$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/292f1f9c-e3b1-380b-87c0-21a7b2cbd8d9.roa File: 292f1f9c-e3b1-380b-87c0-21a7b2cbd8d9.roa (raw, json) Hash identifier: NIN0jkLngxIfTbuBp0Espmu65JIvhKarmBw/pBR0fFg= Subject key identifier: EF:EB:46:81:05:53:15:CD:9F:C6:E6:2A:2E:40:88:D1:81:27:69:B9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3A3C8F19E2324AC135F0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/292f1f9c-e3b1-380b-87c0-21a7b2cbd8d9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3a:3c:8f:19:e2:32:4a:c1:35:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fca5459b-f1b6-4b32-9012-e63f0debd76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:3b:ea:17:05:a2:77:18:9c:40:56:fb:e7: c2:fc:a6:0c:90:f6:50:7b:7f:d7:a6:3b:67:a4:62: 68:fa:9e:92:12:29:02:dc:85:a1:70:a0:e6:56:14: b6:8a:a6:5a:0f:b0:1d:7a:21:58:1d:86:07:92:19: 42:ee:12:19:df:fb:44:9b:d8:98:c6:5f:4a:f1:b7: 10:94:c8:d4:37:86:a0:7f:b3:0d:1d:0f:85:c9:93: 55:9c:28:2c:11:93:16:ae:90:33:da:97:46:14:2b: 45:e3:01:8f:64:9f:59:99:ea:b7:a8:0d:c3:e8:91: 90:86:b0:25:e9:d6:3a:5f:c0:b9:a7:6f:69:71:40: 82:64:37:ad:4b:bc:2c:43:7c:d9:f2:d1:90:1f:73: a3:2b:2a:1d:f8:ba:2f:45:0c:d8:96:2f:73:2e:3c: d8:15:41:dc:ea:12:96:c8:6d:7a:5a:4d:70:34:b6: cb:ff:50:64:1d:c1:ba:b4:a5:08:f3:cb:54:80:0e: 4f:72:50:12:6a:c6:aa:ba:8b:de:0b:05:6d:8b:a7: f6:78:08:23:77:87:26:3b:cf:18:3c:83:e0:bf:6c: 04:57:4a:f9:09:30:44:51:17:53:7f:b1:da:7c:ca: 48:a8:c9:0e:c0:d2:45:a4:26:a5:6d:63:99:86:0e: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EB:46:81:05:53:15:CD:9F:C6:E6:2A:2E:40:88:D1:81:27:69:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/292f1f9c-e3b1-380b-87c0-21a7b2cbd8d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ed:f0:30:09:e0:20:e2:a4:a0:94:29:df:4b:71:57:4e:45: bf:c4:a6:fd:fc:1a:be:0d:32:a5:b9:2f:6e:c7:41:47:0c:96: 8e:06:a8:6f:ef:21:fc:c9:85:c5:a0:ef:23:f2:69:cc:32:d3: a9:0e:67:8b:0a:01:d2:a8:85:4b:d3:18:f6:ae:8b:a0:35:5e: 6e:68:e3:29:1e:2e:ed:0b:81:51:50:8c:9d:4c:fe:9e:d8:00: 57:14:57:d5:5f:66:d8:c4:40:80:2d:ed:54:35:13:b2:83:f0: 57:50:41:bd:4b:40:f3:7f:25:51:67:c9:fa:85:ba:0a:77:0d: de:81:e2:ed:f4:ca:b3:7b:e1:3b:ac:5a:8b:22:48:09:32:4f: 8a:cc:23:6c:0b:61:dc:53:46:2b:a7:35:72:d0:6f:9b:1e:30: 9e:e2:a9:8f:cb:68:ad:81:bd:db:49:10:f4:95:7c:b2:d7:bf: 0e:38:bc:5f:39:e8:93:33:68:a7:20:16:6c:de:a2:75:85:fc: 2b:07:8c:34:d7:cc:56:c1:a9:60:2a:52:99:39:37:36:3e:a4: 6f:ac:2b:21:28:19:3a:81:74:b9:9f:3d:3a:6e:76:89:5d:a9: 39:ff:a2:ec:19:55:d8:f4:7a:66:32:de:ff:4c:86:ca:af:d8: 0e:5e:ea:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzo8jxniMkrBNfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmNhNTQ1OWItZjFiNi00YjMyLTkwMTItZTYzZjBkZWJkNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAg76hcFoncYnEBW++fC/KYMkPZQe3/Xpjtn pGJo+p6SEikC3IWhcKDmVhS2iqZaD7AdeiFYHYYHkhlC7hIZ3/tEm9iYxl9K8bcQ lMjUN4agf7MNHQ+FyZNVnCgsEZMWrpAz2pdGFCtF4wGPZJ9Zmeq3qA3D6JGQhrAl 6dY6X8C5p29pcUCCZDetS7wsQ3zZ8tGQH3OjKyod+LovRQzYli9zLjzYFUHc6hKW yG16Wk1wNLbL/1BkHcG6tKUI88tUgA5PclASasaquoveCwVti6f2eAgjd4cmO88Y PIPgv2wEV0r5CTBEURdTf7HafMpIqMkOwNJFpCalbWOZhg6k/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/rRoEFUxXNn8bmKi5AiNGBJ2m5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjkyZjFmOWMtZTNiMS0z ODBiLTg3YzAtMjFhN2IyY2JkOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7t8DAJ4CDipKCUKd9LcVdORb/Epv38Gr4NMqW5L27HQUcMlo4GqG/v IfzJhcWg7yPyacwy06kOZ4sKAdKohUvTGPaui6A1Xm5o4ykeLu0LgVFQjJ1M/p7Y AFcUV9VfZtjEQIAt7VQ1E7KD8FdQQb1LQPN/JVFnyfqFugp3Dd6B4u30yrN74Tus WosiSAkyT4rMI2wLYdxTRiunNXLQb5seMJ7iqY/LaK2BvdtJEPSVfLLXvw44vF85 6JMzaKcgFmzeonWF/CsHjDTXzFbBqWAqUpk5NzY+pG+sKyEoGTqBdLmfPTpudold qTn/ouwZVdj0emYy3v9Mhsqv2A5e6pw= -----END CERTIFICATE-----Generated at Sun Apr 27 17:56:59 2025 by rpki-client