$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37beb17e-fc30-3251-a4d7-0df203d9ee57.roa File: 37beb17e-fc30-3251-a4d7-0df203d9ee57.roa (raw, json) Hash identifier: y9nbIb/8rhtFh2WIjeX6rn7zr+4UtsXc2OWy9/IDQNE= Subject key identifier: C1:BD:8E:4C:85:F4:AC:92:05:08:85:C7:E7:DE:EC:71:6F:C5:88:0C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9732118F6D0BC0650E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37beb17e-fc30-3251-a4d7-0df203d9ee57.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:97:32:11:8f:6d:0b:c0:65:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f23d403c-5cf4-47c8-851e-09e8b09585fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:eb:c4:20:dc:90:83:f9:43:7a:43:9a:d2: 2c:ff:88:e0:27:1e:a0:16:fe:2d:8f:47:eb:cd:84: 2d:94:f6:bb:7c:e5:a3:9a:19:4b:b7:c8:a6:ae:5c: 54:a0:02:08:5b:2c:74:08:b0:e2:6d:6f:36:6a:09: 7c:5c:4e:f3:4b:e8:02:ab:62:49:ef:ff:c2:a9:0a: 9b:ef:dd:28:f5:da:40:f0:d7:88:56:23:ee:3e:91: 13:42:fb:2a:a6:b3:9c:a7:a3:bc:bf:33:87:84:4c: 56:fd:3e:cf:52:92:52:60:fb:93:85:0e:66:9c:9b: 60:6c:e9:35:38:22:86:d3:3e:42:29:68:7e:3d:4c: 1f:cf:f3:0b:46:8d:8f:5b:86:91:8e:1e:be:0b:cc: 67:5f:6e:16:03:61:00:b6:48:ed:b3:ff:96:ca:b0: b0:0a:45:d8:63:bf:b8:23:c5:1e:f6:cc:21:87:14: 6a:48:35:b7:a4:23:7f:8b:b6:c3:c7:53:75:c5:2b: 55:73:a7:0f:63:ae:ae:d0:8c:82:90:2b:e0:51:0c: 2f:bc:79:33:3d:5a:91:7d:e3:48:d3:e7:89:aa:1a: ea:08:56:8f:c3:a9:f9:45:43:ed:a9:ce:b0:ec:ec: 89:d4:96:47:31:ba:ac:f3:91:72:36:70:cf:b4:7a: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BD:8E:4C:85:F4:AC:92:05:08:85:C7:E7:DE:EC:71:6F:C5:88:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37beb17e-fc30-3251-a4d7-0df203d9ee57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:11:f4:40:88:df:21:48:87:ae:63:94:e3:78:f4:34:88:ac: 4a:62:12:53:a6:0a:93:d5:fc:96:a8:69:17:82:45:f5:fe:e1: 7b:1e:6e:af:1c:2b:68:63:6a:4e:4d:05:90:f6:9b:99:b9:bd: 1e:42:05:39:db:d9:d7:47:f6:06:f9:5a:58:20:52:a3:0b:6e: 6c:87:f8:8b:cf:8f:5f:de:64:73:51:5f:cc:eb:93:1a:a3:d8: 19:ad:5b:35:1f:fc:f4:92:eb:75:23:3b:8d:ca:6d:55:73:95: 90:6b:d0:43:18:dd:0d:08:08:48:51:df:10:79:fc:f6:d5:ed: de:33:31:0d:b5:e2:5b:a6:40:89:93:a5:59:d4:b4:85:8a:1e: 5b:c7:47:4a:5c:38:26:58:6e:63:4e:88:36:c4:dc:5a:ef:a2: 1b:52:06:94:0b:6a:bc:07:0a:df:f8:da:f9:c0:b2:04:4c:63: db:24:ad:80:9d:a3:d2:be:6d:e3:86:af:92:69:48:39:ae:c9: 62:95:29:87:bd:9a:d3:96:1b:67:0d:32:d4:48:da:4d:83:7e: e3:ea:73:85:7f:d5:7f:b4:47:02:b6:87:4c:29:41:1c:b7:d0: 1f:ad:72:b8:1a:0a:be:13:48:4b:b2:58:80:fd:9d:57:f3:b5: b5:ec:90:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupcyEY9tC8BlDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjIzZDQwM2MtNWNmNC00N2M4LTg1MWUtMDllOGIwOTU4NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq57rxCDckIP5Q3pDmtIs/4jgJx6gFv4tj0fr zYQtlPa7fOWjmhlLt8imrlxUoAIIWyx0CLDibW82agl8XE7zS+gCq2JJ7//CqQqb 790o9dpA8NeIViPuPpETQvsqprOcp6O8vzOHhExW/T7PUpJSYPuThQ5mnJtgbOk1 OCKG0z5CKWh+PUwfz/MLRo2PW4aRjh6+C8xnX24WA2EAtkjts/+WyrCwCkXYY7+4 I8Ue9swhhxRqSDW3pCN/i7bDx1N1xStVc6cPY66u0IyCkCvgUQwvvHkzPVqRfeNI 0+eJqhrqCFaPw6n5RUPtqc6w7OyJ1JZHMbqs85FyNnDPtHqaoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG9jkyF9KySBQiFx+fe7HFvxYgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzdiZWIxN2UtZmMzMC0z MjUxLWE0ZDctMGRmMjAzZDllZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0R9ECI3yFIh65jlON49DSIrEpiElOmCpPV/JaoaReCRfX+4Xsebq8c K2hjak5NBZD2m5m5vR5CBTnb2ddH9gb5WlggUqMLbmyH+IvPj1/eZHNRX8zrkxqj 2BmtWzUf/PSS63UjO43KbVVzlZBr0EMY3Q0ICEhR3xB5/PbV7d4zMQ214lumQImT pVnUtIWKHlvHR0pcOCZYbmNOiDbE3FrvohtSBpQLarwHCt/42vnAsgRMY9skrYCd o9K+beOGr5JpSDmuyWKVKYe9mtOWG2cNMtRI2k2DfuPqc4V/1X+0RwK2h0wpQRy3 0B+tcrgaCr4TSEuyWID9nVfztbXskAk= -----END CERTIFICATE-----Generated at Sun Apr 27 10:31:33 2025 by rpki-client