$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d8f5d90-a69d-3cd8-a196-091546b82b17.roa File: 3d8f5d90-a69d-3cd8-a196-091546b82b17.roa (raw, json) Hash identifier: iJN3KqQxoJSsWlc9mqnsnRkIB0Ls25gtONdE0PSQZ+8= Subject key identifier: 86:4D:64:95:72:13:24:40:90:2A:65:C7:34:D1:6B:A9:BB:45:8A:1C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA98EACE1CDE7D26358380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d8f5d90-a69d-3cd8-a196-091546b82b17.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:98:ea:ce:1c:de:7d:26:35:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e431ce88-d114-45a2-897d-9f6057433bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:88:fc:d4:0e:98:d7:62:8d:ac:41:58:ff: b1:c3:d5:24:2b:86:d7:74:ff:ba:3b:2d:dd:89:b6: 66:33:2d:35:93:8d:d8:71:8f:d2:9b:7b:0f:41:16: 13:11:0f:bc:55:a7:61:53:a8:b2:7d:12:da:a5:90: f1:8c:d5:e7:28:e5:b7:60:8b:0d:6b:f6:db:da:62: 87:19:11:73:5f:28:fc:2a:6a:a8:57:40:58:73:2d: cd:57:84:34:b4:9b:3c:a5:35:04:af:68:af:28:4e: 57:63:eb:25:01:a7:ce:44:f6:d6:26:9d:12:3a:ae: 9e:e1:80:8f:ee:86:18:04:60:6b:e2:c0:e4:39:58: 57:a5:c6:47:5a:52:b0:07:eb:bc:39:db:ac:3a:e3: d2:85:1f:aa:53:f9:fe:f6:8b:52:c0:8e:a6:85:a3: bb:d3:bf:a3:84:57:24:8b:e0:8c:53:8e:6e:d5:8b: 44:b2:d6:94:5f:30:19:a3:04:c7:f5:b7:d1:4d:a1: 23:2e:5d:f7:d2:df:d9:24:b2:db:a0:61:c8:e9:f9: aa:1d:b7:01:2c:2d:ca:df:27:5e:27:44:f9:4e:1d: 14:dd:07:dc:5d:b6:63:d1:64:9b:87:d7:2a:53:1b: 30:fc:76:65:b9:47:54:d9:04:09:cf:62:70:52:1a: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4D:64:95:72:13:24:40:90:2A:65:C7:34:D1:6B:A9:BB:45:8A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d8f5d90-a69d-3cd8-a196-091546b82b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:2b:0c:ef:f9:8a:1e:c4:df:83:f7:00:33:04:d6:86:bc:13: 5c:0c:a7:d6:4e:9a:10:e3:de:e6:02:7e:1a:33:ba:d7:f9:ba: 87:3e:ef:e0:cc:2f:26:95:aa:8c:79:6a:56:58:44:1d:db:7b: 29:b7:07:e2:f4:3c:d5:d1:4d:3b:90:85:2b:2b:4b:ee:79:a9: 53:37:c7:29:8f:f6:36:98:fd:a6:b1:05:bf:c4:eb:30:a1:b4: 36:a1:b3:b2:ce:91:b2:03:03:37:80:dc:61:12:b0:1d:14:af: 05:1d:58:98:4b:cb:29:10:bc:68:d7:8d:37:7c:6e:2e:eb:33: d4:ac:2f:45:1c:9f:5c:31:b5:5b:a7:b2:6b:91:55:92:1e:ef: dd:2c:a7:e0:8c:f5:e7:59:84:23:e6:e5:9a:f4:d0:6a:cb:dd: ce:7f:cc:cf:59:e6:25:ff:84:50:bb:5c:25:22:a9:59:72:72: 5c:6b:7a:6a:bc:1b:44:ed:e7:6f:b8:e7:6d:0e:18:1e:c5:25: aa:c5:b3:ba:e9:10:6f:96:64:0d:29:94:ed:03:a5:33:20:80: d9:91:81:93:0f:6d:66:e3:0b:24:f5:8b:5f:41:b6:38:8d:99: 1b:ca:b0:76:a8:25:28:a7:20:fe:bb:92:24:4e:db:93:fe:4a: 60:35:70:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupjqzhzefSY1g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTQzMWNlODgtZDExNC00NWEyLTg5N2QtOWY2MDU3NDMzYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbSI/NQOmNdijaxBWP+xw9UkK4bXdP+6Oy3d ibZmMy01k43YcY/Sm3sPQRYTEQ+8VadhU6iyfRLapZDxjNXnKOW3YIsNa/bb2mKH GRFzXyj8KmqoV0BYcy3NV4Q0tJs8pTUEr2ivKE5XY+slAafORPbWJp0SOq6e4YCP 7oYYBGBr4sDkOVhXpcZHWlKwB+u8OdusOuPShR+qU/n+9otSwI6mhaO707+jhFck i+CMU45u1YtEstaUXzAZowTH9bfRTaEjLl330t/ZJLLboGHI6fmqHbcBLC3K3yde J0T5Th0U3QfcXbZj0WSbh9cqUxsw/HZluUdU2QQJz2JwUhobowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZNZJVyEyRAkCplxzTRa6m7RYocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Q4ZjVkOTAtYTY5ZC0z Y2Q4LWExOTYtMDkxNTQ2YjgyYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIrDO/5ih7E34P3ADME1oa8E1wMp9ZOmhDj3uYCfhozutf5uoc+7+DM LyaVqox5alZYRB3beym3B+L0PNXRTTuQhSsrS+55qVM3xymP9jaY/aaxBb/E6zCh tDahs7LOkbIDAzeA3GESsB0UrwUdWJhLyykQvGjXjTd8bi7rM9SsL0Ucn1wxtVun smuRVZIe790sp+CM9edZhCPm5Zr00GrL3c5/zM9Z5iX/hFC7XCUiqVlyclxremq8 G0Tt52+4520OGB7FJarFs7rpEG+WZA0plO0DpTMggNmRgZMPbWbjCyT1i19BtjiN mRvKsHaoJSinIP67kiRO25P+SmA1cG0= -----END CERTIFICATE-----Generated at Sun Apr 27 15:22:11 2025 by rpki-client