$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa File: 321d34a2-ba6d-30ec-8987-e388030f57a3.roa (raw, json) Hash identifier: hvTDIOA+/Abmjsta+v64B7uVzlfW8JEHqZYIed91n5Q= Subject key identifier: 63:B9:DA:0E:AB:AD:39:AB:A1:E2:66:6F:3D:3B:05:6E:5D:27:09:F4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA99218893A5EE9A2852C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:99:21:88:93:a5:ee:9a:28:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=58a80433-e5c8-4841-9d98-600d8c84f156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:81:49:c4:69:fb:42:ed:6e:8d:aa:b6:b3: 48:f3:f9:e4:c8:8f:14:49:be:d4:cf:0c:a4:40:d4: 02:09:11:04:55:ab:26:91:61:b6:0c:13:72:eb:d4: b4:8f:19:f9:ff:f5:88:37:13:7c:b9:24:91:26:a7: 70:ca:87:95:28:3b:18:ae:cf:08:fb:bd:54:14:21: 75:28:b9:ad:e6:21:6b:13:df:4f:c9:80:2f:37:3f: ab:36:0c:cd:da:e5:53:c8:ea:86:b1:a4:9a:d4:14: 1c:e5:53:35:28:d6:da:7c:68:38:68:2f:c4:c7:b3: 10:0b:99:bc:30:57:84:b5:ad:7f:40:db:31:09:d2: 84:c4:e1:3c:70:67:6c:cf:19:23:37:0c:1d:c2:a8: 1d:2e:7f:9a:a0:8f:d1:a2:58:37:d6:64:24:96:c1: fd:1f:29:e8:5e:6c:9c:e5:6f:e7:a1:a0:bc:df:8e: 3f:36:30:03:61:e8:d3:5c:fc:5f:e7:4d:96:63:ae: c0:c5:9b:68:8b:3e:6d:78:c9:5e:02:61:07:e0:ba: b4:b9:6d:1b:56:0a:d9:f2:79:28:d6:bf:e3:fe:91: a1:22:61:37:94:e4:61:19:9e:75:77:2d:10:0f:0e: eb:3e:89:cd:07:3f:9b:e2:68:90:68:6b:bc:d9:b9: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B9:DA:0E:AB:AD:39:AB:A1:E2:66:6F:3D:3B:05:6E:5D:27:09:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8a:58:1c:8a:c9:72:6e:99:ec:92:62:7c:80:e8:c7:82:07: e4:3a:5f:49:38:09:56:dc:7f:8d:1e:f3:f7:92:b6:a3:c2:4f: c9:a7:71:ee:e0:1f:d3:1e:84:ec:8d:ec:66:df:7b:bf:9d:9f: bf:2a:7b:a7:dd:d7:88:6c:18:ff:16:0f:3c:75:f6:6a:5e:d5: 42:73:4b:4b:9c:60:23:e0:80:43:45:f7:61:3e:66:fc:18:ce: 31:1f:ac:ca:02:10:58:79:1e:a2:f0:15:1a:28:57:f4:be:6c: 81:75:ba:85:ae:6d:84:fb:a2:57:91:c5:45:23:82:c2:21:63: d3:a6:db:ca:4f:bd:ab:13:aa:a1:58:60:98:ba:6c:90:bb:4b: ae:7c:dd:27:79:d7:4e:9c:3a:19:0a:69:0d:90:cf:d8:35:46: f4:23:c0:29:f6:5c:28:80:e1:f1:c1:4d:2c:e5:9c:99:f7:0a: d2:a6:98:ea:66:53:c7:9d:61:80:b1:cc:71:c9:da:0b:72:cc: d9:3a:00:ca:e1:3f:5d:27:27:07:2b:36:cc:9d:25:75:f9:31: 07:19:c4:e6:59:97:bc:a2:35:f8:d2:55:98:d6:69:24:22:5f: b0:f9:52:46:43:f3:6a:d8:9e:c9:9b:b6:e0:10:7b:f4:c0:1e: e7:07:88:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupkhiJOl7pooUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NThhODA0MzMtZTVjOC00ODQxLTlkOTgtNjAwZDhjODRmMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogyBScRp+0Ltbo2qtrNI8/nkyI8USb7Uzwyk QNQCCREEVasmkWG2DBNy69S0jxn5//WINxN8uSSRJqdwyoeVKDsYrs8I+71UFCF1 KLmt5iFrE99PyYAvNz+rNgzN2uVTyOqGsaSa1BQc5VM1KNbafGg4aC/Ex7MQC5m8 MFeEta1/QNsxCdKExOE8cGdszxkjNwwdwqgdLn+aoI/Rolg31mQklsH9HynoXmyc 5W/noaC8344/NjADYejTXPxf502WY67AxZtoiz5teMleAmEH4Lq0uW0bVgrZ8nko 1r/j/pGhImE3lORhGZ51dy0QDw7rPonNBz+b4miQaGu82bmzFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGO52g6rrTmroeJmbz07BW5dJwn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIxZDM0YTItYmE2ZC0z MGVjLTg5ODctZTM4ODAzMGY1N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiKWByKyXJumeySYnyA6MeCB+Q6X0k4CVbcf40e8/eStqPCT8mnce7g H9MehOyN7Gbfe7+dn78qe6fd14hsGP8WDzx19mpe1UJzS0ucYCPggENF92E+ZvwY zjEfrMoCEFh5HqLwFRooV/S+bIF1uoWubYT7oleRxUUjgsIhY9Om28pPvasTqqFY YJi6bJC7S6583Sd5106cOhkKaQ2Qz9g1RvQjwCn2XCiA4fHBTSzlnJn3CtKmmOpm U8edYYCxzHHJ2gtyzNk6AMrhP10nJwcrNsydJXX5MQcZxOZZl7yiNfjSVZjWaSQi X7D5UkZD82rYnsmbtuAQe/TAHucHiH8= -----END CERTIFICATE-----Generated at Sun Apr 27 15:53:51 2025 by rpki-client