$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa File: 50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa (raw, json) Hash identifier: s+Fw74YJTnzR0zn/oaRc8cioQVxVgOfwlyDMZzIp6HQ= Subject key identifier: 97:36:AF:E4:9A:63:31:B1:39:C8:6F:EF:76:F3:37:D8:85:0D:B1:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA96CF69386DD953410080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:96:cf:69:38:6d:d9:53:41:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=13a108c4-de1e-4709-bd5a-03f7de085a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:53:6b:39:2f:00:ac:da:b6:01:c3:01:f4:2c: d6:bc:4a:fc:a6:0c:7e:ed:c7:61:4d:cf:cb:b0:c1: c9:c8:83:1c:80:8e:b3:fb:de:05:d4:b1:a0:ef:e5: b1:f3:dc:1d:bd:57:52:5a:66:46:41:e5:1c:1a:c2: f4:e5:cf:e8:84:70:3e:32:5b:66:90:1f:ab:14:44: 48:90:0e:3f:19:a5:0c:be:56:29:5e:4a:1e:1d:64: b3:47:69:aa:5c:30:04:03:d8:d7:33:dc:ca:68:9d: 3b:01:52:92:c2:4f:5d:4e:f2:d5:45:33:d2:6f:2d: 65:f8:4e:e4:c2:0b:d1:ec:33:af:fb:89:99:04:8d: 0f:d1:f4:df:b8:a8:a6:55:8a:e7:fa:a1:52:ae:d6: 55:70:19:9e:05:d5:ae:3e:7e:44:7d:20:1f:89:eb: d5:2d:15:eb:11:1b:a0:0c:0c:5a:46:82:a9:db:70: 17:e0:71:dc:0e:a4:e8:e5:42:fe:3f:ef:5c:01:32: b0:f2:df:90:17:c0:ad:f7:a5:0c:f3:73:f4:c2:c3: 03:16:70:26:ce:74:34:4d:98:2d:f4:10:75:a6:4c: 22:d2:f2:60:b1:b0:f2:6d:a1:51:51:72:e2:35:e2: 9f:e3:84:bd:64:b6:8e:27:3d:63:de:3c:31:33:c5: 91:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:36:AF:E4:9A:63:31:B1:39:C8:6F:EF:76:F3:37:D8:85:0D:B1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:d1:c4:d3:ba:c5:c0:ea:d5:5d:a6:7b:e0:f8:38:09:cf:34: f4:55:89:7d:84:96:2a:47:24:aa:83:38:af:93:f3:42:0e:00: 6e:d8:cd:2b:ed:ab:21:f4:b0:ad:b6:cd:c9:2d:7c:8c:23:15: 85:fe:bf:45:42:78:df:a8:3d:32:99:7b:21:27:c9:af:79:85: 91:63:d5:62:29:fa:ab:91:f3:4f:bc:73:63:5d:d7:86:7d:16: 15:57:ba:ce:db:0d:29:bd:0f:5f:c6:c8:64:a3:6d:21:cb:d3: 22:76:03:c7:c9:06:47:1d:85:b3:91:2d:ed:61:b7:76:9c:42: 0f:5b:27:4d:68:52:7e:c4:e3:e6:ae:8a:bf:91:b2:62:30:1a: c2:c1:5e:68:17:a3:a8:04:67:0e:84:e7:91:ab:ee:f2:52:5a: 6d:35:db:d6:9e:bb:24:cb:6b:46:24:e2:52:79:fe:91:1f:9e: c8:c5:9b:35:97:7a:1d:d2:ff:31:89:3c:d4:b7:0a:10:bd:25: 7c:94:71:7e:f9:f4:f5:8e:5b:eb:c8:48:17:85:6e:a1:59:3e: 6a:0d:0b:f6:e4:86:1f:c9:c4:23:8b:0d:37:85:20:d8:0e:a5: 74:1c:51:e9:5c:65:53:e3:36:ce:3c:5f:94:1a:06:ee:39:6c: b7:74:bb:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupbPaTht2VNBAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTNhMTA4YzQtZGUxZS00NzA5LWJkNWEtMDNmN2RlMDg1YTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglNrOS8ArNq2AcMB9CzWvEr8pgx+7cdhTc/L sMHJyIMcgI6z+94F1LGg7+Wx89wdvVdSWmZGQeUcGsL05c/ohHA+MltmkB+rFERI kA4/GaUMvlYpXkoeHWSzR2mqXDAEA9jXM9zKaJ07AVKSwk9dTvLVRTPSby1l+E7k wgvR7DOv+4mZBI0P0fTfuKimVYrn+qFSrtZVcBmeBdWuPn5EfSAfievVLRXrERug DAxaRoKp23AX4HHcDqTo5UL+P+9cATKw8t+QF8Ct96UM83P0wsMDFnAmznQ0TZgt 9BB1pkwi0vJgsbDybaFRUXLiNeKf44S9ZLaOJz1j3jwxM8WRCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc2r+SaYzGxOchv73bzN9iFDbFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTBkMmMzZjAtNTJjZC0z NDBkLWJlZGYtZWExZjE2M2JkNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM3RxNO6xcDq1V2me+D4OAnPNPRViX2ElipHJKqDOK+T80IOAG7YzSvt qyH0sK22zcktfIwjFYX+v0VCeN+oPTKZeyEnya95hZFj1WIp+quR80+8c2Nd14Z9 FhVXus7bDSm9D1/GyGSjbSHL0yJ2A8fJBkcdhbORLe1ht3acQg9bJ01oUn7E4+au ir+RsmIwGsLBXmgXo6gEZw6E55Gr7vJSWm0129aeuyTLa0Yk4lJ5/pEfnsjFmzWX eh3S/zGJPNS3ChC9JXyUcX759PWOW+vISBeFbqFZPmoNC/bkhh/JxCOLDTeFINgO pXQcUelcZVPjNs48X5QaBu45bLd0u3w= -----END CERTIFICATE-----Generated at Sun Apr 27 00:21:25 2025 by rpki-client