$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa File: 39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa (raw, json) Hash identifier: lfPNxyAHeDlZPhb14VTldTvjNhYzDMcsJuOtKrZrUpw= Subject key identifier: 0D:26:10:9E:38:2A:EF:DE:A6:4E:54:86:07:1D:DC:D7:BC:C4:04:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA901F6A03AC3B4A874680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:90:1f:6a:03:ac:3b:4a:87:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=85b42604-dd27-410e-b3b4-0634bd38ed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:a0:1f:d4:25:3f:34:ec:4e:27:3d:53:b3: a6:71:f7:ca:9d:44:b8:f1:1a:df:18:39:68:30:19: e7:4c:a3:b7:cb:17:f1:ec:52:69:fa:36:6a:d5:10: 9d:98:f5:92:c2:68:30:b0:3d:c3:d5:11:57:b0:39: a9:1f:fb:dd:31:b9:91:e4:f1:ff:ee:49:12:61:78: 24:a8:e0:e9:da:49:48:13:f5:61:00:b1:3a:2e:9a: 4e:cf:3d:9f:7e:87:6e:5a:60:f7:ad:f6:06:2e:e2: 28:99:4d:88:aa:5e:72:ba:3d:69:ef:68:0c:50:03: cc:4a:ad:a6:d6:01:e7:6b:02:83:21:59:56:5f:bd: 8e:1c:c0:df:84:a2:31:85:65:5f:14:0f:03:41:2a: 97:05:a3:71:5e:20:84:75:4d:2b:42:7c:e2:4e:9b: 5f:7d:c0:45:4b:d8:cc:7c:3c:e4:44:1b:12:a5:c5: 56:d2:3e:64:37:82:21:69:12:c9:29:ef:1f:d2:3e: 1c:26:74:4b:d6:a7:00:b5:3b:59:b2:8f:96:fa:26: f6:4e:cb:f4:28:35:65:02:12:71:6f:bf:d5:e9:68: 92:36:5c:22:8e:ab:41:49:9e:17:28:ae:d3:1c:51: 50:20:32:8b:cb:01:e7:9f:3f:53:ff:98:3f:61:e4: b2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:26:10:9E:38:2A:EF:DE:A6:4E:54:86:07:1D:DC:D7:BC:C4:04:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f1:ba:55:55:61:ec:af:0f:49:b8:5b:d5:c5:93:cb:b9:09: 0e:dc:45:91:a9:c1:3b:f8:48:fa:95:b8:3f:50:36:5a:03:cc: 2e:11:c5:11:96:bc:35:c0:71:d0:f1:5d:77:d0:d6:d1:ce:59: ec:ae:99:52:ae:bc:31:57:c8:14:7a:63:67:b4:c7:23:48:65: f6:25:52:00:5a:22:a0:07:6a:12:13:67:55:eb:d7:38:76:1a: 40:ae:be:34:29:11:97:74:35:51:0e:51:24:63:bc:ae:4e:39: e8:0e:25:19:1b:88:48:85:7c:48:5d:82:a0:82:41:cd:e4:d2: 62:a7:56:bb:24:70:5d:0d:1c:64:5f:23:b4:43:36:a0:ac:d1: 01:9c:d6:cb:25:7c:35:ad:e8:d4:34:8f:c3:16:74:12:aa:2e: a1:ce:04:16:55:e3:d1:5a:a2:28:cb:7e:3d:d3:e2:9c:ff:45: f2:41:0d:48:4c:87:20:c7:53:41:b2:4a:9c:0a:8c:25:d1:27: 9d:80:4c:43:b7:97:dc:09:28:8b:5e:65:c2:9f:fc:cf:f3:05: 23:6d:41:0a:6a:be:05:a4:05:14:ec:d7:2f:ee:d8:6d:8d:e4: 6e:11:00:8f:7e:fa:d3:9f:cb:42:89:9f:7d:a6:4e:9d:1e:5a: 62:f4:e0:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupAfagOsO0qHRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODViNDI2MDQtZGQyNy00MTBlLWIzYjQtMDYzNGJkMzhlZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEigH9QlPzTsTic9U7OmcffKnUS48RrfGDlo MBnnTKO3yxfx7FJp+jZq1RCdmPWSwmgwsD3D1RFXsDmpH/vdMbmR5PH/7kkSYXgk qODp2klIE/VhALE6LppOzz2ffoduWmD3rfYGLuIomU2Iql5yuj1p72gMUAPMSq2m 1gHnawKDIVlWX72OHMDfhKIxhWVfFA8DQSqXBaNxXiCEdU0rQnziTptffcBFS9jM fDzkRBsSpcVW0j5kN4IhaRLJKe8f0j4cJnRL1qcAtTtZso+W+ib2Tsv0KDVlAhJx b7/V6WiSNlwijqtBSZ4XKK7THFFQIDKLywHnnz9T/5g/YeSytQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0mEJ44Ku/epk5Uhgcd3Ne8xARkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzlhYWNhMTAtOTJkNS0z OGJhLThlNDYtNmRjMTlmYzdmZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXxulVVYeyvD0m4W9XFk8u5CQ7cRZGpwTv4SPqVuD9QNloDzC4RxRGW vDXAcdDxXXfQ1tHOWeyumVKuvDFXyBR6Y2e0xyNIZfYlUgBaIqAHahITZ1Xr1zh2 GkCuvjQpEZd0NVEOUSRjvK5OOegOJRkbiEiFfEhdgqCCQc3k0mKnVrskcF0NHGRf I7RDNqCs0QGc1sslfDWt6NQ0j8MWdBKqLqHOBBZV49FaoijLfj3T4pz/RfJBDUhM hyDHU0GySpwKjCXRJ52ATEO3l9wJKIteZcKf/M/zBSNtQQpqvgWkBRTs1y/u2G2N 5G4RAI9++tOfy0KJn32mTp0eWmL04Bw= -----END CERTIFICATE-----Generated at Sun Apr 27 13:11:57 2025 by rpki-client