$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9afe68-8094-375c-b738-96068d4adc6f.roa File: 2a9afe68-8094-375c-b738-96068d4adc6f.roa (raw, json) Hash identifier: 0SQcApDnZ4L9opKB8dPkSUOyJVj9A2zpMEX0ynUutEY= Subject key identifier: 58:74:1A:8F:F5:A3:B0:63:15:4C:D6:96:76:B6:09:30:1D:EE:99:58 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9451DCC586F72F063120 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9afe68-8094-375c-b738-96068d4adc6f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:94:51:dc:c5:86:f7:2f:06:31:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d3fad5eb-6ca5-40ec-a755-16e33b0a7213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:ff:0e:a1:47:c0:44:a1:25:25:5f:8f:f4: a5:65:a5:f1:89:39:49:2f:3a:bc:f2:7a:d1:1a:dc: 5c:3b:27:f0:c1:a9:85:17:c3:96:f3:85:28:1b:bd: c9:5c:e9:44:e3:9a:4b:25:1e:bb:3f:6b:35:8f:3e: b7:b2:49:39:44:24:0a:79:9a:1d:e5:8b:a8:5b:e8: 0b:a1:7b:cc:38:04:1a:d4:e9:86:c3:63:d4:83:6f: a1:e6:c7:01:e0:16:3d:49:26:9c:b9:64:da:7a:2b: 43:12:f0:a1:9c:a3:e8:c9:2b:44:fc:22:0f:95:5b: 76:27:a6:4c:e8:47:9b:dd:45:01:2c:dd:24:e5:77: da:85:38:19:7b:7e:39:2f:49:da:14:ef:ea:9c:b2: 24:7f:83:c1:d2:dc:b9:8c:f6:45:5c:8f:ad:30:d9: 7a:5a:18:d1:65:52:7a:2b:fb:7f:df:05:43:a6:b8: a6:3e:60:82:08:42:f0:b4:80:86:63:ce:91:ee:d3: bc:da:94:a3:c8:c4:4d:a4:62:ff:9d:92:ae:51:f2: 7a:5a:13:e7:34:e2:6e:36:91:7c:5f:38:01:22:af: 35:35:b5:de:a4:bd:2c:02:8b:de:5b:26:30:f7:52: b2:7c:3d:24:f6:f9:fa:3e:6c:55:cb:5c:0c:08:67: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:74:1A:8F:F5:A3:B0:63:15:4C:D6:96:76:B6:09:30:1D:EE:99:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9afe68-8094-375c-b738-96068d4adc6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:3a:65:20:45:26:54:86:1a:17:76:62:c6:2a:0c:05:23:83: 61:4e:6d:30:5a:26:ac:0a:fa:cf:6e:f7:9e:f8:97:59:02:c6: 6f:40:65:d1:08:69:10:bf:53:d7:0e:50:3a:57:14:ae:9d:f4: 75:d4:71:f6:30:9e:5f:cb:02:d5:97:1e:84:66:fc:7d:e9:58: 71:22:4a:9c:06:8c:ba:de:5b:4d:61:43:0b:e2:11:79:8a:87: 23:45:e3:bc:ed:93:4c:b6:55:ed:ae:b4:21:81:f7:13:53:c2: 97:49:b6:e3:92:79:2c:ac:76:33:0a:52:6e:52:9f:01:d4:25: 3d:1f:43:4b:d0:c7:2d:16:a8:25:ac:22:65:e0:69:f1:1c:d3: 02:ae:0c:06:d7:7a:76:9c:10:46:de:21:46:32:a7:00:00:63: ea:60:65:a2:ad:cb:2e:9b:4e:c7:7a:54:fa:2d:09:84:29:66: 24:86:85:4e:47:29:c9:48:ad:2c:79:4e:bf:63:a5:8b:0f:56: 1b:a9:02:19:44:a8:e6:26:cb:76:22:23:f6:a9:3d:62:cb:cc: dd:fd:7a:37:e5:37:48:3a:d0:fa:0c:c8:d0:15:9d:51:7a:95: 27:53:b0:0c:2d:3a:2a:a9:4f:c3:c9:93:dd:67:26:2d:a8:00: 4f:3d:6b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupRR3MWG9y8GMSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDNmYWQ1ZWItNmNhNS00MGVjLWE3NTUtMTZlMzNiMGE3MjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqv/DqFHwEShJSVfj/SlZaXxiTlJLzq88nrR GtxcOyfwwamFF8OW84UoG73JXOlE45pLJR67P2s1jz63skk5RCQKeZod5YuoW+gL oXvMOAQa1OmGw2PUg2+h5scB4BY9SSacuWTaeitDEvChnKPoyStE/CIPlVt2J6ZM 6Eeb3UUBLN0k5XfahTgZe345L0naFO/qnLIkf4PB0ty5jPZFXI+tMNl6WhjRZVJ6 K/t/3wVDprimPmCCCELwtICGY86R7tO82pSjyMRNpGL/nZKuUfJ6WhPnNOJuNpF8 XzgBIq81NbXepL0sAoveWyYw91KyfD0k9vn6PmxVy1wMCGfRbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFh0Go/1o7BjFUzWlna2CTAd7plYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE5YWZlNjgtODA5NC0z NzVjLWI3MzgtOTYwNjhkNGFkYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQ6ZSBFJlSGGhd2YsYqDAUjg2FObTBaJqwK+s9u9574l1kCxm9AZdEI aRC/U9cOUDpXFK6d9HXUcfYwnl/LAtWXHoRm/H3pWHEiSpwGjLreW01hQwviEXmK hyNF47ztk0y2Ve2utCGB9xNTwpdJtuOSeSysdjMKUm5SnwHUJT0fQ0vQxy0WqCWs ImXgafEc0wKuDAbXenacEEbeIUYypwAAY+pgZaKtyy6bTsd6VPotCYQpZiSGhU5H KclIrSx5Tr9jpYsPVhupAhlEqOYmy3YiI/apPWLLzN39ejflN0g60PoMyNAVnVF6 lSdTsAwtOiqpT8PJk91nJi2oAE89a8s= -----END CERTIFICATE-----Generated at Sun Apr 27 01:58:20 2025 by rpki-client