$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d0cc599-036f-31d8-9f5e-71ed90960227.roa File: 5d0cc599-036f-31d8-9f5e-71ed90960227.roa (raw, json) Hash identifier: NMJH5dAqOhIijaG86thq8aXb4gmQxfJUjsTQvRG+bXE= Subject key identifier: 01:BF:EF:A1:9C:9C:FD:68:0E:64:18:45:0F:6C:DD:E7:7B:85:19:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA971922AF9A1FE8817200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d0cc599-036f-31d8-9f5e-71ed90960227.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:97:19:22:af:9a:1f:e8:81:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=54ce856a-0ddd-432a-935e-34b8d96483ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:47:b1:0f:79:e1:f1:cd:6b:6b:6c:e7:75:0a: 83:76:f5:94:36:d9:21:b1:ff:37:e5:a5:2b:5c:1f: 32:09:0d:21:f7:f4:25:0f:ae:80:fa:f8:8f:48:d2: 1d:d0:ed:8e:06:d1:fb:df:de:b7:5e:45:48:33:f4: 9d:e1:aa:a9:57:73:a9:d2:1b:ae:19:84:df:2c:bd: 51:91:10:25:10:df:68:76:b6:f2:ff:b9:75:b2:58: 8e:b8:8c:9a:37:a0:52:09:eb:c7:3b:d7:ec:4d:0e: 41:cb:f2:36:39:73:fb:e8:f6:0b:b1:e5:f8:93:1b: 1b:77:44:5d:8e:c7:3f:48:4e:04:f9:2d:9f:3c:e7: 6a:f0:2b:95:1b:8b:22:47:6a:12:aa:d5:5e:10:38: ec:1a:c5:09:82:a1:f5:89:00:13:85:46:a4:00:2a: 23:ee:a5:5d:13:3b:b3:f3:62:c3:86:c6:31:fd:09: b0:f9:99:37:86:44:2b:d8:77:49:8f:f6:e2:30:76: 95:47:ca:cd:0d:71:18:08:ea:6e:b8:e8:fd:cf:ad: bc:6f:37:54:f5:b4:22:df:9e:7a:12:d3:e1:8c:19: 58:82:50:91:62:3a:eb:40:f2:88:54:56:e7:88:92: 36:f0:81:85:65:2f:c9:66:09:84:9e:ea:0f:c2:3e: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BF:EF:A1:9C:9C:FD:68:0E:64:18:45:0F:6C:DD:E7:7B:85:19:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d0cc599-036f-31d8-9f5e-71ed90960227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:20:1a:6f:59:6f:f3:78:13:a6:cf:29:3c:55:b5:1f:c1:74: 64:26:e1:0e:3b:e3:e9:2e:8f:68:b6:0e:d1:7f:13:d7:86:14: 6a:f6:ea:7a:e6:d4:fd:61:29:ea:42:1d:06:a0:23:87:9c:58: 70:d1:be:e2:21:1d:20:fc:99:48:8c:3b:6e:c0:b9:dd:02:ae: f5:99:ad:2b:ba:0b:83:5b:12:7a:1e:ec:31:9d:f1:6b:cf:88: 9e:d5:e8:de:09:e2:22:4b:1b:1b:7a:42:39:c3:34:64:14:87: 29:19:ff:72:6b:84:e6:38:cb:58:90:a6:90:3b:14:d7:2d:0e: 29:2c:8e:95:e9:33:68:61:ca:16:6d:e6:fa:e6:6b:31:ca:eb: 0a:3f:1e:c4:88:51:6f:cb:ab:ce:09:c1:6e:aa:ec:62:5b:d4: 91:62:5d:81:23:76:5e:cb:ac:04:c4:ab:34:b1:d4:29:0a:85: 6e:86:43:d5:09:04:78:bd:34:6b:45:29:67:a1:42:6e:2e:a6: ec:18:8c:e7:19:29:a9:83:36:9c:6c:69:fa:2f:df:cb:31:7e: 0e:51:6f:0a:94:86:4c:5f:ba:11:c7:99:6a:c7:65:62:73:3e: 6e:1d:07:4f:c9:83:8a:de:f1:57:b8:8e:f2:9a:9c:93:24:34: 1c:af:9f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupcZIq+aH+iBcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTRjZTg1NmEtMGRkZC00MzJhLTkzNWUtMzRiOGQ5NjQ4M2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0exD3nh8c1ra2zndQqDdvWUNtkhsf835aUr XB8yCQ0h9/QlD66A+viPSNId0O2OBtH73963XkVIM/Sd4aqpV3Op0huuGYTfLL1R kRAlEN9odrby/7l1sliOuIyaN6BSCevHO9fsTQ5By/I2OXP76PYLseX4kxsbd0Rd jsc/SE4E+S2fPOdq8CuVG4siR2oSqtVeEDjsGsUJgqH1iQAThUakACoj7qVdEzuz 82LDhsYx/Qmw+Zk3hkQr2HdJj/biMHaVR8rNDXEYCOpuuOj9z628bzdU9bQi3556 EtPhjBlYglCRYjrrQPKIVFbniJI28IGFZS/JZgmEnuoPwj6RlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG/76GcnP1oDmQYRQ9s3ed7hRmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWQwY2M1OTktMDM2Zi0z MWQ4LTlmNWUtNzFlZDkwOTYwMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIgGm9Zb/N4E6bPKTxVtR/BdGQm4Q474+kuj2i2DtF/E9eGFGr26nrm 1P1hKepCHQagI4ecWHDRvuIhHSD8mUiMO27Aud0CrvWZrSu6C4NbEnoe7DGd8WvP iJ7V6N4J4iJLGxt6QjnDNGQUhykZ/3JrhOY4y1iQppA7FNctDiksjpXpM2hhyhZt 5vrmazHK6wo/HsSIUW/Lq84JwW6q7GJb1JFiXYEjdl7LrATEqzSx1CkKhW6GQ9UJ BHi9NGtFKWehQm4upuwYjOcZKamDNpxsafov38sxfg5RbwqUhkxfuhHHmWrHZWJz Pm4dB0/Jg4re8Ve4jvKanJMkNByvnzw= -----END CERTIFICATE-----Generated at Sun Apr 27 02:38:34 2025 by rpki-client