$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/490fcfec-4f2c-3d18-902b-b765d68ef9a3.roa File: 490fcfec-4f2c-3d18-902b-b765d68ef9a3.roa (raw, json) Hash identifier: XAuUgMVjv/4FDG0BKwxYSoldqkhUqg4jDbi4m4830PM= Subject key identifier: 0B:97:CF:92:D3:D7:EE:F8:19:77:08:0E:6E:BB:31:56:3C:8B:39:CC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3D5CB58F4C51FB95A720 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/490fcfec-4f2c-3d18-902b-b765d68ef9a3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3d:5c:b5:8f:4c:51:fb:95:a7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=98b41dd4-e54e-4942-88ee-ce3c9344d089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:12:18:63:65:30:61:19:54:d1:c2:bd:44:5d: 68:0a:53:ad:a9:9d:29:31:b5:66:b0:89:6b:73:b5: 04:ae:30:bf:72:1f:c6:ac:a9:32:60:39:1e:37:f5: 6f:e6:08:8a:dc:35:23:38:16:19:e6:18:41:8d:2e: 46:0c:8d:c1:6d:14:d1:39:22:3d:df:fa:93:74:6f: 60:3e:83:b2:d1:cd:c0:af:61:f4:44:a3:58:35:c2: a2:44:3e:06:f9:07:bc:76:2a:57:30:91:87:9e:bb: b0:af:74:66:38:23:15:3e:b6:aa:18:7b:68:30:ae: 75:2a:0a:2f:fb:e7:fe:57:0a:42:bc:79:0a:0d:2a: 1a:97:d1:4c:6a:16:af:c4:36:c2:17:00:30:47:c5: b1:a3:42:6d:09:a0:76:c1:46:45:1f:5c:c2:20:38: 3b:70:40:6c:14:91:cb:bd:fa:ae:3d:a3:cf:6b:0b: 87:4f:d7:7d:19:bb:34:15:c8:2d:f9:2d:56:7a:db: 23:14:63:5f:c0:d6:d6:86:99:a5:9a:c5:b4:99:a5: 26:cf:96:a3:10:08:1c:a8:4e:dc:35:f8:3a:c7:55: 83:a3:37:a8:10:78:2a:85:12:c3:52:10:bd:db:8d: 7e:ae:c2:47:88:2e:3b:f5:0d:15:6d:78:9d:8a:5c: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:97:CF:92:D3:D7:EE:F8:19:77:08:0E:6E:BB:31:56:3C:8B:39:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/490fcfec-4f2c-3d18-902b-b765d68ef9a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:74:1c:94:79:1c:c8:74:5e:26:fe:dd:5c:ef:13:22:cc:c5: 71:a8:bb:7e:db:38:9f:23:fe:b3:97:84:cb:e3:58:68:11:29: b4:2b:1a:41:ea:8e:69:a9:4a:d9:60:21:81:a8:3d:f7:a0:05: a0:6f:d8:7d:d3:75:72:ba:35:d2:83:1f:89:68:8a:32:b7:da: f9:5b:bf:d6:64:65:42:c0:a5:b6:e7:36:8e:72:6a:4d:f8:7a: fc:03:1f:70:00:43:6c:46:d9:b5:14:aa:a6:25:0a:12:28:16: 25:6c:62:67:f7:76:b1:4c:15:a0:04:96:8a:20:9d:1d:56:7b: 57:e7:1c:34:6d:a8:3e:bc:a7:2c:36:12:f1:23:03:6f:4d:d2: 9f:12:ca:5b:02:2c:a1:92:fe:42:9b:91:dd:e2:2f:78:c7:12: 75:de:ef:ad:34:5c:e6:bb:b3:a0:78:43:f0:1e:10:d9:f6:68: 77:fa:3f:de:e7:ad:77:7c:1b:a3:17:99:01:76:44:a2:45:d6: 71:37:fb:60:74:46:69:d1:29:e8:90:bc:d9:ba:08:27:0c:2b: 94:98:3a:c3:60:9e:b1:8b:06:55:a6:4b:67:37:d1:12:a1:63: 26:8b:f4:84:24:79:df:92:b2:ca:50:b0:74:ce:74:2e:48:6f: 2a:87:8d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz1ctY9MUfuVpyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OThiNDFkZDQtZTU0ZS00OTQyLTg4ZWUtY2UzYzkzNDRkMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BIYY2UwYRlU0cK9RF1oClOtqZ0pMbVmsIlr c7UErjC/ch/GrKkyYDkeN/Vv5giK3DUjOBYZ5hhBjS5GDI3BbRTROSI93/qTdG9g PoOy0c3Ar2H0RKNYNcKiRD4G+Qe8dipXMJGHnruwr3RmOCMVPraqGHtoMK51Kgov ++f+VwpCvHkKDSoal9FMahavxDbCFwAwR8Wxo0JtCaB2wUZFH1zCIDg7cEBsFJHL vfquPaPPawuHT9d9Gbs0Fcgt+S1WetsjFGNfwNbWhpmlmsW0maUmz5ajEAgcqE7c Nfg6x1WDozeoEHgqhRLDUhC9241+rsJHiC479Q0VbXidilzUVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuXz5LT1+74GXcIDm67MVY8iznMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDkwZmNmZWMtNGYyYy0z ZDE4LTkwMmItYjc2NWQ2OGVmOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ0HJR5HMh0Xib+3VzvEyLMxXGou37bOJ8j/rOXhMvjWGgRKbQrGkHq jmmpStlgIYGoPfegBaBv2H3TdXK6NdKDH4loijK32vlbv9ZkZULApbbnNo5yak34 evwDH3AAQ2xG2bUUqqYlChIoFiVsYmf3drFMFaAEloognR1We1fnHDRtqD68pyw2 EvEjA29N0p8SylsCLKGS/kKbkd3iL3jHEnXe7600XOa7s6B4Q/AeENn2aHf6P97n rXd8G6MXmQF2RKJF1nE3+2B0RmnRKeiQvNm6CCcMK5SYOsNgnrGLBlWmS2c30RKh YyaL9IQked+SsspQsHTOdC5IbyqHjVk= -----END CERTIFICATE-----Generated at Sat Apr 26 23:53:48 2025 by rpki-client