$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46e286ff-ba5d-357f-b2c0-8ae233476de2.roa File: 46e286ff-ba5d-357f-b2c0-8ae233476de2.roa (raw, json) Hash identifier: TkbcRF8L8zIgcsJagxxYh7HhDyyY3RE+J2TefgXI8fI= Subject key identifier: 4B:6C:E2:BD:D9:B1:89:3F:58:CA:17:64:68:B2:CB:D3:A4:D8:DC:15 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB32545A9C135C0922B340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46e286ff-ba5d-357f-b2c0-8ae233476de2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:32:54:5a:9c:13:5c:09:22:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=903b969e-6146-470f-a796-1ce47b7d4aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0b:8d:fb:6b:da:37:3f:fb:99:4e:33:5b:07: ff:24:6e:af:82:15:52:9e:45:6a:d5:58:d4:92:1b: 72:f8:5d:51:57:ce:49:01:75:3c:a8:3f:26:32:9e: af:7b:d4:ea:2b:10:fc:a9:78:be:a9:03:b3:f3:f4: c4:23:5e:c7:4a:ae:d9:9a:f1:37:0f:62:9c:1b:5e: 0e:a0:de:ac:03:78:4f:1b:db:5e:40:a2:81:ef:a2: 4f:f0:69:33:7b:6b:e4:1e:af:48:81:ac:83:9a:2a: ec:38:7e:1d:ad:be:c0:2a:b3:50:74:64:9c:d3:1f: 53:49:a6:d0:96:69:eb:9d:77:2b:48:93:09:87:c0: b1:9d:39:08:a3:60:dd:80:c1:ee:24:a0:6a:7e:19: af:b6:30:7f:c3:9b:4d:0b:91:02:e3:05:d5:b0:05: ec:70:c1:7d:d8:2b:17:fb:f3:20:48:76:ed:2e:f5: df:b5:b9:47:5a:df:b2:5f:ef:52:38:93:b3:83:ab: a6:5b:f0:cd:81:1a:8e:7e:80:c5:6b:83:ac:fe:49: b0:8c:23:80:5a:d0:29:45:59:c2:25:1e:e9:72:89: df:15:a7:d4:29:8e:d9:e9:5e:37:63:ce:a2:fa:38: f4:01:f5:f7:fa:ca:54:8c:13:ee:68:ed:95:8b:de: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6C:E2:BD:D9:B1:89:3F:58:CA:17:64:68:B2:CB:D3:A4:D8:DC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46e286ff-ba5d-357f-b2c0-8ae233476de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7d:ac:0d:04:7a:0e:12:d2:84:9a:a0:d0:40:23:ba:9c:50: bb:58:d8:f4:da:22:2f:67:3e:2f:4a:4e:15:bb:65:9c:f8:5f: b2:65:03:c5:3a:6d:0f:70:91:f1:3f:3f:7b:af:e7:d4:09:63: e2:87:60:e2:90:39:0a:ad:79:f8:e4:98:de:c2:11:c0:9a:66: 42:37:1b:b8:a4:20:f8:0c:31:c9:16:42:ef:e7:5c:6f:0c:3c: 4d:8c:23:6d:fc:ea:7c:a1:37:36:36:99:56:7f:80:ad:af:8b: bc:0c:b2:40:c1:f1:88:76:93:5b:1e:c9:86:b4:44:bd:2e:93: 66:a3:6c:89:9f:af:a1:b9:d0:89:a0:b7:19:dd:b7:fa:78:73: 16:c4:59:b0:1f:1c:6b:c3:c1:95:bd:8a:ab:8e:c4:20:39:5a: 24:5d:95:8e:ff:1f:48:e2:89:56:6b:91:79:16:cd:42:0d:eb: 07:51:c2:12:b3:91:13:d4:03:d6:8c:29:f5:bc:34:ac:b4:13: 80:ff:2e:62:c4:13:27:14:f4:41:eb:68:7d:d3:2a:e3:1e:4e: 50:1d:30:1b:f3:a2:cb:c7:22:97:c6:36:9b:8f:4c:bd:0e:cd: 4a:ad:52:77:88:b0:90:3d:74:24:3a:7c:55:e5:78:13:e9:20: bc:9b:67:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzJUWpwTXAkis0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTAzYjk2OWUtNjE0Ni00NzBmLWE3OTYtMWNlNDdiN2Q0YWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAuN+2vaNz/7mU4zWwf/JG6vghVSnkVq1VjU khty+F1RV85JAXU8qD8mMp6ve9TqKxD8qXi+qQOz8/TEI17HSq7ZmvE3D2KcG14O oN6sA3hPG9teQKKB76JP8Gkze2vkHq9IgayDmirsOH4drb7AKrNQdGSc0x9TSabQ lmnrnXcrSJMJh8CxnTkIo2DdgMHuJKBqfhmvtjB/w5tNC5EC4wXVsAXscMF92CsX +/MgSHbtLvXftblHWt+yX+9SOJOzg6umW/DNgRqOfoDFa4Os/kmwjCOAWtApRVnC JR7pconfFafUKY7Z6V43Y86i+jj0AfX3+spUjBPuaO2Vi96JQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEts4r3ZsYk/WMoXZGiyy9Ok2NwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDZlMjg2ZmYtYmE1ZC0z NTdmLWIyYzAtOGFlMjMzNDc2ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd9rA0Eeg4S0oSaoNBAI7qcULtY2PTaIi9nPi9KThW7ZZz4X7JlA8U6 bQ9wkfE/P3uv59QJY+KHYOKQOQqtefjkmN7CEcCaZkI3G7ikIPgMMckWQu/nXG8M PE2MI2386nyhNzY2mVZ/gK2vi7wMskDB8Yh2k1seyYa0RL0uk2ajbImfr6G50Img txndt/p4cxbEWbAfHGvDwZW9iquOxCA5WiRdlY7/H0jiiVZrkXkWzUIN6wdRwhKz kRPUA9aMKfW8NKy0E4D/LmLEEycU9EHraH3TKuMeTlAdMBvzosvHIpfGNpuPTL0O zUqtUneIsJA9dCQ6fFXleBPpILybZ9E= -----END CERTIFICATE-----Generated at Sun Apr 27 04:09:09 2025 by rpki-client