$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6aa8af21-2c82-3299-b18e-6f4f34a7e576.roa File: 6aa8af21-2c82-3299-b18e-6f4f34a7e576.roa (raw, json) Hash identifier: ih2HNW0J3/SZStO060uVGiDdeWM5aLScTW7en3AKX2I= Subject key identifier: DD:84:DA:A7:C1:4D:80:6B:07:D6:CA:B7:51:67:EE:A0:41:22:B3:1A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9369E03D13D60DB80D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6aa8af21-2c82-3299-b18e-6f4f34a7e576.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:93:69:e0:3d:13:d6:0d:b8:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=914a3f49-8a3b-4eb8-9d16-7efa558f436d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:6d:35:99:af:18:3a:b4:6b:d2:86:c1:11: cc:86:14:b0:bb:f4:05:60:bd:57:b3:f9:a7:33:bc: 97:e3:52:9d:7e:b2:4f:67:dc:54:c8:c3:44:a2:ab: c9:9b:ad:80:eb:94:8e:83:c4:44:da:66:c3:de:6d: fe:f6:6d:fb:98:e3:eb:54:fa:c6:f6:b2:68:0e:90: 1f:2e:22:c3:50:ba:b8:39:9f:d4:84:f1:0a:4b:ed: 37:6f:4b:7c:20:bd:78:f3:68:94:20:43:d7:1a:24: 9e:7c:03:b0:52:7f:b1:be:2e:28:7a:f9:45:a3:e7: c7:45:ae:6a:e1:e3:e0:3d:dc:49:02:f5:b9:2e:c8: 5c:b2:92:35:5c:2a:23:64:eb:df:1c:e8:68:4c:87: b5:91:e6:67:ec:e8:86:29:65:ac:37:29:1b:1e:43: 19:dd:8a:1e:da:9b:37:7c:64:cd:76:19:30:13:e4: fc:99:d4:c5:1b:a7:bd:2a:6e:3e:b2:80:fc:fd:fd: 8f:cc:56:b4:3f:95:b1:00:5c:2d:9d:b7:42:35:70: 61:ab:54:a9:cb:db:e2:6a:d2:aa:b5:a2:76:26:d9: 78:70:68:ef:8b:e5:9d:56:c3:28:73:f0:dc:73:d9: e3:f3:95:a5:d7:f7:29:ee:77:19:5d:5a:cf:f4:44: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:84:DA:A7:C1:4D:80:6B:07:D6:CA:B7:51:67:EE:A0:41:22:B3:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6aa8af21-2c82-3299-b18e-6f4f34a7e576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:75:ef:15:5c:a9:ab:09:7c:a0:cd:40:08:0f:91:d8:7b:06: ff:ab:1c:2c:4d:f0:81:78:ea:2e:ac:0a:ed:8f:d2:41:b4:2e: 48:56:ae:df:cd:de:75:8b:b9:e4:60:33:fb:34:77:d1:10:73: a6:b1:0c:f9:62:c5:4a:44:3e:e0:26:e1:83:67:c7:66:18:7b: 4a:72:e1:3a:75:41:e6:90:b0:d6:18:dc:06:9f:8b:59:8e:05: 12:55:c9:1a:0a:cb:56:0f:71:bf:3a:c4:3e:fc:e3:8d:6a:32: 49:a8:0b:3a:4f:8f:e6:e0:ad:43:22:a4:21:d1:dc:18:10:49: 6e:e1:a3:e6:d1:4b:ab:80:8b:be:bf:fc:81:e9:d1:98:12:d9: 92:fb:04:2c:7b:a0:a0:71:86:65:a5:34:c0:91:ac:7b:ca:83: 17:d1:1c:05:33:26:22:c9:ec:c1:b6:84:b8:e5:63:00:b4:44: 31:6b:66:36:91:20:7d:70:8a:78:97:66:51:9f:1b:ec:70:68: 1f:26:d7:20:34:9e:47:a3:9e:f3:ea:d4:62:57:2c:54:6f:7b: 58:95:3c:0a:f2:59:53:91:92:89:88:6c:d1:24:42:08:5b:9f: 01:ff:a3:b9:b1:f9:d8:03:e4:cc:59:e7:90:e8:a9:c1:61:c4: f4:41:43:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupNp4D0T1g24DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTE0YTNmNDktOGEzYi00ZWI4LTlkMTYtN2VmYTU1OGY0MzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEhtNZmvGDq0a9KGwRHMhhSwu/QFYL1Xs/mn M7yX41KdfrJPZ9xUyMNEoqvJm62A65SOg8RE2mbD3m3+9m37mOPrVPrG9rJoDpAf LiLDULq4OZ/UhPEKS+03b0t8IL1482iUIEPXGiSefAOwUn+xvi4oevlFo+fHRa5q 4ePgPdxJAvW5LshcspI1XCojZOvfHOhoTIe1keZn7OiGKWWsNykbHkMZ3Yoe2ps3 fGTNdhkwE+T8mdTFG6e9Km4+soD8/f2PzFa0P5WxAFwtnbdCNXBhq1Spy9viatKq taJ2Jtl4cGjvi+WdVsMoc/Dcc9nj85Wl1/cp7ncZXVrP9EQwfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2E2qfBTYBrB9bKt1Fn7qBBIrMaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmFhOGFmMjEtMmM4Mi0z Mjk5LWIxOGUtNmY0ZjM0YTdlNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ17xVcqasJfKDNQAgPkdh7Bv+rHCxN8IF46i6sCu2P0kG0LkhWrt/N 3nWLueRgM/s0d9EQc6axDPlixUpEPuAm4YNnx2YYe0py4Tp1QeaQsNYY3Aafi1mO BRJVyRoKy1YPcb86xD78441qMkmoCzpPj+bgrUMipCHR3BgQSW7ho+bRS6uAi76/ /IHp0ZgS2ZL7BCx7oKBxhmWlNMCRrHvKgxfRHAUzJiLJ7MG2hLjlYwC0RDFrZjaR IH1winiXZlGfG+xwaB8m1yA0nkejnvPq1GJXLFRve1iVPAryWVORkomIbNEkQghb nwH/o7mx+dgD5MxZ55DoqcFhxPRBQ1Q= -----END CERTIFICATE-----Generated at Sun Apr 27 10:14:25 2025 by rpki-client