$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4381f79e-f9af-3c5f-9483-1dd302308e4c.roa File: 4381f79e-f9af-3c5f-9483-1dd302308e4c.roa (raw, json) Hash identifier: a7Sdou6o8tAAlvYw+q+cNjlFMuOCflBSOBnUcX0z+No= Subject key identifier: BC:79:F4:49:6D:6D:E0:AF:81:17:43:78:81:27:43:87:DC:DA:53:E1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA92A48F8D52D6A3C4CB80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4381f79e-f9af-3c5f-9483-1dd302308e4c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:92:a4:8f:8d:52:d6:a3:c4:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aff6d598-3932-4014-9056-37bd8b70a5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:29:f8:33:fb:7d:e8:5c:a4:08:7f:7f:57: 07:66:4a:e2:95:2e:c1:8c:08:7c:0f:0d:ba:9e:dd: f2:bf:9f:1f:64:fb:de:f6:e2:f7:7f:72:c2:38:1b: 62:32:6f:1d:17:8d:b0:67:29:1b:11:50:17:68:dc: 68:0c:21:05:d5:07:4f:4f:a0:46:e0:48:62:f5:48: 43:30:53:b2:bf:24:0c:68:e0:ab:b5:8c:fc:3a:4c: bf:93:b7:5b:9a:84:33:6d:13:3a:8e:6d:80:99:fe: 82:43:a8:d3:8a:a0:ff:cd:13:6a:65:5b:a8:13:f8: 80:ab:73:0c:66:f0:6a:cf:36:c2:29:c0:dc:35:e5: c8:14:57:90:1c:27:d8:ad:82:ae:f9:e1:63:58:0b: d7:32:de:17:5d:e6:49:24:57:e2:57:4b:25:6a:7f: 24:4c:98:e9:be:0b:17:c0:34:94:f2:7b:72:eb:ff: 4c:8d:c7:a3:fa:2a:e3:90:bb:c7:e1:a5:c8:a3:83: 56:26:5e:b4:6a:df:f6:f2:57:3a:45:ff:a2:81:22: 6b:ea:b3:b2:70:a4:b4:32:85:6e:6b:0d:86:f2:34: 67:b5:5d:83:2e:bb:eb:fb:f9:37:cf:d5:94:37:7b: 5a:79:67:48:50:8b:c2:c3:64:30:30:f4:ba:63:50: 2e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:79:F4:49:6D:6D:E0:AF:81:17:43:78:81:27:43:87:DC:DA:53:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4381f79e-f9af-3c5f-9483-1dd302308e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:70:72:27:1d:d3:7a:c6:c1:3e:3c:46:a4:d3:79:7e:04:55: 4a:7f:08:cf:21:dc:30:25:f2:ff:b9:5f:3a:9a:99:13:b7:10: 72:87:f9:98:72:65:b2:e2:ce:0e:bd:85:03:ae:fa:0a:33:e6: 60:73:21:82:7b:d6:20:d9:21:01:21:28:7e:a7:04:7a:a5:29: af:96:ca:c5:da:97:3a:8e:df:2d:d3:a8:dd:4d:75:5e:3b:d5: 57:41:3a:2e:a8:6d:18:98:ad:0d:5a:63:f0:53:7d:53:b1:7c: 4c:dc:31:4d:3d:87:fc:ef:ee:4f:6b:dd:39:82:d1:da:cf:22: 64:e1:b2:57:2c:8b:ca:62:fd:98:77:f7:7a:43:14:86:7f:25: b8:2c:7a:3d:d5:6b:0e:74:ca:a1:01:f4:a6:ca:12:d9:e1:3f: 6e:02:b9:11:83:db:e4:a6:71:42:53:ce:53:72:82:e4:17:46: 48:26:2d:df:b0:18:39:e7:85:28:43:c4:a6:91:f0:ba:0c:b7: 33:0c:67:34:dd:3c:a1:ff:6f:6d:c7:76:1f:32:0e:bd:3a:bc: 1c:5f:9a:f2:dd:33:65:12:56:0f:82:2a:26:7f:3d:1f:96:71: 36:d3:c6:63:08:4c:22:4d:98:80:7d:41:b7:4d:cb:ac:a5:ce: ac:5e:4c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupKkj41S1qPEy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWZmNmQ1OTgtMzkzMi00MDE0LTkwNTYtMzdiZDhiNzBhNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfQp+DP7fehcpAh/f1cHZkrilS7BjAh8Dw26 nt3yv58fZPve9uL3f3LCOBtiMm8dF42wZykbEVAXaNxoDCEF1QdPT6BG4Ehi9UhD MFOyvyQMaOCrtYz8Oky/k7dbmoQzbRM6jm2Amf6CQ6jTiqD/zRNqZVuoE/iAq3MM ZvBqzzbCKcDcNeXIFFeQHCfYrYKu+eFjWAvXMt4XXeZJJFfiV0slan8kTJjpvgsX wDSU8nty6/9Mjcej+irjkLvH4aXIo4NWJl60at/28lc6Rf+igSJr6rOycKS0MoVu aw2G8jRntV2DLrvr+/k3z9WUN3taeWdIUIvCw2QwMPS6Y1AuIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx59EltbeCvgRdDeIEnQ4fc2lPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDM4MWY3OWUtZjlhZi0z YzVmLTk0ODMtMWRkMzAyMzA4ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtwcicd03rGwT48RqTTeX4EVUp/CM8h3DAl8v+5XzqamRO3EHKH+Zhy ZbLizg69hQOu+goz5mBzIYJ71iDZIQEhKH6nBHqlKa+WysXalzqO3y3TqN1NdV47 1VdBOi6obRiYrQ1aY/BTfVOxfEzcMU09h/zv7k9r3TmC0drPImThslcsi8pi/Zh3 93pDFIZ/Jbgsej3Vaw50yqEB9KbKEtnhP24CuRGD2+SmcUJTzlNyguQXRkgmLd+w GDnnhShDxKaR8LoMtzMMZzTdPKH/b23Hdh8yDr06vBxfmvLdM2USVg+CKiZ/PR+W cTbTxmMITCJNmIB9QbdNy6ylzqxeTGY= -----END CERTIFICATE-----Generated at Sun Apr 27 05:40:38 2025 by rpki-client