$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa File: 5a906593-7518-3717-93a1-36f415626e0f.roa (raw, json) Hash identifier: 9OrNp2VSzad4/iB/wbzQzFT0a+NqQuOd+1E9fNVNXog= Subject key identifier: 34:EA:8D:7B:97:65:9B:33:8F:04:8B:2B:48:98:70:3A:8D:7A:30:1C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3D4E140E97147A2B9580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3d:4e:14:0e:97:14:7a:2b:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2eea30b0-c380-4fe5-a13b-e3632c64d69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:eb:4e:66:d0:0c:c2:a8:9d:86:7f:66:3a: 7f:ca:ea:fc:19:63:2a:ff:28:fd:44:86:63:a5:04: 16:b9:08:b2:b0:eb:fb:18:03:a7:3c:e1:93:f9:83: bc:fc:76:a6:0e:8b:94:ff:54:ff:fe:c8:0e:16:7a: 30:e1:be:90:f7:8f:28:30:e8:75:4b:8f:46:66:4f: b4:ac:1c:0d:92:ef:1c:3d:ac:9f:b5:78:c1:14:c2: c6:47:00:71:7a:1e:3c:30:15:f4:48:be:46:b1:43: b8:79:f7:ef:b3:25:b1:8c:87:74:1b:bf:a1:28:f4: a9:a7:e3:55:c5:34:ad:ef:a0:5c:2f:41:0c:da:13: df:91:a9:9f:14:09:7c:89:01:83:49:a9:f9:c1:c2: e0:29:2e:be:4b:1e:50:ae:03:fb:c8:19:3f:40:07: 81:77:50:96:86:e7:e9:59:6a:8b:d8:49:ce:68:b6: 76:c4:16:90:dc:07:b9:af:ea:82:46:00:2b:e7:2c: 9c:5d:3c:67:06:99:03:62:e7:73:75:3e:0f:60:4a: 52:03:d1:01:ba:e8:f5:db:9f:8f:59:53:2b:f6:c4: db:0d:f1:4c:93:57:7d:3d:51:46:5f:39:57:38:6d: ec:4f:fa:91:70:8f:25:41:0e:aa:45:17:cf:70:86: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EA:8D:7B:97:65:9B:33:8F:04:8B:2B:48:98:70:3A:8D:7A:30:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:76:4e:2e:53:5d:2c:68:8a:c2:4f:be:85:61:10:d6:7d:b7: ce:82:a2:04:b5:e3:0e:52:ec:88:b4:26:3e:b4:d1:58:fc:64: b2:e2:81:17:8d:7d:32:8e:9c:1b:52:45:4b:cd:ed:f2:6a:1d: 94:9b:14:66:17:b1:b6:3d:5a:59:df:43:e5:fa:bd:64:9b:ff: 98:75:f5:0a:6b:d4:d3:e8:09:13:b9:10:35:76:53:26:9e:15: fb:ea:03:7a:cc:96:f7:2c:46:3e:d3:ab:85:fa:6c:13:ef:e3: 32:b3:65:8b:d5:29:4f:7e:64:8b:e0:ee:a1:52:de:d8:1e:1a: 28:87:8b:08:0d:ee:57:5a:30:ec:2f:94:c4:70:cf:ae:87:93: 4b:ca:ae:12:a5:49:bc:d3:11:ce:61:49:e3:88:04:76:fe:ea: 7d:66:e6:bf:c3:1c:78:28:52:1b:70:e5:29:13:e2:b7:d2:63: db:c3:f7:2b:6b:42:1b:bb:90:f3:e6:4f:50:ea:6d:93:95:e8: 6d:04:2d:59:57:70:f9:b1:9a:7c:2f:e8:8f:dc:aa:56:04:bb: ff:bc:33:5e:2e:23:af:d6:cc:9e:72:db:61:49:0e:18:e5:c4: 57:f9:17:ef:10:d5:10:39:13:1a:0a:70:04:6d:14:2a:68:7e: 17:8e:83:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz1OFA6XFHorlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmVlYTMwYjAtYzM4MC00ZmU1LWExM2ItZTM2MzJjNjRkNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMDrTmbQDMKonYZ/Zjp/yur8GWMq/yj9RIZj pQQWuQiysOv7GAOnPOGT+YO8/HamDouU/1T//sgOFnow4b6Q948oMOh1S49GZk+0 rBwNku8cPayftXjBFMLGRwBxeh48MBX0SL5GsUO4effvsyWxjId0G7+hKPSpp+NV xTSt76BcL0EM2hPfkamfFAl8iQGDSan5wcLgKS6+Sx5QrgP7yBk/QAeBd1CWhufp WWqL2EnOaLZ2xBaQ3Ae5r+qCRgAr5yycXTxnBpkDYudzdT4PYEpSA9EBuuj125+P WVMr9sTbDfFMk1d9PVFGXzlXOG3sT/qRcI8lQQ6qRRfPcIYSywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTqjXuXZZszjwSLK0iYcDqNejAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE5MDY1OTMtNzUxOC0z NzE3LTkzYTEtMzZmNDE1NjI2ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR2Ti5TXSxoisJPvoVhENZ9t86CogS14w5S7Ii0Jj600Vj8ZLLigReN fTKOnBtSRUvN7fJqHZSbFGYXsbY9WlnfQ+X6vWSb/5h19Qpr1NPoCRO5EDV2Uyae FfvqA3rMlvcsRj7Tq4X6bBPv4zKzZYvVKU9+ZIvg7qFS3tgeGiiHiwgN7ldaMOwv lMRwz66Hk0vKrhKlSbzTEc5hSeOIBHb+6n1m5r/DHHgoUhtw5SkT4rfSY9vD9ytr Qhu7kPPmT1DqbZOV6G0ELVlXcPmxmnwv6I/cqlYEu/+8M14uI6/WzJ5y22FJDhjl xFf5F+8Q1RA5ExoKcARtFCpofheOg4s= -----END CERTIFICATE-----Generated at Sun Apr 27 04:09:14 2025 by rpki-client