$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa File: 53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa (raw, json) Hash identifier: GHoztxRTylwRkvnbHuckmw7omoBBam+8j2gthtHvnNk= Subject key identifier: 08:1D:7C:88:43:57:91:BF:BB:D2:C6:AC:7A:E1:6B:35:6E:86:C9:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3DF37361365FB711AC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3d:f3:73:61:36:5f:b7:11:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1d93af56-0927-4f3a-8ac7-69e166ecd3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:0f:4b:c5:e8:76:42:df:ee:b5:f1:a2:22: 66:bd:56:0b:17:8f:b3:ff:f5:5b:9e:98:33:5c:16: 72:55:68:ff:96:1d:0c:f9:4c:7f:bd:4a:82:74:2f: 13:30:9d:e8:b7:86:6c:30:0e:0f:21:69:5c:01:74: ad:48:79:5d:50:b4:d0:5f:c3:c0:60:42:46:ca:8a: 69:63:5e:a9:09:93:cc:dc:c9:57:7a:70:77:50:e2: 68:01:43:85:c3:dc:9a:b2:ff:ad:83:05:cd:08:6e: f3:00:bc:58:63:c1:c5:e7:32:c1:3c:34:64:33:45: dc:53:fc:e1:33:0e:a8:e5:c4:21:9a:70:8d:61:6f: 39:3b:e6:6f:b5:44:d3:0d:ce:30:56:e1:83:70:a5: 56:91:fe:2f:cc:ed:9c:3b:7b:d8:63:a2:18:bb:7f: 1c:21:ba:fc:ff:35:bf:51:64:7a:43:44:f0:85:eb: a0:39:ea:1d:15:d4:fe:31:66:2e:f8:82:79:d7:78: 74:c4:98:02:29:be:89:8a:25:e7:65:de:a6:a5:2b: 9f:cb:a5:8c:fc:fa:15:62:96:2b:1d:36:bd:c1:d8: 79:df:66:00:de:4a:a7:56:e0:fd:e4:c0:14:29:94: 3a:1c:4b:f2:f2:51:80:ea:df:d1:7a:35:e8:48:16: 87:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1D:7C:88:43:57:91:BF:BB:D2:C6:AC:7A:E1:6B:35:6E:86:C9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ce:04:ef:44:a9:3a:4b:b0:7d:ec:c5:f3:9e:83:7d:ab:77: f6:39:68:f2:8b:4e:16:a9:88:6d:d2:a9:c1:f3:54:5c:8e:12: a3:e8:83:58:66:c2:9f:da:a3:1c:f7:7c:61:b9:90:a8:8e:1a: 44:68:3f:69:31:55:cf:7e:33:b7:b9:c5:9a:d8:d1:fc:c3:7c: 62:87:02:c4:b4:cd:11:ad:ff:6d:85:ed:88:dd:3c:74:c3:2d: 58:28:e6:a1:3b:05:a7:73:7e:61:a5:a4:44:0e:ba:92:a5:e0: af:ea:26:82:35:09:21:50:81:62:69:69:7c:74:15:a7:08:1d: 3a:97:f6:af:73:84:54:98:19:06:80:71:72:fd:db:62:a0:82: ad:c2:00:30:1d:b4:b8:64:d3:7c:b3:52:f2:db:80:3d:73:3e: 41:b7:e6:4b:69:49:b1:c6:4c:0a:69:e9:18:4b:69:27:50:fa: eb:54:32:0c:72:6f:3c:24:4e:9f:90:02:9a:ee:af:bd:85:a8: 3f:77:b1:34:64:5e:04:7d:58:fe:fc:7d:21:94:fb:35:90:e8: d6:5b:3d:62:01:0b:de:57:aa:6a:0c:18:32:fa:a9:d0:62:f0: 6f:1e:0f:2c:5b:b4:ff:b6:43:f7:c8:53:bb:e7:33:e2:5e:ea: 62:6a:9e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz3zc2E2X7cRrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWQ5M2FmNTYtMDkyNy00ZjNhLThhYzctNjllMTY2ZWNkM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtYPS8XodkLf7rXxoiJmvVYLF4+z//Vbnpgz XBZyVWj/lh0M+Ux/vUqCdC8TMJ3ot4ZsMA4PIWlcAXStSHldULTQX8PAYEJGyopp Y16pCZPM3MlXenB3UOJoAUOFw9yasv+tgwXNCG7zALxYY8HF5zLBPDRkM0XcU/zh Mw6o5cQhmnCNYW85O+ZvtUTTDc4wVuGDcKVWkf4vzO2cO3vYY6IYu38cIbr8/zW/ UWR6Q0TwheugOeodFdT+MWYu+IJ513h0xJgCKb6JiiXnZd6mpSufy6WM/PoVYpYr HTa9wdh532YA3kqnVuD95MAUKZQ6HEvy8lGA6t/RejXoSBaHrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgdfIhDV5G/u9LGrHrhazVuhsnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTNkM2VlYzUtNTJkNi0z ZDE2LTkxYTgtZDcxNWY0ZWJjNWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXOBO9EqTpLsH3sxfOeg32rd/Y5aPKLThapiG3SqcHzVFyOEqPog1hm wp/aoxz3fGG5kKiOGkRoP2kxVc9+M7e5xZrY0fzDfGKHAsS0zRGt/22F7YjdPHTD LVgo5qE7BadzfmGlpEQOupKl4K/qJoI1CSFQgWJpaXx0FacIHTqX9q9zhFSYGQaA cXL922Kggq3CADAdtLhk03yzUvLbgD1zPkG35ktpSbHGTApp6RhLaSdQ+utUMgxy bzwkTp+QAprur72FqD93sTRkXgR9WP78fSGU+zWQ6NZbPWIBC95XqmoMGDL6qdBi 8G8eDyxbtP+2Q/fIU7vnM+Je6mJqng0= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:37 2025 by rpki-client