$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa File: 68f42845-cc20-3621-b523-10070dd8ca9f.roa (raw, json) Hash identifier: 606d39pSkvLBd1TGBXfeM8eW7WWjkzM7wcE+6v5nDa0= Subject key identifier: 89:50:82:13:47:0F:71:7F:F3:00:B7:9E:9E:D3:F9:CC:32:E0:BE:35 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB32CD459B41B1214AC580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:32:cd:45:9b:41:b1:21:4a:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9824a9de-2615-43ee-9210-792ee2bea4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:38:8d:90:19:6f:b8:8e:0f:42:02:71:0a:e8: 49:95:c0:a0:6c:85:7e:d2:5d:9d:d1:98:48:48:9a: 58:01:d2:b3:5f:02:e1:f1:bf:2e:67:00:a0:8a:bc: 4f:64:34:47:34:77:a3:88:ef:8f:c6:eb:79:12:bf: af:9c:20:9f:51:7a:d9:02:1c:76:18:1d:12:1b:28: 44:2d:b3:0a:1d:2b:85:56:05:ea:c7:d6:14:17:87: f6:51:16:17:63:3a:0c:ae:b9:53:52:63:6a:e4:d4: e1:c6:32:26:d5:f9:53:1d:f1:1a:7f:91:c9:92:23: f9:c6:9c:43:4c:cf:fd:d9:b7:f7:de:4e:0c:cc:a5: bd:0f:3c:ce:a2:4e:87:95:41:28:80:6d:5d:4d:6c: 5c:ec:0f:13:f5:43:98:01:79:d9:4c:6b:67:a6:be: 8d:a9:6c:7a:66:c6:86:d0:bb:26:fb:76:bd:8e:62: 2b:32:d5:ca:d2:71:43:83:d8:27:b8:16:9c:af:0d: c6:37:b2:17:99:a7:61:14:e0:93:c7:86:8b:74:6b: d2:99:09:70:22:28:42:74:b6:3c:1f:17:10:bb:11: e5:c9:e5:7c:26:6d:f2:92:bd:3d:a5:26:08:33:70: 00:af:5d:2e:68:a3:2b:c0:48:98:f6:6e:5e:22:fc: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:50:82:13:47:0F:71:7F:F3:00:B7:9E:9E:D3:F9:CC:32:E0:BE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f5:06:28:8b:d9:6a:17:0f:26:85:4c:c4:b9:ef:61:63:ab: 47:a5:ff:f2:24:30:6d:d3:10:ad:2a:ea:e3:65:b8:d5:0d:85: 6b:9b:76:bd:84:a2:7e:e9:d6:3c:e7:bb:18:dd:8e:d6:52:e4: 96:cf:63:85:19:a0:aa:d5:9e:f9:25:e7:79:5e:66:7b:5a:57: da:3b:be:f9:d2:4a:5a:68:28:96:5e:a7:8b:11:4c:e0:5c:89: 22:bc:4d:73:91:a3:9a:cf:14:71:a4:b4:d1:89:35:a6:d4:a3: f4:c0:ac:b7:b1:af:34:e5:60:7c:d2:06:0a:e0:df:7f:d3:36: ac:ca:cc:f1:61:30:40:8b:b0:58:05:b6:de:33:2a:db:f3:38: 99:6e:42:d9:2c:7c:b7:10:03:d8:e2:41:36:26:a9:eb:71:ad: 24:65:e6:e9:10:ba:56:31:c1:f7:94:dc:c4:2d:91:00:22:0a: 4e:1e:8c:7f:de:dc:86:5f:bd:a4:ae:e2:a1:e7:d5:8e:ba:e7: 49:69:11:60:3e:b6:f8:e6:00:4f:1b:bb:f1:0e:a6:86:93:8c: 84:33:d0:15:8b:e1:9b:ea:3b:52:18:83:df:bd:3e:f7:d0:03: 5e:1b:c2:c3:ce:66:fb:4b:0b:ed:5a:bd:91:0a:ab:62:73:e0: 2f:fd:55:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzLNRZtBsSFKxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTgyNGE5ZGUtMjYxNS00M2VlLTkyMTAtNzkyZWUyYmVhNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDiNkBlvuI4PQgJxCuhJlcCgbIV+0l2d0ZhI SJpYAdKzXwLh8b8uZwCgirxPZDRHNHejiO+Pxut5Er+vnCCfUXrZAhx2GB0SGyhE LbMKHSuFVgXqx9YUF4f2URYXYzoMrrlTUmNq5NThxjIm1flTHfEaf5HJkiP5xpxD TM/92bf33k4MzKW9DzzOok6HlUEogG1dTWxc7A8T9UOYAXnZTGtnpr6NqWx6ZsaG 0Lsm+3a9jmIrMtXK0nFDg9gnuBacrw3GN7IXmadhFOCTx4aLdGvSmQlwIihCdLY8 HxcQuxHlyeV8Jm3ykr09pSYIM3AAr10uaKMrwEiY9m5eIvzQyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlQghNHD3F/8wC3np7T+cwy4L41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjhmNDI4NDUtY2MyMC0z NjIxLWI1MjMtMTAwNzBkZDhjYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPITMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA71BiiL2WoXDyaFTMS572Fjq0el//IkMG3TEK0q6uNluNUNhWubdr2E on7p1jznuxjdjtZS5JbPY4UZoKrVnvkl53leZntaV9o7vvnSSlpoKJZep4sRTOBc iSK8TXORo5rPFHGktNGJNabUo/TArLexrzTlYHzSBgrg33/TNqzKzPFhMECLsFgF tt4zKtvzOJluQtksfLcQA9jiQTYmqetxrSRl5ukQulYxwfeU3MQtkQAiCk4ejH/e 3IZfvaSu4qHn1Y6650lpEWA+tvjmAE8bu/EOpoaTjIQz0BWL4ZvqO1IYg9+9PvfQ A14bwsPOZvtLC+1avZEKq2Jz4C/9Vf8= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:42 2025 by rpki-client