$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa File: 3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa (raw, json) Hash identifier: ecRDrjoWxw3ZQYhfNe2MLLxvVOcxH7ZkWSN3U7zVhTg= Subject key identifier: 7E:79:A8:9E:7B:A9:62:FA:B3:2D:5F:70:C3:17:B9:A3:05:29:04:7C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA995024E4F58CAEAB0980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:99:50:24:e4:f5:8c:ae:ab:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7ad4f63b-facb-4a9b-adb8-abaa5c0a379c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:ac:f9:00:d8:d8:f0:d7:8e:f9:42:64:00: a6:c1:95:94:3d:b9:bf:07:67:58:87:90:14:4a:ba: ed:a9:09:05:f7:3f:fd:ef:1e:17:b2:fa:1a:29:96: ca:2f:db:24:0c:31:f1:88:74:99:49:81:95:c8:72: bb:8e:8f:2d:03:a8:15:2a:54:18:2a:74:c7:10:e5: e4:0e:82:ec:b1:a9:80:1b:09:0c:10:af:b6:cc:bf: 3c:8b:ef:bc:08:38:7b:c5:c2:2a:ff:0c:e6:85:de: da:5d:f5:de:bb:3a:09:bf:8a:c8:97:c1:1b:ae:a8: 31:0b:e9:41:d0:50:37:85:7c:e5:78:7e:45:71:2b: 60:de:ae:1b:ed:e5:d4:6a:68:c3:d0:b4:bc:e6:6c: ca:df:b5:80:1d:0f:df:ae:ac:da:21:5a:34:65:5d: f5:32:34:c4:8e:27:d1:da:47:8e:66:f4:d3:78:7a: f9:17:a4:c3:7d:cd:33:58:f4:8f:35:ad:ab:4a:b5: e5:e4:97:1c:8c:37:1f:79:d3:ce:54:e2:80:e5:87: 42:c9:d8:73:82:b5:f4:6b:4b:f7:7a:b2:6e:8b:b9: 50:04:6b:13:bd:7b:91:03:04:cc:1a:ab:27:06:4d: b7:b4:28:02:a2:5d:7b:b1:bf:f6:b0:f5:2c:f8:90: 9f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:79:A8:9E:7B:A9:62:FA:B3:2D:5F:70:C3:17:B9:A3:05:29:04:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0c:1d:b6:ab:bc:76:85:e2:5d:45:c2:1d:34:e1:fa:5d:85: 5f:92:14:86:dc:a1:df:4e:25:8c:94:1e:05:db:4a:d2:a0:d0: eb:35:aa:bc:fe:47:19:2c:2c:ba:49:05:e8:63:f0:f2:78:1c: 94:4b:0c:7d:40:3b:3a:94:5b:eb:cc:de:5a:f4:db:bf:43:45: a6:ea:b3:9d:2f:88:b8:6f:3f:c4:06:8e:ef:58:81:a0:97:50: ae:98:39:a8:89:69:17:94:cc:67:6a:55:39:89:12:ec:bd:b4: 1d:76:38:3b:a3:59:49:38:58:61:97:d0:d4:a2:d4:2f:c5:e0: 8e:ea:7f:a8:c3:38:a9:5e:ca:57:60:d2:9f:ab:e8:ca:58:a5: 20:7c:99:01:61:ff:69:94:75:ae:7f:e4:75:fe:bb:06:f8:ec: a0:ff:4b:47:06:8d:63:3d:32:12:ee:32:f2:2e:41:71:d0:c2: 97:f5:18:cb:de:ed:2f:88:fc:0c:f1:30:c4:4f:77:d9:4c:6c: cb:1d:02:1b:41:45:b2:da:d4:ea:8c:97:8a:63:c9:30:63:b2: 21:27:d5:e2:e1:eb:7c:11:02:10:1a:fd:d7:e0:7d:c6:ff:21: cf:97:91:b3:a3:a3:3f:ef:f4:c2:f3:39:0a:09:d9:6d:f4:1b: 6e:d3:3c:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuplQJOT1jK6rCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2FkNGY2M2ItZmFjYi00YTliLWFkYjgtYWJhYTVjMGEzNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcms+QDY2PDXjvlCZACmwZWUPbm/B2dYh5AU SrrtqQkF9z/97x4XsvoaKZbKL9skDDHxiHSZSYGVyHK7jo8tA6gVKlQYKnTHEOXk DoLssamAGwkMEK+2zL88i++8CDh7xcIq/wzmhd7aXfXeuzoJv4rIl8EbrqgxC+lB 0FA3hXzleH5FcStg3q4b7eXUamjD0LS85mzK37WAHQ/frqzaIVo0ZV31MjTEjifR 2keOZvTTeHr5F6TDfc0zWPSPNa2rSrXl5JccjDcfedPOVOKA5YdCydhzgrX0a0v3 erJui7lQBGsTvXuRAwTMGqsnBk23tCgCol17sb/2sPUs+JCf9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH55qJ57qWL6sy1fcMMXuaMFKQR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2UwNGI2MDctZmRhNi0z YzFjLTg1ZmQtYTBlYWZhZDMwMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYMHbarvHaF4l1Fwh004fpdhV+SFIbcod9OJYyUHgXbStKg0Os1qrz+ RxksLLpJBehj8PJ4HJRLDH1AOzqUW+vM3lr0279DRabqs50viLhvP8QGju9YgaCX UK6YOaiJaReUzGdqVTmJEuy9tB12ODujWUk4WGGX0NSi1C/F4I7qf6jDOKleyldg 0p+r6MpYpSB8mQFh/2mUda5/5HX+uwb47KD/S0cGjWM9MhLuMvIuQXHQwpf1GMve 7S+I/AzxMMRPd9lMbMsdAhtBRbLa1OqMl4pjyTBjsiEn1eLh63wRAhAa/dfgfcb/ Ic+XkbOjoz/v9MLzOQoJ2W30G27TPCQ= -----END CERTIFICATE-----Generated at Tue Apr 29 09:28:37 2025 by rpki-client