$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35a58a6d-3ff6-35ec-91ef-db9e022271ad.roa File: 35a58a6d-3ff6-35ec-91ef-db9e022271ad.roa (raw, json) Hash identifier: bnZpGdNI+SdXk2FTinav1X4FK9PaWpYhuaq5myh4Ldo= Subject key identifier: A2:91:FB:86:C5:35:7D:BF:30:34:A4:5E:57:C3:7A:E8:78:8B:F6:51 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3E406544C688F9BDDE60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35a58a6d-3ff6-35ec-91ef-db9e022271ad.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3e:40:65:44:c6:88:f9:bd:de:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3c91d8ad-1e01-4fcf-9441-18c4f19d1f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:10:9e:40:6f:55:87:74:85:06:77:17:98: e9:33:35:6a:63:f7:bc:74:25:35:6d:0a:d4:68:96: 11:eb:71:e8:d9:ed:55:79:b3:75:4a:08:41:33:da: 57:12:e8:4c:7f:a5:30:21:8b:72:50:23:1b:a0:8d: 34:27:4e:69:76:8f:05:75:3c:89:99:45:73:fc:22: 26:88:7e:2c:e1:45:d9:24:3f:2f:c5:df:14:b8:ef: a5:ef:35:8f:9e:89:b4:52:8b:80:43:ee:92:4f:8a: 4f:2f:16:2f:13:87:97:3f:c9:bc:87:0b:67:35:c9: 83:5a:97:ef:6f:5d:07:e2:b6:e8:11:d0:72:41:e4: 4f:35:34:3f:fb:a8:72:8d:71:dc:70:6b:f1:59:6d: 65:ba:4f:72:fc:81:38:92:35:af:ca:f1:c4:14:65: 95:e8:f5:9b:c8:97:9b:e0:f5:f5:54:0c:d8:3e:8f: 9d:62:9b:78:bf:3c:e9:09:37:23:28:46:a8:98:6a: 65:68:a2:4c:1a:0d:ef:ee:c9:5d:fd:46:f2:80:59: 38:4e:af:37:f5:86:50:9e:bf:92:65:43:4e:87:28: 8e:c9:5a:a3:ad:8d:2c:f6:14:fe:24:b3:d9:4e:06: 3f:ff:b9:c4:94:93:f0:20:30:a9:0c:88:ac:c7:a8: 3b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:91:FB:86:C5:35:7D:BF:30:34:A4:5E:57:C3:7A:E8:78:8B:F6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/35a58a6d-3ff6-35ec-91ef-db9e022271ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:6f:4f:cc:68:b7:d9:ca:a5:bd:d9:a0:c6:b7:c2:7b:eb:35: e7:af:20:dc:5b:bb:69:10:64:d3:3d:8b:48:dc:a0:02:08:ae: 0b:e0:c8:01:e9:b0:1b:9e:61:4a:31:e5:a8:52:d9:7e:05:f0: 97:1d:05:c7:40:71:c9:32:30:20:5e:b7:a7:b5:d8:4e:29:a4: e4:aa:f5:f6:fc:64:19:40:87:01:95:f3:1c:0a:ba:b8:de:33: ba:dc:52:37:19:80:f6:9f:a6:5a:b5:0a:c5:60:b4:ef:9d:d6: 21:b1:5d:2b:d1:aa:9b:4f:3a:c2:ad:2c:72:3a:e4:0b:85:24: ab:69:fb:c4:90:96:ee:d3:69:f2:61:f7:cc:1e:d8:de:af:68: 65:d6:69:dd:86:d0:58:77:23:ed:1d:52:ab:b4:a8:28:a7:78: 49:87:2b:72:68:32:66:26:ee:57:df:f4:5a:1f:0b:01:4e:7d: 00:c5:5d:79:83:31:79:9f:5d:64:87:99:78:76:79:0e:89:f0: a0:64:89:90:9d:72:26:3a:98:1b:71:8a:f0:b9:9f:ae:44:3f: 81:96:d7:08:2e:a8:7c:8e:a8:c8:b1:74:71:22:05:ce:d0:82: 2f:a5:23:a7:64:4e:e6:99:5d:e8:7a:c5:0d:56:cc:8f:8a:35: aa:08:88:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz5AZUTGiPm93mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2M5MWQ4YWQtMWUwMS00ZmNmLTk0NDEtMThjNGYxOWQxZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUUQnkBvVYd0hQZ3F5jpMzVqY/e8dCU1bQrU aJYR63Ho2e1VebN1SghBM9pXEuhMf6UwIYtyUCMboI00J05pdo8FdTyJmUVz/CIm iH4s4UXZJD8vxd8UuO+l7zWPnom0UouAQ+6ST4pPLxYvE4eXP8m8hwtnNcmDWpfv b10H4rboEdByQeRPNTQ/+6hyjXHccGvxWW1luk9y/IE4kjWvyvHEFGWV6PWbyJeb 4PX1VAzYPo+dYpt4vzzpCTcjKEaomGplaKJMGg3v7sld/UbygFk4Tq839YZQnr+S ZUNOhyiOyVqjrY0s9hT+JLPZTgY//7nElJPwIDCpDIisx6g7NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKR+4bFNX2/MDSkXlfDeuh4i/ZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzVhNThhNmQtM2ZmNi0z NWVjLTkxZWYtZGI5ZTAyMjI3MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFvT8xot9nKpb3ZoMa3wnvrNeevINxbu2kQZNM9i0jcoAIIrgvgyAHp sBueYUox5ahS2X4F8JcdBcdAcckyMCBet6e12E4ppOSq9fb8ZBlAhwGV8xwKurje M7rcUjcZgPafplq1CsVgtO+d1iGxXSvRqptPOsKtLHI65AuFJKtp+8SQlu7TafJh 98we2N6vaGXWad2G0Fh3I+0dUqu0qCineEmHK3JoMmYm7lff9FofCwFOfQDFXXmD MXmfXWSHmXh2eQ6J8KBkiZCdciY6mBtxivC5n65EP4GW1wguqHyOqMixdHEiBc7Q gi+lI6dkTuaZXeh6xQ1WzI+KNaoIiGM= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:17 2025 by rpki-client