$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f43dc0e-4d35-37ef-9870-3b2729ab6cb8.roa File: 5f43dc0e-4d35-37ef-9870-3b2729ab6cb8.roa (raw, json) Hash identifier: O60AXDy1Q9pX/8LeywtlfkqKThK0Fffq8yKFTuMEGKM= Subject key identifier: 4C:64:AC:AC:47:75:89:41:39:4B:4D:DD:F8:BC:22:63:A2:5D:6E:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB397ED5001DD80BCBA6C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f43dc0e-4d35-37ef-9870-3b2729ab6cb8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:39:7e:d5:00:1d:d8:0b:cb:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=efec06a1-5546-43f5-8ddd-a1d1ff7cad8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:ac:56:dd:5e:c2:86:80:ab:17:d3:bc:fa: e1:43:47:4a:b5:1d:bd:cb:ed:0e:eb:d5:40:55:24: e9:c2:a7:84:9f:6e:d3:b0:28:30:cb:56:57:49:74: bf:66:94:8f:98:2a:10:61:95:93:50:1c:a5:07:fc: 99:cf:21:81:1e:06:4d:af:d5:ac:d7:4a:e5:d5:49: c1:90:83:c8:20:dc:03:f6:55:00:9f:59:c0:79:a7: fb:12:a3:d7:98:50:19:2e:96:85:f3:99:66:55:3a: 43:a5:d3:0a:dd:40:5a:b6:2b:55:0e:fe:16:64:7d: fd:3d:ec:58:f1:00:6c:cb:4b:2f:2d:97:10:cb:7e: 05:a1:ab:b3:c3:dc:6b:1b:3c:2f:b3:cd:0e:e0:6d: 92:6d:4c:e0:75:da:9d:10:ea:44:0b:5c:8f:aa:5f: db:c5:b0:85:7f:79:6b:b7:20:e7:79:0b:80:63:c9: 5a:4b:5b:c9:8e:d7:ed:38:96:77:b0:9f:aa:8b:3f: e5:72:40:49:be:c8:db:d2:2a:01:23:ed:ff:dd:47: e4:3c:b4:7f:37:d8:c0:b0:ff:73:01:b0:90:d1:8c: f3:47:49:45:d0:a8:73:eb:52:06:f1:6e:55:59:11: ab:b4:4f:ef:36:c4:69:08:0f:65:d3:75:ff:be:31: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:64:AC:AC:47:75:89:41:39:4B:4D:DD:F8:BC:22:63:A2:5D:6E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f43dc0e-4d35-37ef-9870-3b2729ab6cb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:dc:e0:c3:51:21:65:4f:6b:c3:1b:35:51:bc:df:8d:77:a7: 2f:6a:33:7b:dc:57:6a:be:bb:0b:79:ce:41:10:2c:f9:a5:a3: a8:eb:ba:57:77:b7:83:f7:5c:aa:9f:aa:db:f1:7d:7b:8f:8a: d7:26:5a:ec:03:39:83:7a:d7:53:67:98:3b:dc:9e:3e:45:e1: ee:3c:90:84:4e:cb:16:2b:e7:b8:bb:71:13:5e:46:c1:1d:d4: 1b:4a:bb:d1:d4:24:c1:86:60:13:fb:63:b6:6b:e8:da:a0:03: 39:1f:da:37:3a:99:7c:f5:d9:4b:d3:b0:90:7c:ba:7f:cb:31: af:d5:93:1c:af:52:d7:a5:02:e2:f7:1d:b0:ef:52:e5:dc:92: 6c:1a:b4:1e:52:97:26:a1:53:f2:39:fb:67:e2:c1:8d:e0:1b: e0:e3:10:25:17:0d:b1:d8:c4:58:47:14:62:be:ce:78:01:6f: ae:11:d7:09:a1:97:b6:b5:9d:d2:a3:ff:43:a6:95:d3:2f:37: 3c:bd:3c:53:d9:07:bb:ea:c0:b1:f0:5c:a0:5a:78:9f:a0:b7: 9a:6b:e3:6d:85:c0:10:8b:5d:dd:cf:72:e0:4b:f5:4e:fc:c8: 33:ed:c4:ba:05:0d:75:6e:40:4e:40:55:91:2f:66:9b:3f:be: 04:b9:2d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzl+1QAd2AvLpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWZlYzA2YTEtNTU0Ni00M2Y1LThkZGQtYTFkMWZmN2NhZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6esVt1ewoaAqxfTvPrhQ0dKtR29y+0O69VA VSTpwqeEn27TsCgwy1ZXSXS/ZpSPmCoQYZWTUBylB/yZzyGBHgZNr9Ws10rl1UnB kIPIINwD9lUAn1nAeaf7EqPXmFAZLpaF85lmVTpDpdMK3UBatitVDv4WZH39PexY 8QBsy0svLZcQy34Foauzw9xrGzwvs80O4G2SbUzgddqdEOpEC1yPql/bxbCFf3lr tyDneQuAY8laS1vJjtftOJZ3sJ+qiz/lckBJvsjb0ioBI+3/3UfkPLR/N9jAsP9z AbCQ0YzzR0lF0Khz61IG8W5VWRGrtE/vNsRpCA9l03X/vjEUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExkrKxHdYlBOUtN3fi8ImOiXW5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY0M2RjMGUtNGQzNS0z N2VmLTk4NzAtM2IyNzI5YWI2Y2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANTc4MNRIWVPa8MbNVG83413py9qM3vcV2q+uwt5zkEQLPmlo6jruld3 t4P3XKqfqtvxfXuPitcmWuwDOYN611NnmDvcnj5F4e48kIROyxYr57i7cRNeRsEd 1BtKu9HUJMGGYBP7Y7Zr6NqgAzkf2jc6mXz12UvTsJB8un/LMa/VkxyvUtelAuL3 HbDvUuXckmwatB5SlyahU/I5+2fiwY3gG+DjECUXDbHYxFhHFGK+zngBb64R1wmh l7a1ndKj/0OmldMvNzy9PFPZB7vqwLHwXKBaeJ+gt5pr422FwBCLXd3PcuBL9U78 yDPtxLoFDXVuQE5AVZEvZps/vgS5LcI= -----END CERTIFICATE-----Generated at Sun Apr 27 02:17:37 2025 by rpki-client