$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa File: 442ff00f-ad65-3434-8575-a778d87e141b.roa (raw, json) Hash identifier: JkW2Cg+aAC5RrJeRzcVi+Io0/rgz2rrICCm+k44D8Jw= Subject key identifier: B9:44:5B:A4:B3:8C:F9:EF:7A:45:56:13:A5:9F:B7:59:13:53:E2:62 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B932CE4132214FE36A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:93:2c:e4:13:22:14:fe:36:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=edc5c229-27f2-4779-8bc0-7c7c12f7ce82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:96:80:8f:08:bc:b1:1c:0c:b3:0d:00:57:3e: 5b:73:c5:32:05:aa:be:6b:91:b4:e9:f8:99:d4:36: 04:c8:3f:d4:b1:48:45:b0:36:d9:c4:c2:0f:ff:2f: e1:33:bb:21:51:b5:52:5e:6b:f4:22:23:2d:d8:b6: 75:03:19:b4:fd:b8:c3:db:5b:a6:c2:e5:35:28:0f: c4:86:0c:54:27:3d:16:9e:9b:5f:cf:23:10:23:05: 0b:0c:a5:8f:56:b7:b1:f4:dc:46:4a:bf:f3:bb:b4: 2c:56:49:25:c7:4c:f3:c7:96:37:a8:6f:9e:03:32: 8d:34:c9:24:20:a8:e6:e8:63:dd:6a:7b:68:7a:80: dc:59:6f:db:5b:d4:5d:1f:8e:20:ce:cb:74:07:4b: 9e:16:81:de:bf:26:de:ee:4a:4b:2c:57:61:fb:3e: a8:88:f3:ac:48:47:99:2d:f1:3d:a6:bd:73:a7:c6: 17:bf:b9:bc:96:5f:71:d9:3b:bc:29:53:06:6d:dd: b6:ba:49:b4:4c:fe:e1:be:56:af:9e:9f:62:09:c2: e9:7c:ed:9d:07:29:0d:2d:6b:bb:ac:4e:3e:1c:79: 78:0a:83:cf:eb:62:b4:bf:ba:d6:b2:7f:9f:a3:ff: 34:3d:e7:60:86:0d:4d:0b:f2:20:ea:c1:a2:cd:a4: c3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:44:5B:A4:B3:8C:F9:EF:7A:45:56:13:A5:9F:B7:59:13:53:E2:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:aa:6c:8d:3f:e1:cd:f4:39:1e:1e:24:d3:d5:18:8d:9b:93: 3b:0e:5a:35:42:c4:00:7e:f8:63:d6:7f:c1:13:40:3c:8a:16: ff:45:aa:d9:49:fc:62:18:da:0d:a3:89:8b:f3:74:9a:99:58: 0b:d5:02:11:81:96:43:b2:a1:8e:95:1b:ff:a5:22:ee:66:26: 05:d1:7f:0d:76:8b:b8:22:d6:e4:a1:cc:67:21:f0:39:91:09: 1a:8b:57:a7:d1:88:c0:7f:32:6f:50:0e:16:77:7c:78:13:7d: de:1d:ef:7b:99:92:53:5c:22:bf:0f:d8:64:8b:7f:f2:eb:d2: 17:ed:02:90:d5:81:c1:a6:8c:ea:dc:15:fc:39:93:d4:81:b1: 57:fa:7c:9d:95:8f:6f:d0:eb:2a:77:59:4f:15:da:d0:a4:d0: 8c:aa:14:e6:43:c3:8c:7c:fc:1c:73:74:be:d2:2b:09:d8:f7: 64:30:0d:fc:54:ac:f4:15:71:f8:df:1b:b4:3e:98:1c:dd:f7: 82:87:6c:84:af:87:35:dd:36:15:c6:3c:cf:0d:22:59:54:bf: e2:c0:bb:ad:6a:ae:09:60:c1:51:42:30:90:c4:c2:42:34:fe: 05:2c:a9:b8:2d:50:b8:a9:ae:b6:a5:e1:63:1a:c3:b0:af:be: 23:09:e6:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzuTLOQTIhT+NqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWRjNWMyMjktMjdmMi00Nzc5LThiYzAtN2M3YzEyZjdjZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5aAjwi8sRwMsw0AVz5bc8UyBaq+a5G06fiZ 1DYEyD/UsUhFsDbZxMIP/y/hM7shUbVSXmv0IiMt2LZ1Axm0/bjD21umwuU1KA/E hgxUJz0WnptfzyMQIwULDKWPVrex9NxGSr/zu7QsVkklx0zzx5Y3qG+eAzKNNMkk IKjm6GPdantoeoDcWW/bW9RdH44gzst0B0ueFoHevybe7kpLLFdh+z6oiPOsSEeZ LfE9pr1zp8YXv7m8ll9x2Tu8KVMGbd22ukm0TP7hvlavnp9iCcLpfO2dBykNLWu7 rE4+HHl4CoPP62K0v7rWsn+fo/80Pedghg1NC/Ig6sGizaTDSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlEW6SzjPnvekVWE6Wft1kTU+JiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDQyZmYwMGYtYWQ2NS0z NDM0LTg1NzUtYTc3OGQ4N2UxNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2qbI0/4c30OR4eJNPVGI2bkzsOWjVCxAB++GPWf8ETQDyKFv9FqtlJ /GIY2g2jiYvzdJqZWAvVAhGBlkOyoY6VG/+lIu5mJgXRfw12i7gi1uShzGch8DmR CRqLV6fRiMB/Mm9QDhZ3fHgTfd4d73uZklNcIr8P2GSLf/Lr0hftApDVgcGmjOrc Ffw5k9SBsVf6fJ2Vj2/Q6yp3WU8V2tCk0IyqFOZDw4x8/BxzdL7SKwnY92QwDfxU rPQVcfjfG7Q+mBzd94KHbISvhzXdNhXGPM8NIllUv+LAu61qrglgwVFCMJDEwkI0 /gUsqbgtULiprral4WMaw7CvviMJ5nQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:18:57 2025 by rpki-client