$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d46669d-d13c-30e6-a77b-9554ab96bb89.roa File: 4d46669d-d13c-30e6-a77b-9554ab96bb89.roa (raw, json) Hash identifier: nRNx9WFpDwxnm2V9B9+CUL7gjRv/RnwuzAF0a+6sTwQ= Subject key identifier: 41:9F:20:62:D9:AC:DD:0F:A7:7A:1F:C2:76:C3:36:AE:E9:14:AC:ED Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3E712CD7E809618B9390 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d46669d-d13c-30e6-a77b-9554ab96bb89.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3e:71:2c:d7:e8:09:61:8b:93:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3ed1617e-69d3-4c86-a444-c0b828c33ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:f5:d9:8d:9b:e8:f2:d8:d0:76:5c:52:2b: cf:c0:51:98:b3:80:a3:bd:16:ef:f3:17:70:49:b6: d8:52:67:93:4d:a8:3b:cf:f9:90:9c:c4:a9:00:e4: 63:aa:07:6e:11:3c:9f:41:2b:cd:31:8e:94:f1:89: 44:a4:3e:d4:91:92:6d:9a:98:77:67:bd:90:34:d4: a9:57:7d:02:a3:38:7b:6f:be:f9:e1:38:06:8d:c7: 18:74:53:91:b4:ef:70:b3:c1:3b:c7:2e:9c:af:40: 74:48:52:77:0a:26:88:ea:a6:42:7d:c4:e4:f1:cf: a0:dc:af:e9:c2:06:8a:8f:4d:53:99:82:e9:9b:b6: d1:d4:dd:38:1d:c1:99:72:1f:a0:a1:f0:ac:5c:4a: 6f:54:43:67:76:d2:9e:d9:bf:89:6e:f9:42:b0:08: d6:cb:d6:0b:6c:06:2f:f9:cf:98:fa:5d:ee:47:fa: c1:87:c1:8a:bd:51:74:86:64:6d:08:30:ff:2e:b8: a8:b0:f1:e6:e0:da:29:c6:87:59:4b:3a:c2:40:b2: 90:7c:5a:06:49:e6:99:b8:a7:21:b6:6d:34:54:2d: 25:8c:02:01:1f:ee:d6:fb:58:5d:4d:74:f7:ee:7d: 23:40:af:b1:6a:12:7c:d5:cd:de:83:f1:dd:01:8c: 89:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9F:20:62:D9:AC:DD:0F:A7:7A:1F:C2:76:C3:36:AE:E9:14:AC:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d46669d-d13c-30e6-a77b-9554ab96bb89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:54:cb:23:91:07:bf:d9:f2:24:22:b6:33:30:b5:c6:c9:19: 58:de:01:89:40:5d:05:15:25:ed:30:f6:ec:d3:bb:cd:c0:df: 64:e9:27:81:56:41:ab:df:7e:67:00:c0:14:ba:97:64:47:d5: c8:d4:8b:d5:13:12:c5:03:8b:bd:36:75:8e:6d:df:ef:a9:4a: be:c1:03:1b:63:8d:6f:e8:e0:3a:79:eb:d6:a9:51:07:f1:84: 0f:90:28:d2:38:20:99:8f:09:84:5b:ad:19:77:98:66:84:d2: 05:30:9d:0b:fc:c6:d6:32:2d:53:04:3c:76:ad:ea:03:04:21: 29:be:1c:0a:37:e3:db:7f:78:08:41:8c:7a:4b:87:b9:7d:f7: 90:31:08:cb:04:53:88:4f:84:1f:f3:52:96:35:b6:65:b3:3a: d4:e0:04:5e:46:f1:64:b8:ab:02:35:37:78:43:4d:d5:e2:0e: 24:65:ed:2a:f5:c8:d2:b1:58:19:c9:3c:72:e1:f9:bb:23:6f: d8:bc:71:5b:c0:17:1a:a8:9c:8b:48:9e:e2:5c:9f:bf:0a:00: 47:44:5a:f2:4e:dd:d8:21:02:5b:98:f6:f9:bc:44:92:8b:67: b0:1d:2f:bc:3e:8b:fe:fb:9b:bf:4f:a9:db:f6:25:44:dd:b7: f3:c1:a1:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz5xLNfoCWGLk5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2VkMTYxN2UtNjlkMy00Yzg2LWE0NDQtYzBiODI4YzMzY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+312Y2b6PLY0HZcUivPwFGYs4CjvRbv8xdw SbbYUmeTTag7z/mQnMSpAORjqgduETyfQSvNMY6U8YlEpD7UkZJtmph3Z72QNNSp V30Cozh7b7754TgGjccYdFORtO9ws8E7xy6cr0B0SFJ3CiaI6qZCfcTk8c+g3K/p wgaKj01TmYLpm7bR1N04HcGZch+gofCsXEpvVENndtKe2b+JbvlCsAjWy9YLbAYv +c+Y+l3uR/rBh8GKvVF0hmRtCDD/LriosPHm4NopxodZSzrCQLKQfFoGSeaZuKch tm00VC0ljAIBH+7W+1hdTXT37n0jQK+xahJ81c3eg/HdAYyJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGfIGLZrN0Pp3ofwnbDNq7pFKztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGQ0NjY2OWQtZDEzYy0z MGU2LWE3N2ItOTU1NGFiOTZiYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBUyyORB7/Z8iQitjMwtcbJGVjeAYlAXQUVJe0w9uzTu83A32TpJ4FW QavffmcAwBS6l2RH1cjUi9UTEsUDi702dY5t3++pSr7BAxtjjW/o4Dp569apUQfx hA+QKNI4IJmPCYRbrRl3mGaE0gUwnQv8xtYyLVMEPHat6gMEISm+HAo349t/eAhB jHpLh7l995AxCMsEU4hPhB/zUpY1tmWzOtTgBF5G8WS4qwI1N3hDTdXiDiRl7Sr1 yNKxWBnJPHLh+bsjb9i8cVvAFxqonItInuJcn78KAEdEWvJO3dghAluY9vm8RJKL Z7AdL7w+i/77m79Pqdv2JUTdt/PBoT4= -----END CERTIFICATE-----Generated at Sun Apr 27 09:44:19 2025 by rpki-client