5seiO++EOCGDzlAEZUnzIDe5B6HLLQabr+ /arRqbGh3MA5SAmzvcGmiZcJiMe10yZPfqnnJZXnJ1GO1QMX8o9/sbswDbKI12w1 wUT1ArIafaEMzExezwA73RSrpwep6mMYWJ8QnKLfbFWLB9SpUQmDgpB0jw1nwX/G /uJSBHZH2Ra4mxX9Y7bIAXUcBGdDG6GeUFrm4XVvWHLB0I1CW2/e4Xi2U0kTnPXX X1H2Q05xyo0UQAulvO4mn52UJYzVE0fNds5QBMzFGMV/YINqVG55b6KKxbW4VqyF bzxuN25eoTpPjssLlWPkAAU4G7DtsFo= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:53 2025 by rpki-client