$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/62aa8a4a-8f67-34a7-bbc4-9075ad1af202.roa File: 62aa8a4a-8f67-34a7-bbc4-9075ad1af202.roa (raw, json) Hash identifier: Ofr+AAEbEbgzXRxr0vTG9nQxE35Qr4vIHMnIMjTg50U= Subject key identifier: E5:BA:3D:A8:B1:1C:60:EF:C0:D8:8E:D3:2F:28:D9:09:5A:EE:6D:E7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9A17A9B540CE9AA6EF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/62aa8a4a-8f67-34a7-bbc4-9075ad1af202.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9a:17:a9:b5:40:ce:9a:a6:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c2b66c17-6aeb-4e73-886a-e287b91c8bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:3a:c6:a9:a6:1d:62:cd:d4:84:3e:b0:63: cf:36:b7:7c:29:82:1d:c4:97:45:7b:45:ce:7e:66: 65:40:1d:11:54:8e:6b:8d:15:7b:a9:7e:1f:18:bb: bb:a4:1c:eb:57:eb:af:7f:d6:45:ea:91:16:48:54: 45:02:e3:5f:ff:ea:49:4e:ef:f6:5e:1e:0d:43:fb: 42:18:5f:e0:d0:ea:24:1a:6c:22:7c:ea:a7:a0:05: 4c:fc:eb:9c:f3:6e:8c:05:a9:df:03:72:13:46:32: 55:4e:67:3b:a0:ca:bb:19:b7:9f:7c:b3:4a:bf:ed: 36:bd:50:31:e9:6d:0f:58:82:e5:62:c5:4b:4a:6b: 0a:36:c0:37:88:a2:83:39:27:66:2c:32:9a:e3:f2: 60:97:11:b4:5e:cc:93:8e:62:ad:4f:41:59:22:ca: d1:84:ce:52:cf:03:1e:c3:c9:eb:86:8f:08:d3:9c: cb:c7:46:df:1b:14:e1:03:93:93:05:57:aa:42:64: a5:af:d5:10:26:82:1c:b1:d5:a4:53:80:7e:aa:0c: 04:e6:7b:7f:ce:8b:03:cb:2f:62:44:8b:e5:33:25: 1f:60:ab:8d:80:dd:c0:36:68:f1:51:92:e6:bc:f3: aa:ce:68:92:70:08:93:46:f7:fd:d6:ad:57:93:84: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BA:3D:A8:B1:1C:60:EF:C0:D8:8E:D3:2F:28:D9:09:5A:EE:6D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/62aa8a4a-8f67-34a7-bbc4-9075ad1af202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9a:84:e4:fa:5e:a0:92:ec:19:7b:45:66:12:0a:be:b6:27: dd:52:9a:f4:e3:8a:8c:fe:65:7e:3d:2c:ca:96:aa:77:00:2b: a0:5e:c9:13:8c:9c:b9:88:5d:07:c2:23:1d:9a:77:c5:67:84: d6:e0:b6:eb:32:4a:3e:a0:d5:c3:3c:ef:35:73:80:57:c2:17: 7b:f1:10:07:b6:5a:11:ce:a0:88:12:89:6f:85:a3:03:dc:b0: bd:74:85:ec:67:49:77:f2:b8:dd:d7:83:8c:72:37:d1:10:d7: 78:d7:21:e2:f5:69:14:40:67:c5:25:73:60:71:db:d4:cf:91: b0:9d:35:79:48:ab:1c:8f:0c:c8:5e:f4:89:b0:a6:d7:d2:c8: e8:96:cd:cc:61:61:aa:ff:21:82:32:2a:6c:39:df:04:c7:ca: a0:8e:71:01:b6:2e:8c:0a:c9:39:81:7b:dd:ee:d7:ac:ce:95: 35:a0:34:83:19:35:f6:ee:ab:30:16:75:b2:bf:17:6f:be:2b: 8b:67:ca:0c:a3:5f:ab:39:6f:be:c9:22:c1:60:d1:23:e6:63: 72:44:d9:95:61:8f:05:04:1c:9d:c9:80:9c:1b:63:c3:ed:ad: 35:e7:ac:f8:5e:57:06:23:5d:ba:f0:34:79:a9:1c:88:f0:ee: 2f:89:02:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupoXqbVAzpqm7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzJiNjZjMTctNmFlYi00ZTczLTg4NmEtZTI4N2I5MWM4YmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorg6xqmmHWLN1IQ+sGPPNrd8KYIdxJdFe0XO fmZlQB0RVI5rjRV7qX4fGLu7pBzrV+uvf9ZF6pEWSFRFAuNf/+pJTu/2Xh4NQ/tC GF/g0OokGmwifOqnoAVM/Ouc826MBanfA3ITRjJVTmc7oMq7GbeffLNKv+02vVAx 6W0PWILlYsVLSmsKNsA3iKKDOSdmLDKa4/JglxG0XsyTjmKtT0FZIsrRhM5SzwMe w8nrho8I05zLx0bfGxThA5OTBVeqQmSlr9UQJoIcsdWkU4B+qgwE5nt/zosDyy9i RIvlMyUfYKuNgN3ANmjxUZLmvPOqzmiScAiTRvf91q1Xk4TO+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW6PaixHGDvwNiO0y8o2Qla7m3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjJhYThhNGEtOGY2Ny0z NGE3LWJiYzQtOTA3NWFkMWFmMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKahOT6XqCS7Bl7RWYSCr62J91SmvTjioz+ZX49LMqWqncAK6BeyROM nLmIXQfCIx2ad8VnhNbgtusySj6g1cM87zVzgFfCF3vxEAe2WhHOoIgSiW+FowPc sL10hexnSXfyuN3Xg4xyN9EQ13jXIeL1aRRAZ8Ulc2Bx29TPkbCdNXlIqxyPDMhe 9ImwptfSyOiWzcxhYar/IYIyKmw53wTHyqCOcQG2LowKyTmBe93u16zOlTWgNIMZ NfbuqzAWdbK/F2++K4tnygyjX6s5b77JIsFg0SPmY3JE2ZVhjwUEHJ3JgJwbY8Pt rTXnrPheVwYjXbrwNHmpHIjw7i+JApU= -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:49 2025 by rpki-client