$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ae3fcc4-d441-3516-8729-64fbcb355694.roa File: 3ae3fcc4-d441-3516-8729-64fbcb355694.roa (raw, json) Hash identifier: /n0iAeMHarkFxbp5ZlKD0yLIgjUB8g/tkt5PJM3TyCE= Subject key identifier: 20:C3:09:56:07:C1:ED:71:04:6D:54:46:75:E6:61:DD:92:4A:23:2F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3E4E837F591E7CB6FC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ae3fcc4-d441-3516-8729-64fbcb355694.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3e:4e:83:7f:59:1e:7c:b6:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d6faecd8-5432-40b8-822c-038a11ccd4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:79:cc:60:1d:b3:f6:80:ac:61:f7:a3:8d:7c: 1c:bf:1c:43:6d:34:d8:fb:c8:13:a6:fa:e4:87:a6: 6e:b8:b2:64:cf:2f:67:1f:87:15:f9:c0:f5:66:95: 78:f7:45:5b:bf:48:a4:ec:63:f1:c5:eb:fc:9a:d4: d2:98:b8:2f:ae:2c:57:44:f0:4c:e4:4d:5d:2b:85: 67:d7:5e:77:6f:e0:af:83:b5:8b:4d:d2:ee:bf:09: 11:07:be:c3:28:fa:93:c5:0c:86:5c:e3:e5:28:f7: e9:c4:fe:c3:4c:07:3e:90:87:d4:9f:4b:7d:a9:27: 2e:7d:dd:96:f7:6b:b6:7d:c7:0f:3e:ff:c5:80:9e: 4e:03:a8:37:46:33:f7:e0:48:fd:9a:6e:22:98:a1: d6:4c:44:72:6b:74:f6:c2:9d:05:04:f9:9d:84:ec: 0c:66:32:24:9d:f2:3b:fc:a4:79:01:df:6b:b8:ec: 12:8c:b9:b7:6c:36:b2:2c:77:75:bb:c3:db:e0:b0: f9:36:f2:5a:87:76:3d:31:c0:36:b5:6e:d7:9b:27: ce:95:f2:99:06:37:38:c1:bb:42:d8:4f:e8:61:94: 86:15:83:63:57:d5:6f:00:43:95:2e:f0:91:01:7a: 8e:75:e1:10:72:c2:04:79:fe:48:c8:3b:9b:01:93: 70:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C3:09:56:07:C1:ED:71:04:6D:54:46:75:E6:61:DD:92:4A:23:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3ae3fcc4-d441-3516-8729-64fbcb355694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:46:3a:e1:a9:68:9c:18:f5:9c:e6:7e:24:1b:81:f7:9f:02: e4:61:d3:cb:13:cb:33:c2:82:b8:80:ac:8c:ba:98:44:34:be: cd:5d:59:9d:a2:3d:b6:8d:f0:00:dd:6e:cc:5b:3c:91:85:e2: f4:67:5f:9f:fc:9e:29:b7:89:cc:a3:0a:61:61:50:51:da:8a: aa:7c:3b:01:dc:9a:fb:1a:86:67:59:8b:89:ae:6f:5d:65:cb: 54:84:5b:ad:f3:b4:cc:df:87:0d:f4:00:4a:f0:6f:9f:1f:83: a9:7a:1a:b0:aa:65:ea:ad:c2:e9:06:65:22:62:29:d7:56:79: f8:e3:d5:95:8d:3c:b7:2c:d7:e3:db:75:4d:97:69:0e:e4:62: e7:00:bc:af:db:2a:c4:e3:d7:bb:a9:4c:cf:c1:67:92:d3:88: 1c:16:fe:51:2f:9f:d0:0d:a6:0c:72:2d:38:c0:a6:72:7a:3f: 24:13:4f:3c:b2:fa:13:72:9e:40:91:df:57:a9:12:be:42:20: f3:19:7b:65:5d:f4:9b:e8:ae:aa:46:da:6e:54:23:87:40:a1: 0c:04:56:86:ff:d0:bc:36:15:57:16:94:3c:95:c5:c5:af:b1: a6:1d:f6:65:5c:30:77:a6:82:72:fa:cd:5d:45:4e:58:46:eb: 02:a7:64:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz5Og39ZHny2/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDZmYWVjZDgtNTQzMi00MGI4LTgyMmMtMDM4YTExY2NkNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXnMYB2z9oCsYfejjXwcvxxDbTTY+8gTpvrk h6ZuuLJkzy9nH4cV+cD1ZpV490Vbv0ik7GPxxev8mtTSmLgvrixXRPBM5E1dK4Vn 1153b+Cvg7WLTdLuvwkRB77DKPqTxQyGXOPlKPfpxP7DTAc+kIfUn0t9qScufd2W 92u2fccPPv/FgJ5OA6g3RjP34Ej9mm4imKHWTERya3T2wp0FBPmdhOwMZjIknfI7 /KR5Ad9ruOwSjLm3bDayLHd1u8Pb4LD5NvJah3Y9McA2tW7XmyfOlfKZBjc4wbtC 2E/oYZSGFYNjV9VvAEOVLvCRAXqOdeEQcsIEef5IyDubAZNwEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDDCVYHwe1xBG1URnXmYd2SSiMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FlM2ZjYzQtZDQ0MS0z NTE2LTg3MjktNjRmYmNiMzU1Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdGOuGpaJwY9ZzmfiQbgfefAuRh08sTyzPCgriArIy6mEQ0vs1dWZ2i PbaN8ADdbsxbPJGF4vRnX5/8nim3icyjCmFhUFHaiqp8OwHcmvsahmdZi4mub11l y1SEW63ztMzfhw30AErwb58fg6l6GrCqZeqtwukGZSJiKddWefjj1ZWNPLcs1+Pb dU2XaQ7kYucAvK/bKsTj17upTM/BZ5LTiBwW/lEvn9ANpgxyLTjApnJ6PyQTTzyy +hNynkCR31epEr5CIPMZe2Vd9JvorqpG2m5UI4dAoQwEVob/0Lw2FVcWlDyVxcWv saYd9mVcMHemgnL6zV1FTlhG6wKnZBo= -----END CERTIFICATE-----Generated at Sun Apr 27 04:12:42 2025 by rpki-client