$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46d6877f-dec3-3b23-acc9-6e3bef9b4454.roa File: 46d6877f-dec3-3b23-acc9-6e3bef9b4454.roa (raw, json) Hash identifier: mHLtxZyX4Dn/7l6fkc5/BU/FukWvtqAY84k8SYDWyR4= Subject key identifier: AA:34:C0:0E:86:5D:BE:61:7E:20:7A:9B:2D:8F:FB:70:8F:22:9C:FE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA93024F78543CF3F73480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46d6877f-dec3-3b23-acc9-6e3bef9b4454.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:93:02:4f:78:54:3c:f3:f7:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=281f741b-4dd4-42e5-8220-b0ca59459883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:6f:41:26:ed:65:d9:7d:4d:d6:e9:5f:3d: ad:ef:60:5c:d0:ce:c8:fa:9e:6e:67:38:e5:4f:9a: fa:fa:8b:28:99:b1:f2:11:25:8e:b5:79:8b:c5:90: ac:bd:a4:01:63:ff:00:d2:18:21:3c:e8:c5:55:80: 20:3b:92:4c:43:09:31:99:0a:7b:14:b5:67:4a:01: 6a:86:40:37:6f:47:83:fb:b7:47:54:c2:73:e6:d9: b6:c4:17:f1:c6:af:33:39:bc:84:55:de:0d:7b:3b: 73:8d:fc:ae:db:57:03:ee:60:2d:bf:91:1f:e5:46: 87:e6:fc:27:7b:2b:f7:18:3a:43:75:ad:51:ec:95: 4a:6e:7a:39:6a:6a:b1:15:a2:c9:44:de:f2:7c:83: 11:88:81:02:fd:e7:69:4c:4c:d8:6f:4e:e2:ae:64: 12:48:32:4a:dc:dc:e2:34:7f:02:cc:a1:31:f5:ed: 1f:9f:a0:4e:1f:c8:d5:4c:23:a7:89:93:11:f4:97: f4:f2:fb:c6:d1:f0:37:fb:9b:e6:bb:6e:4b:d5:5c: c4:a3:4c:d5:b1:39:da:be:f3:33:36:90:18:4c:f1: 6b:f9:11:6e:d4:e2:a0:69:f1:ef:55:1f:6c:77:b2: 5b:ce:70:0e:0e:a4:fb:9f:0d:d2:d6:1a:69:f4:12: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:34:C0:0E:86:5D:BE:61:7E:20:7A:9B:2D:8F:FB:70:8F:22:9C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46d6877f-dec3-3b23-acc9-6e3bef9b4454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d2:7a:34:9d:a6:e6:a1:7a:10:18:53:4c:37:1d:98:c7:46: 82:69:31:c7:a7:b7:9b:72:fa:a3:06:8c:2e:a0:fc:47:31:d7: 58:74:bf:59:9a:49:7e:ff:0c:e8:5f:62:70:ce:c6:94:db:43: 11:3d:d9:51:ed:9f:41:a3:d3:dc:c3:87:1d:ef:95:d7:17:29: 6e:ef:12:cb:45:f9:9c:3f:c0:de:9a:e1:a4:0e:b0:70:82:42: af:60:d2:7a:f9:13:bf:0b:b9:c8:77:a0:0b:fe:f5:9b:31:49: 15:df:81:62:98:93:79:ce:4b:77:7e:de:00:55:95:1e:2e:08: ff:e3:5c:eb:ea:7a:4d:16:49:5e:7a:c9:a8:c7:39:18:4c:85: 4d:33:5a:5d:b8:8f:98:19:7b:4f:59:a7:6d:d2:44:79:c4:2c: f6:9d:48:49:b0:c4:6f:c5:d8:b9:a3:e7:38:44:2f:57:de:b9: 5b:1f:26:67:2a:6f:00:02:da:bb:a4:df:00:11:e5:5b:53:76: a7:68:02:33:49:72:82:78:02:83:c5:8a:38:26:7b:fe:01:99: 7a:df:ff:f7:99:8d:4c:a5:e5:0c:f2:6c:c1:00:bf:69:07:0a: d5:79:60:1b:bf:d8:e1:1a:29:68:ba:18:9e:5c:be:2c:a6:e8: 70:bc:3a:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupMCT3hUPPP3NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjgxZjc0MWItNGRkNC00MmU1LTgyMjAtYjBjYTU5NDU5ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLNvQSbtZdl9TdbpXz2t72Bc0M7I+p5uZzjl T5r6+osombHyESWOtXmLxZCsvaQBY/8A0hghPOjFVYAgO5JMQwkxmQp7FLVnSgFq hkA3b0eD+7dHVMJz5tm2xBfxxq8zObyEVd4Neztzjfyu21cD7mAtv5Ef5UaH5vwn eyv3GDpDda1R7JVKbno5amqxFaLJRN7yfIMRiIEC/edpTEzYb07irmQSSDJK3Nzi NH8CzKEx9e0fn6BOH8jVTCOniZMR9Jf08vvG0fA3+5vmu25L1VzEo0zVsTnavvMz NpAYTPFr+RFu1OKgafHvVR9sd7JbznAODqT7nw3S1hpp9BIIOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo0wA6GXb5hfiB6my2P+3CPIpz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDZkNjg3N2YtZGVjMy0z YjIzLWFjYzktNmUzYmVmOWI0NDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrSejSdpuahehAYU0w3HZjHRoJpMcent5ty+qMGjC6g/Ecx11h0v1ma SX7/DOhfYnDOxpTbQxE92VHtn0Gj09zDhx3vldcXKW7vEstF+Zw/wN6a4aQOsHCC Qq9g0nr5E78Luch3oAv+9ZsxSRXfgWKYk3nOS3d+3gBVlR4uCP/jXOvqek0WSV56 yajHORhMhU0zWl24j5gZe09Zp23SRHnELPadSEmwxG/F2Lmj5zhEL1feuVsfJmcq bwAC2ruk3wAR5VtTdqdoAjNJcoJ4AoPFijgme/4BmXrf//eZjUyl5QzybMEAv2kH CtV5YBu/2OEaKWi6GJ5cviym6HC8Oqk= -----END CERTIFICATE-----Generated at Sun Apr 27 02:13:24 2025 by rpki-client