$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/654e38aa-fb7a-3b71-8cef-892826a8190e.roa File: 654e38aa-fb7a-3b71-8cef-892826a8190e.roa (raw, json) Hash identifier: 3GPsOF/BdOpPDZ+3YMSglLXxd8BtRDYGZPkuTyBIOQ4= Subject key identifier: 66:69:0F:93:DB:37:48:3D:54:C6:77:E9:5A:E4:F4:65:BE:A8:46:46 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3A2DEC8DA06B631746E8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/654e38aa-fb7a-3b71-8cef-892826a8190e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3a:2d:ec:8d:a0:6b:63:17:46:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6ff81b0f-2090-4644-a46c-0f29a825f3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0b:7b:94:90:6d:40:dd:4d:d9:e9:ab:2e:66: 47:2e:e7:6d:32:7b:ed:c4:5c:aa:cc:41:d3:de:fc: c0:16:08:80:3f:33:62:70:bf:ef:bc:9c:9b:7c:d5: 0a:56:48:e6:55:7a:26:1b:f4:93:c9:b2:b1:ca:43: 47:a3:46:b9:cb:bf:6a:16:5d:4c:6e:08:5d:79:99: ed:0b:f1:1c:56:0d:61:29:a9:2d:3b:f0:8e:36:7a: 9a:f8:43:29:53:89:66:94:61:7f:e6:88:ba:01:7b: 2c:1f:c7:f2:e9:35:77:fe:3c:9d:a6:88:0e:9f:fe: fa:2c:a0:c0:dc:7a:8f:c0:f2:3c:3d:1d:8c:98:d1: 31:13:6a:d9:90:2f:ea:04:b5:c2:a0:71:83:8e:f7: 65:52:7c:8b:b2:6c:7c:b8:99:9a:89:f3:ed:b0:1e: cf:80:5c:b2:01:6d:76:d3:76:38:cb:ba:84:a1:6e: fc:a4:b2:fb:22:99:23:72:ef:48:fb:36:80:1e:9f: a0:78:70:aa:1d:d1:4e:39:31:73:10:7b:68:41:39: d3:34:09:e5:64:68:4a:f7:7a:85:d7:7a:94:32:b7: b2:39:e5:4f:27:71:84:30:50:70:dc:9b:0c:3e:76: a8:95:2d:38:16:ff:57:a2:89:59:83:ba:7d:5f:68: 4a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:69:0F:93:DB:37:48:3D:54:C6:77:E9:5A:E4:F4:65:BE:A8:46:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/654e38aa-fb7a-3b71-8cef-892826a8190e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:cf:90:75:36:f9:f0:ff:7c:2a:31:ff:92:2f:aa:42:3e:f5: 6d:93:78:77:b9:d9:2b:2b:89:d4:88:0a:2d:55:de:ae:6d:ff: 9a:e3:6c:1f:aa:60:ee:a5:0b:07:0f:9a:03:91:7a:a5:81:cf: be:19:40:a3:b7:c7:58:d6:5e:4d:8c:74:42:c2:f1:ce:f5:96: af:42:e1:fa:ca:1d:bd:4e:ff:0e:c9:e2:eb:d6:ed:59:d6:b3: 3a:d7:bd:a5:58:00:be:2e:ff:bf:80:e6:98:c7:04:25:95:33: 2c:0b:3a:98:a9:56:35:f2:af:06:23:46:36:1b:e8:1e:e9:63: 79:e2:89:d3:75:ba:47:3d:94:b9:3f:17:56:81:58:9b:b2:15: fc:4a:28:98:30:ac:46:ed:ce:9f:45:bd:92:23:3a:14:4a:88: b9:c7:a6:ed:9d:e6:11:40:32:93:7f:c5:b0:9e:0b:ed:01:93: 3e:2f:5d:de:1b:9a:99:58:d8:62:70:16:eb:a9:8b:51:2e:e9: 7d:76:0a:27:5f:6a:29:fa:5d:ea:a7:71:b7:07:fa:6a:5e:30: d0:d9:49:30:2d:0a:fd:21:fd:5a:07:80:9b:92:93:06:db:2b: 5a:60:9e:4d:13:dc:18:c9:99:6c:22:26:bb:bf:7b:a3:1f:5d: e7:6c:8f:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzot7I2ga2MXRugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmZmODFiMGYtMjA5MC00NjQ0LWE0NmMtMGYyOWE4MjVmM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwt7lJBtQN1N2emrLmZHLudtMnvtxFyqzEHT 3vzAFgiAPzNicL/vvJybfNUKVkjmVXomG/STybKxykNHo0a5y79qFl1MbghdeZnt C/EcVg1hKaktO/CONnqa+EMpU4lmlGF/5oi6AXssH8fy6TV3/jydpogOn/76LKDA 3HqPwPI8PR2MmNExE2rZkC/qBLXCoHGDjvdlUnyLsmx8uJmaifPtsB7PgFyyAW12 03Y4y7qEoW78pLL7Ipkjcu9I+zaAHp+geHCqHdFOOTFzEHtoQTnTNAnlZGhK93qF 13qUMreyOeVPJ3GEMFBw3JsMPnaolS04Fv9XoolZg7p9X2hKmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZpD5PbN0g9VMZ36Vrk9GW+qEZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjU0ZTM4YWEtZmI3YS0z YjcxLThjZWYtODkyODI2YTgxOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHPkHU2+fD/fCox/5IvqkI+9W2TeHe52SsridSICi1V3q5t/5rjbB+q YO6lCwcPmgOReqWBz74ZQKO3x1jWXk2MdELC8c71lq9C4frKHb1O/w7J4uvW7VnW szrXvaVYAL4u/7+A5pjHBCWVMywLOpipVjXyrwYjRjYb6B7pY3niidN1ukc9lLk/ F1aBWJuyFfxKKJgwrEbtzp9FvZIjOhRKiLnHpu2d5hFAMpN/xbCeC+0Bkz4vXd4b mplY2GJwFuupi1Eu6X12Cidfain6XeqncbcH+mpeMNDZSTAtCv0h/VoHgJuSkwbb K1pgnk0T3BjJmWwiJru/e6MfXedsj+c= -----END CERTIFICATE-----Generated at Tue Apr 29 10:19:12 2025 by rpki-client