$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53daf607-8fc8-3350-8063-ec3143c32ddd.roa File: 53daf607-8fc8-3350-8063-ec3143c32ddd.roa (raw, json) Hash identifier: ZWZuuNOn7Qjc0EhwMX7R+V06VutqZ+KxPwpQP5k6prY= Subject key identifier: C5:8A:C5:CE:34:75:48:8C:7F:9C:E9:8D:AF:87:87:42:10:6D:46:C1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB388AE30E88548C77EE20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53daf607-8fc8-3350-8063-ec3143c32ddd.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:38:8a:e3:0e:88:54:8c:77:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c3e1a06f-6294-4ded-a159-736648add335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e3:eb:98:74:08:75:e8:43:9a:44:32:a0:1c: 58:46:40:e8:17:bf:25:04:69:66:9c:fb:f6:4c:0d: cf:3e:c4:91:45:d2:b8:a7:04:16:66:8e:8e:0b:e4: e1:77:ef:89:bd:e5:42:a7:65:08:8f:19:66:4e:10: 65:48:a7:d8:1c:38:ca:23:79:31:c6:1d:da:b0:1b: 88:8e:ae:8e:3c:54:a5:ba:8e:e9:22:38:4e:10:f6: fe:23:20:58:b8:20:44:57:68:88:ac:5c:07:bf:1a: ac:a1:85:aa:da:1f:ff:6e:5d:69:f5:99:48:66:5e: f8:38:ef:08:4d:e3:ca:4a:33:b5:4b:b1:14:ae:6c: 39:0d:d3:9f:0b:e9:b3:cb:7a:db:09:a3:a7:aa:91: a6:d1:31:30:3d:e6:4c:66:71:f2:35:ac:84:94:a5: df:3c:e8:5b:87:99:c9:71:4e:40:d7:cb:bd:9f:42: 2b:6e:db:5e:f2:4d:9a:12:d3:71:fc:f2:3e:50:13: 70:e7:17:9e:f1:49:6d:6a:a1:6e:e9:15:87:d5:3d: a3:ba:e6:f8:bf:d9:b7:e3:75:83:73:3c:30:01:0d: b6:c3:fe:f6:79:87:42:5d:42:e8:77:cf:dc:2e:45: dd:28:52:46:ce:11:0d:dd:ee:b6:d2:54:e7:8e:c5: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8A:C5:CE:34:75:48:8C:7F:9C:E9:8D:AF:87:87:42:10:6D:46:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53daf607-8fc8-3350-8063-ec3143c32ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:3f:7a:4e:81:ab:44:7f:37:31:45:ff:d8:0d:25:06:3d:92: 24:0b:d0:81:46:70:ef:f4:84:d2:b1:2a:c1:66:5f:c4:f4:22: 99:3c:b5:62:3e:d6:87:ae:6f:0a:83:5b:0f:fa:b1:84:69:81: 40:a8:14:54:31:98:78:a5:fe:33:93:2c:22:93:28:aa:10:13: f0:4c:a0:e2:90:de:47:b6:d6:21:d4:fb:bc:01:1a:35:bf:35: 09:26:04:1b:25:dc:99:32:ac:48:20:8c:de:14:cd:e7:2d:f5: 09:d6:3d:c9:df:a8:0d:ee:3f:51:f0:e4:e0:49:2f:b9:b1:d4: 8f:6a:96:3a:9b:22:ee:11:46:52:df:50:f5:ae:0e:a6:37:f0: f6:ed:d5:64:c1:90:68:85:4f:da:71:67:28:c4:d4:a4:e2:6b: 0e:06:0a:51:08:ed:0d:f0:af:14:98:55:17:1e:e1:47:28:bd: ba:ec:04:62:4b:d5:de:ff:8a:23:4a:1a:c8:6c:1c:5e:99:ce: 82:d0:66:19:10:c8:0b:18:d1:f0:25:ef:86:1e:0d:06:2b:48: bc:0d:e1:a2:a2:06:33:eb:88:b5:80:90:5b:71:98:78:f4:93: fd:bf:6b:92:27:50:cb:96:c4:7e:ca:18:e9:cb:18:92:aa:e2: ac:89:34:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuziK4w6IVIx37iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzNlMWEwNmYtNjI5NC00ZGVkLWExNTktNzM2NjQ4YWRkMzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjePrmHQIdehDmkQyoBxYRkDoF78lBGlmnPv2 TA3PPsSRRdK4pwQWZo6OC+Thd++JveVCp2UIjxlmThBlSKfYHDjKI3kxxh3asBuI jq6OPFSluo7pIjhOEPb+IyBYuCBEV2iIrFwHvxqsoYWq2h//bl1p9ZlIZl74OO8I TePKSjO1S7EUrmw5DdOfC+mzy3rbCaOnqpGm0TEwPeZMZnHyNayElKXfPOhbh5nJ cU5A18u9n0Irbtte8k2aEtNx/PI+UBNw5xee8UltaqFu6RWH1T2juub4v9m343WD czwwAQ22w/72eYdCXULod8/cLkXdKFJGzhEN3e620lTnjsUOaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWKxc40dUiMf5zpja+Hh0IQbUbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTNkYWY2MDctOGZjOC0z MzUwLTgwNjMtZWMzMTQzYzMyZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE/ek6Bq0R/NzFF/9gNJQY9kiQL0IFGcO/0hNKxKsFmX8T0Ipk8tWI+ 1oeubwqDWw/6sYRpgUCoFFQxmHil/jOTLCKTKKoQE/BMoOKQ3ke21iHU+7wBGjW/ NQkmBBsl3JkyrEggjN4Uzect9QnWPcnfqA3uP1Hw5OBJL7mx1I9qljqbIu4RRlLf UPWuDqY38Pbt1WTBkGiFT9pxZyjE1KTiaw4GClEI7Q3wrxSYVRce4UcovbrsBGJL 1d7/iiNKGshsHF6ZzoLQZhkQyAsY0fAl74YeDQYrSLwN4aKiBjPriLWAkFtxmHj0 k/2/a5InUMuWxH7KGOnLGJKq4qyJNDQ= -----END CERTIFICATE-----Generated at Mon Apr 28 18:15:02 2025 by rpki-client