$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa File: 2ec1e51d-6725-3407-9b6c-11caa275e537.roa (raw, json) Hash identifier: G+YeBxLCYLRH4waJ6hHRU+o7RLl0n2E31f/0cV/xiQM= Subject key identifier: 2D:72:18:49:5D:BA:36:43:36:14:C5:26:E3:A1:8F:09:8E:28:D1:BB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3592549217656AD28A40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:35:92:54:92:17:65:6a:d2:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=228656bb-ae11-4237-a2f2-d51c72fbaa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:91:9e:b2:e3:68:b3:a3:f2:72:f2:9f:03:0e: 99:97:a3:f8:6f:7e:c2:52:e4:76:74:e8:0d:4f:be: 60:c5:0f:00:f0:51:cb:43:73:99:ca:0c:55:ed:31: 7a:1b:16:11:a3:1b:c1:08:80:02:c3:ef:07:ce:a6: ec:29:2b:df:20:79:71:05:da:69:e9:af:36:48:1e: 92:dd:fc:c4:10:c4:e7:88:d1:22:61:56:a0:35:1b: 03:33:96:fa:e5:52:c1:f5:95:11:9d:88:ad:58:fc: 88:08:ff:c7:76:fe:8a:77:d1:92:98:4a:a5:3b:80: cb:e2:d6:bc:2c:e4:d7:f0:61:cf:30:f0:69:8f:f0: 06:8c:3a:b9:f5:e1:ec:fc:05:a8:03:48:b9:1f:2c: 05:ea:33:02:f8:45:ca:b7:3b:2a:83:89:03:bf:9d: 16:7e:f5:3e:76:53:ec:40:80:27:5e:0b:7b:ba:e7: 8d:4c:d9:86:be:97:73:f6:f9:70:b1:3f:77:51:b8: 88:ee:f3:db:fe:0a:ab:d8:6d:a3:98:b6:4a:18:34: e3:62:aa:36:7a:c2:06:7a:56:39:3a:7e:3f:80:dd: 20:f4:2b:1b:c1:db:12:a5:6d:d3:af:0a:09:4b:bd: ff:5a:73:20:34:0a:4e:e6:15:ba:26:ca:24:c6:8a: be:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:72:18:49:5D:BA:36:43:36:14:C5:26:E3:A1:8F:09:8E:28:D1:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:68:83:d3:89:b8:d9:25:5d:b8:43:63:a0:28:ba:f2:c4:90: 33:07:37:6b:df:49:8c:51:c8:57:9c:f4:c1:f9:da:bb:f3:f9: 53:f4:20:b8:2c:4c:20:43:63:1c:82:a4:de:9e:39:e6:d7:69: 7e:69:eb:c0:e8:10:c4:e8:96:fa:3d:b3:b9:8e:ed:60:5e:12: 9d:2f:a0:ff:b5:58:ee:9b:b0:2a:fd:95:e4:69:f2:c0:2b:17: ec:e1:e1:bb:b6:ec:59:ac:cd:b3:fc:3a:28:eb:fa:2d:7b:07: b3:ff:45:c7:0b:53:2c:c3:48:d5:b1:2a:5e:b6:fd:9c:19:0e: 5c:7f:43:81:d1:b8:ed:b5:39:a3:48:c6:7b:40:98:3e:62:51: 07:90:79:1f:38:57:39:e8:3b:c7:87:e9:10:9b:d4:8f:8f:4d: f3:0e:87:41:42:90:4a:3c:85:0f:e3:9a:f5:03:ac:6d:c5:5f: b5:90:ca:9c:bf:70:86:db:c1:9f:09:5e:18:60:82:df:8a:47: bd:5c:3b:52:c3:ad:30:24:12:ef:31:73:bc:4c:ca:00:9a:4c: 16:3e:8c:9e:8f:eb:88:29:79:fd:80:63:30:7b:94:55:47:c0: 79:a1:ea:cb:45:48:8d:20:59:11:e5:c6:94:4e:e3:d7:bd:7c: b4:15:65:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzWSVJIXZWrSikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjI4NjU2YmItYWUxMS00MjM3LWEyZjItZDUxYzcyZmJhYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpGesuNos6PycvKfAw6Zl6P4b37CUuR2dOgN T75gxQ8A8FHLQ3OZygxV7TF6GxYRoxvBCIACw+8HzqbsKSvfIHlxBdpp6a82SB6S 3fzEEMTniNEiYVagNRsDM5b65VLB9ZURnYitWPyICP/Hdv6Kd9GSmEqlO4DL4ta8 LOTX8GHPMPBpj/AGjDq59eHs/AWoA0i5HywF6jMC+EXKtzsqg4kDv50WfvU+dlPs QIAnXgt7uueNTNmGvpdz9vlwsT93UbiI7vPb/gqr2G2jmLZKGDTjYqo2esIGelY5 On4/gN0g9CsbwdsSpW3TrwoJS73/WnMgNApO5hW6Jsokxoq+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1yGEldujZDNhTFJuOhjwmOKNG7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmVjMWU1MWQtNjcyNS0z NDA3LTliNmMtMTFjYWEyNzVlNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRog9OJuNklXbhDY6AouvLEkDMHN2vfSYxRyFec9MH52rvz+VP0ILgs TCBDYxyCpN6eOebXaX5p68DoEMTolvo9s7mO7WBeEp0voP+1WO6bsCr9leRp8sAr F+zh4bu27FmszbP8Oijr+i17B7P/RccLUyzDSNWxKl62/ZwZDlx/Q4HRuO21OaNI xntAmD5iUQeQeR84VznoO8eH6RCb1I+PTfMOh0FCkEo8hQ/jmvUDrG3FX7WQypy/ cIbbwZ8JXhhggt+KR71cO1LDrTAkEu8xc7xMygCaTBY+jJ6P64gpef2AYzB7lFVH wHmh6stFSI0gWRHlxpRO49e9fLQVZTE= -----END CERTIFICATE-----Generated at Sun Apr 27 19:45:22 2025 by rpki-client