$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6711adc4-a444-398f-95b1-a8ac6a40c6f0.roa File: 6711adc4-a444-398f-95b1-a8ac6a40c6f0.roa (raw, json) Hash identifier: AlJY3JSJChGQfYkzuUim/Mb8qagPRjbQUqqfqFsxXHg= Subject key identifier: 50:26:01:CA:8A:96:C9:A4:B2:9B:9A:75:A1:51:31:BB:1A:2A:D9:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3E65D3B4015D1E53DA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6711adc4-a444-398f-95b1-a8ac6a40c6f0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3e:65:d3:b4:01:5d:1e:53:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c98c031e-0ad2-4591-a4fe-8450f960a7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:18:34:21:74:9d:ca:34:a6:0f:b6:cf:1b: ca:38:4a:8f:c7:1b:5e:cc:4f:96:17:8b:04:39:98: 66:ae:0b:d1:c2:7c:5a:e0:32:8e:6a:c8:ff:8f:0c: ee:9c:ba:72:00:b0:7a:17:51:e2:56:3a:91:1b:15: b6:d1:9d:5b:1a:4c:5a:76:b5:19:9d:fb:fc:b1:ce: 3e:e1:07:b8:37:1f:5a:18:05:fa:32:2c:e7:ee:13: 70:2d:69:38:69:b7:bf:a0:cf:8a:ae:80:b0:c8:7b: 50:64:ac:b4:df:9c:d8:95:c5:92:87:df:eb:93:0c: 37:22:41:fc:5a:d8:4e:f2:fa:d7:03:07:0e:b8:45: 03:f6:9f:51:53:58:5f:4b:25:36:80:73:ca:37:14: 01:57:9a:5c:e6:79:e8:bd:07:21:cd:23:f4:a3:47: 4e:91:06:a4:de:38:e0:fd:78:43:a7:6b:db:f9:b3: de:34:df:b6:2e:d3:c6:12:e0:19:49:4c:6b:90:8d: b7:2e:45:b4:06:17:68:56:81:e9:4a:78:c7:68:a5: a2:91:96:fe:63:80:c2:41:93:2e:71:aa:b4:ef:4b: c3:25:c9:01:8d:63:11:48:df:c5:83:ed:7f:75:ab: bc:0e:dc:9b:d5:09:ba:63:f5:ec:8f:0e:03:d6:78: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:26:01:CA:8A:96:C9:A4:B2:9B:9A:75:A1:51:31:BB:1A:2A:D9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6711adc4-a444-398f-95b1-a8ac6a40c6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:91:af:ab:cd:07:4e:23:64:5f:b1:02:96:fe:c8:ca:81:21: 11:9e:cb:7b:e8:ed:66:59:04:04:75:b8:bb:bf:c3:16:28:71: c4:50:e5:3e:c0:84:6e:32:10:22:9f:0d:46:96:62:38:41:be: 2d:df:89:c5:02:5f:f2:39:7c:73:70:71:e0:17:db:5e:6b:2e: 7b:84:a3:62:75:c5:1a:b0:dd:54:77:b8:ad:16:46:70:b3:45: 67:93:d8:dd:53:18:96:1d:be:ca:4e:d3:af:7f:f9:87:1d:ef: 91:13:53:bf:7d:dc:aa:7e:b7:bd:14:36:f8:be:3d:e4:d6:0e: 9b:2a:2c:82:c0:89:e7:4a:89:d4:44:6e:36:a4:b9:06:0c:23: c2:97:e8:a7:c2:b9:b9:3e:f7:3f:23:b2:65:14:9c:66:d1:f7: 6f:ec:c1:57:68:06:0a:28:ba:ac:88:a7:2d:57:c1:8d:33:22: 40:5f:dc:2e:77:aa:e8:d2:25:e2:94:79:b0:1f:6c:18:b1:54: 34:dc:1f:9d:01:ff:dc:51:89:5f:b1:7a:e0:39:8a:8b:8f:9c: 6f:5b:c4:85:66:4a:3a:b9:89:a3:74:ad:c9:77:8a:19:3a:f7: 02:b0:a9:8b:ce:3b:82:9f:13:e0:a7:1c:d6:38:5a:d5:fb:ae: 06:6f:a8:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz5l07QBXR5T2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Yzk4YzAzMWUtMGFkMi00NTkxLWE0ZmUtODQ1MGY5NjBhN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/kYNCF0nco0pg+2zxvKOEqPxxtezE+WF4sE OZhmrgvRwnxa4DKOasj/jwzunLpyALB6F1HiVjqRGxW20Z1bGkxadrUZnfv8sc4+ 4Qe4Nx9aGAX6Mizn7hNwLWk4abe/oM+KroCwyHtQZKy035zYlcWSh9/rkww3IkH8 WthO8vrXAwcOuEUD9p9RU1hfSyU2gHPKNxQBV5pc5nnovQchzSP0o0dOkQak3jjg /XhDp2vb+bPeNN+2LtPGEuAZSUxrkI23LkW0BhdoVoHpSnjHaKWikZb+Y4DCQZMu caq070vDJckBjWMRSN/Fg+1/dau8Dtyb1Qm6Y/Xsjw4D1ngqgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAmAcqKlsmkspuadaFRMbsaKtmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjcxMWFkYzQtYTQ0NC0z OThmLTk1YjEtYThhYzZhNDBjNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJORr6vNB04jZF+xApb+yMqBIRGey3vo7WZZBAR1uLu/wxYoccRQ5T7A hG4yECKfDUaWYjhBvi3ficUCX/I5fHNwceAX215rLnuEo2J1xRqw3VR3uK0WRnCz RWeT2N1TGJYdvspO069/+Ycd75ETU7993Kp+t70UNvi+PeTWDpsqLILAiedKidRE bjakuQYMI8KX6KfCubk+9z8jsmUUnGbR92/swVdoBgoouqyIpy1XwY0zIkBf3C53 qujSJeKUebAfbBixVDTcH50B/9xRiV+xeuA5iouPnG9bxIVmSjq5iaN0rcl3ihk6 9wKwqYvOO4KfE+CnHNY4WtX7rgZvqCs= -----END CERTIFICATE-----Generated at Sun Apr 27 06:44:44 2025 by rpki-client