$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42e37a7b-e8a0-3666-b6d5-d437b4ae2ddc.roa File: 42e37a7b-e8a0-3666-b6d5-d437b4ae2ddc.roa (raw, json) Hash identifier: qmreY90748y0OvzOeO6szZ+s2SB2kfP4ZcmVtSQ3Ux0= Subject key identifier: 5A:CF:A2:17:45:53:98:DF:CE:A7:66:6B:DD:65:39:5E:B6:F7:57:DB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B274A523766BFA4E038 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42e37a7b-e8a0-3666-b6d5-d437b4ae2ddc.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:27:4a:52:37:66:bf:a4:e0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c8c332b0-9b65-4f83-bcdf-e6c703219b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:87:56:0a:b3:3a:3f:ea:ec:a0:d1:02:c2: ef:b1:3e:8c:ff:de:47:3d:90:04:75:87:08:60:6c: 70:b6:d0:64:bc:4d:dc:5d:ac:25:81:cb:ff:62:b6: 31:c7:f3:d4:6e:ac:af:a5:b0:51:9a:9f:d4:b5:38: 4a:3e:e8:c3:ba:0a:40:52:c1:5b:cd:bf:b2:dd:b8: a9:dc:f7:0a:fe:3f:d1:66:a4:8c:fe:fd:76:c7:46: 90:05:e5:0f:4a:c0:3f:ac:ec:e4:af:23:d1:2f:3b: a4:85:ad:fc:66:9d:f3:95:94:cc:25:cc:a9:f8:5e: 4c:18:70:fe:62:22:1b:13:5b:1c:2b:a5:10:c5:e1: f0:c2:00:0a:ee:01:b8:36:a9:23:77:6f:be:6f:d0: 98:3b:83:d6:f9:24:c3:3a:0e:3c:bd:0f:7c:70:8c: 42:ac:cc:75:2b:53:70:06:0e:91:46:f8:15:f4:ee: d6:f5:87:70:70:3d:3c:56:85:8b:60:6c:cd:6d:dd: 54:65:d1:aa:a2:27:00:c7:1f:6c:37:24:96:95:f5: 18:d8:af:3a:a0:91:af:e5:a0:fd:a0:ca:c3:9d:b7: 23:57:f8:92:5d:eb:57:30:43:c5:23:4d:df:65:fc: f9:6d:8d:d4:09:29:3f:8a:f5:7c:f6:b4:71:27:81: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CF:A2:17:45:53:98:DF:CE:A7:66:6B:DD:65:39:5E:B6:F7:57:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42e37a7b-e8a0-3666-b6d5-d437b4ae2ddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5e:d6:9d:53:f3:dd:11:a7:83:85:a8:8b:f2:17:08:76:7c: 1d:f8:a7:cd:ea:d0:b3:27:0c:f8:82:51:45:63:cb:fb:a9:84: b7:f2:fb:7e:8f:36:0a:1a:22:5b:e6:2d:d1:88:12:ad:d8:95: 4e:b1:b2:00:27:85:b6:29:00:e1:c1:67:00:90:35:6f:13:19: 69:8b:4f:c2:e7:07:88:59:fc:47:7c:60:52:4d:89:4c:6e:64: 27:d0:4b:60:55:42:21:71:13:b7:95:37:77:3c:2e:e4:21:54: 6c:24:c9:10:3a:26:21:ba:90:8d:c7:40:33:b3:47:cf:1a:ad: 4e:ad:06:88:a2:d8:4c:fc:7f:5b:3c:81:a0:f2:b5:53:1d:77: f8:c6:6f:a9:ee:68:d2:cc:3b:db:dd:56:4a:4c:e9:61:ab:e1: 0a:ac:2a:4a:de:4b:ec:b2:e4:9f:7b:07:e8:f3:b6:c9:76:e6: d1:0f:e6:c0:30:a6:cc:22:d6:aa:5f:63:5c:8b:7c:43:3e:55: 9c:7a:df:07:04:c0:ec:e6:f5:9f:f9:f8:dc:8c:7e:98:74:87: 20:90:27:63:1e:96:7e:bf:0d:a7:5c:96:07:46:c1:24:b6:73: 0a:78:28:ee:89:89:b0:a3:9f:a5:b5:ad:a6:af:40:6b:50:cc: ef:6a:2d:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzsnSlI3Zr+k4DgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzhjMzMyYjAtOWI2NS00ZjgzLWJjZGYtZTZjNzAzMjE5YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPGHVgqzOj/q7KDRAsLvsT6M/95HPZAEdYcI YGxwttBkvE3cXawlgcv/YrYxx/PUbqyvpbBRmp/UtThKPujDugpAUsFbzb+y3bip 3PcK/j/RZqSM/v12x0aQBeUPSsA/rOzkryPRLzukha38Zp3zlZTMJcyp+F5MGHD+ YiIbE1scK6UQxeHwwgAK7gG4Nqkjd2++b9CYO4PW+STDOg48vQ98cIxCrMx1K1Nw Bg6RRvgV9O7W9YdwcD08VoWLYGzNbd1UZdGqoicAxx9sNySWlfUY2K86oJGv5aD9 oMrDnbcjV/iSXetXMEPFI03fZfz5bY3UCSk/ivV89rRxJ4FAVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrPohdFU5jfzqdma91lOV6291fbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDJlMzdhN2ItZThhMC0z NjY2LWI2ZDUtZDQzN2I0YWUyZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpe1p1T890Rp4OFqIvyFwh2fB34p83q0LMnDPiCUUVjy/uphLfy+36P NgoaIlvmLdGIEq3YlU6xsgAnhbYpAOHBZwCQNW8TGWmLT8LnB4hZ/Ed8YFJNiUxu ZCfQS2BVQiFxE7eVN3c8LuQhVGwkyRA6JiG6kI3HQDOzR88arU6tBoii2Ez8f1s8 gaDytVMdd/jGb6nuaNLMO9vdVkpM6WGr4QqsKkreS+yy5J97B+jztsl25tEP5sAw pswi1qpfY1yLfEM+VZx63wcEwOzm9Z/5+NyMfph0hyCQJ2Meln6/DadclgdGwSS2 cwp4KO6JibCjn6W1raavQGtQzO9qLRo= -----END CERTIFICATE-----Generated at Sun Apr 27 23:55:35 2025 by rpki-client