$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa File: 638d0c7c-5c12-3419-add7-d1fee46c98fa.roa (raw, json) Hash identifier: H3BWUzdh/SsrrIHO0CkiQbh7aLGiY2iKW88+npSJ7cg= Subject key identifier: AA:4E:C4:7C:50:2E:D7:48:66:CD:FC:84:7A:0E:88:03:24:6D:36:40 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA91F6839BC1EB9104E8C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:91:f6:83:9b:c1:eb:91:04:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ad424f41-19a1-4b39-972c-f9771295f017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:e3:d6:42:5e:3d:ce:c7:0e:b6:a2:f0:46: 93:b3:bc:91:f1:7e:bc:fb:47:7d:37:5b:8d:fd:70: ac:b7:d2:97:fc:34:cf:ae:93:a5:cf:97:15:00:28: d7:81:8e:19:d2:84:a4:5b:44:31:35:bc:46:31:64: 9b:40:29:f3:c7:2e:51:de:69:ee:d8:0a:10:b6:27: 19:84:91:c5:eb:1c:28:a3:d7:3f:a2:25:eb:2c:15: 10:20:bb:08:94:d3:52:61:bd:32:90:5b:cf:48:67: 71:4a:1e:b8:e7:f1:9c:dd:7c:8b:75:b5:89:cc:ff: f7:f8:22:88:39:6e:a5:bc:c8:d9:de:90:19:16:bf: a4:49:16:2c:3d:1e:b3:24:42:f5:e3:28:7e:e1:29: ef:17:a5:ba:c1:ac:e6:2c:74:2d:67:21:88:1f:11: f8:c8:9b:6d:15:d4:ae:f7:9f:dd:3e:73:bf:12:cc: c6:12:66:5d:bf:2a:e3:13:16:cd:6c:90:a1:15:10: 41:ed:c5:f9:aa:8f:d8:95:e0:fb:dc:85:56:e9:cd: bf:20:5f:89:c6:b6:1e:41:4a:b3:29:8d:bf:b0:72: 7a:6a:c6:e2:00:a3:09:66:da:da:bf:a7:9b:b0:98: 38:3c:90:14:58:f7:49:05:ff:02:6e:75:6f:e5:94: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4E:C4:7C:50:2E:D7:48:66:CD:FC:84:7A:0E:88:03:24:6D:36:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b9:34:83:19:66:32:ce:85:69:57:9c:ba:98:b9:d5:85:75: 0f:45:ae:c1:3e:8e:07:c3:dc:e5:3f:ad:6a:fa:56:47:08:79: 04:72:9b:13:2b:f8:2c:11:4f:24:26:1d:bb:10:cd:75:dc:6c: bb:1f:b6:2b:2b:e3:e6:33:09:db:07:35:e3:6d:13:70:5a:c2: 54:63:d0:e2:5c:31:4f:ab:0d:0d:6b:41:78:6c:df:e8:23:04: f5:8b:16:e4:ee:cd:bd:5c:f0:cf:3f:5a:7e:9b:e6:3c:e4:2b: e3:a5:71:91:ab:c2:f8:0c:78:4e:a0:91:31:eb:07:dd:c2:67: 92:02:58:5e:4b:e7:50:6f:c3:23:0b:bc:f3:0f:56:1d:9f:91: e2:d4:1b:6d:0f:ef:6e:fe:5d:ba:c0:aa:62:55:87:af:11:8d: e7:4e:71:fe:f6:59:08:2b:60:19:dd:9b:11:71:12:f4:8d:36: 89:34:0e:fc:c5:1f:b2:c1:e6:1c:f5:b0:2b:26:34:c3:a9:c5: 7f:1e:7c:4c:7b:d6:08:11:f9:0d:42:b6:44:ac:17:15:76:6a: 1f:66:47:27:d8:7e:6d:4e:c2:42:33:f3:01:48:71:26:89:17: b2:0b:91:e9:08:31:9f:81:cd:98:c5:de:fe:89:ae:c0:f3:70: 4e:32:d0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupH2g5vB65EE6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWQ0MjRmNDEtMTlhMS00YjM5LTk3MmMtZjk3NzEyOTVmMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznXj1kJePc7HDrai8EaTs7yR8X68+0d9N1uN /XCst9KX/DTPrpOlz5cVACjXgY4Z0oSkW0QxNbxGMWSbQCnzxy5R3mnu2AoQticZ hJHF6xwoo9c/oiXrLBUQILsIlNNSYb0ykFvPSGdxSh645/Gc3XyLdbWJzP/3+CKI OW6lvMjZ3pAZFr+kSRYsPR6zJEL14yh+4SnvF6W6wazmLHQtZyGIHxH4yJttFdSu 95/dPnO/EszGEmZdvyrjExbNbJChFRBB7cX5qo/YleD73IVW6c2/IF+JxrYeQUqz KY2/sHJ6asbiAKMJZtrav6ebsJg4PJAUWPdJBf8CbnVv5ZRTpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpOxHxQLtdIZs38hHoOiAMkbTZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjM4ZDBjN2MtNWMxMi0z NDE5LWFkZDctZDFmZWU0NmM5OGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq5NIMZZjLOhWlXnLqYudWFdQ9FrsE+jgfD3OU/rWr6VkcIeQRymxMr +CwRTyQmHbsQzXXcbLsftisr4+YzCdsHNeNtE3BawlRj0OJcMU+rDQ1rQXhs3+gj BPWLFuTuzb1c8M8/Wn6b5jzkK+OlcZGrwvgMeE6gkTHrB93CZ5ICWF5L51BvwyML vPMPVh2fkeLUG20P727+XbrAqmJVh68RjedOcf72WQgrYBndmxFxEvSNNok0DvzF H7LB5hz1sCsmNMOpxX8efEx71ggR+Q1CtkSsFxV2ah9mRyfYfm1OwkIz8wFIcSaJ F7ILkekIMZ+BzZjF3v6JrsDzcE4y0ME= -----END CERTIFICATE-----Generated at Sun Apr 27 05:38:16 2025 by rpki-client