$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa File: 6d02bb79-bd14-3045-b676-fd4335e3f038.roa (raw, json) Hash identifier: /ekgu5O9DtK4W9bmaBUkOJ8stmx1fElPDsJi9f5rnkw= Subject key identifier: BF:CC:04:5F:69:09:02:A1:98:B0:D1:79:99:41:DF:04:82:A3:14:92 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9253C4E426C07A167C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:92:53:c4:e4:26:c0:7a:16:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6f3e31b7-963c-4834-b49d-8f7d2af5fc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:04:fb:ff:8d:36:7a:87:ae:f1:0b:3a:2c: 82:50:74:3d:a1:6b:c6:ca:d6:14:d7:3e:b2:33:e0: c2:c6:15:67:84:bf:5e:0f:17:18:16:29:ce:2c:37: a2:8f:d6:0a:42:d0:da:5e:39:20:c0:e9:6b:50:38: 90:cf:41:29:51:6c:51:56:9f:c2:a3:ed:bd:46:a2: a0:cc:46:47:62:2d:23:74:69:e6:7b:b8:0e:12:a9: 90:e9:df:c3:df:28:d3:44:68:38:ab:ab:c5:fe:ed: 27:a4:18:c8:9f:70:43:52:6e:13:f2:d5:a1:bd:81: 5f:10:f9:72:4b:9f:99:30:b4:11:88:64:d4:ed:af: 5f:12:ae:b4:7e:33:14:25:8d:31:74:7a:1c:75:fe: 58:b9:36:ce:0c:24:32:55:dd:fe:34:d4:51:e8:9f: 83:be:f5:10:4c:66:a3:ea:4a:60:32:21:63:3e:c0: eb:43:ae:bf:72:3b:32:55:8c:25:53:6c:1a:54:d4: 54:d4:06:25:23:5a:79:6f:e2:c8:87:49:ac:01:b7: 52:b3:1a:c6:a7:a6:92:ae:13:c4:78:f5:c9:01:85: 16:9f:0f:6f:70:23:94:61:c9:76:77:6f:f7:d8:a3: 0a:fa:b9:61:99:58:b4:d0:d3:98:97:d8:6d:25:31: d8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CC:04:5F:69:09:02:A1:98:B0:D1:79:99:41:DF:04:82:A3:14:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c0:df:8e:40:a0:66:e2:90:d3:38:e4:23:98:6b:fb:64:5d: 06:a2:dc:4f:4f:cf:48:6d:67:66:88:26:4e:45:7b:a8:0f:fa: 51:a4:79:15:d1:df:37:fe:ba:85:f5:af:3d:d9:b0:94:f7:09: a0:8e:79:db:06:c3:6f:1b:63:10:9b:af:19:9e:67:23:dd:dd: 9c:4b:b9:c4:61:f9:4b:3f:ae:8f:b7:6b:45:e9:56:fa:32:a9: e8:e1:bc:ec:78:55:37:4e:c0:9b:03:a8:ed:4c:41:3a:7e:eb: a7:47:0a:64:82:c1:48:f8:a8:62:52:e7:ea:9b:e2:9f:79:7a: 4f:05:17:b1:2f:ec:73:fe:b2:f9:ae:c1:93:b8:a5:d9:62:63: 4e:ee:08:23:6c:c2:f7:04:63:44:43:ce:ad:3a:80:c4:61:11: 23:8d:45:50:0a:52:8d:fa:bc:d6:e2:59:4b:ce:1f:b3:f6:28: 8c:ee:99:c7:b2:74:62:9c:b0:5f:2f:7e:35:8b:c3:8e:7d:d4: 8f:ca:42:b6:18:6e:4e:09:8b:fa:b2:23:19:a7:90:f2:c2:2c: d6:7c:6a:0d:8b:52:3f:1b:87:20:c5:a1:8b:db:cf:97:32:87: d2:6c:07:52:19:59:96:e9:23:aa:d0:62:c2:c2:61:b6:89:06: 08:94:e4:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupJTxOQmwHoWfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmYzZTMxYjctOTYzYy00ODM0LWI0OWQtOGY3ZDJhZjVmYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L4E+/+NNnqHrvELOiyCUHQ9oWvGytYU1z6y M+DCxhVnhL9eDxcYFinOLDeij9YKQtDaXjkgwOlrUDiQz0EpUWxRVp/Co+29RqKg zEZHYi0jdGnme7gOEqmQ6d/D3yjTRGg4q6vF/u0npBjIn3BDUm4T8tWhvYFfEPly S5+ZMLQRiGTU7a9fEq60fjMUJY0xdHocdf5YuTbODCQyVd3+NNRR6J+DvvUQTGaj 6kpgMiFjPsDrQ66/cjsyVYwlU2waVNRU1AYlI1p5b+LIh0msAbdSsxrGp6aSrhPE ePXJAYUWnw9vcCOUYcl2d2/32KMK+rlhmVi00NOYl9htJTHY7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/MBF9pCQKhmLDReZlB3wSCoxSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmQwMmJiNzktYmQxNC0z MDQ1LWI2NzYtZmQ0MzM1ZTNmMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXA345AoGbikNM45COYa/tkXQai3E9Pz0htZ2aIJk5Fe6gP+lGkeRXR 3zf+uoX1rz3ZsJT3CaCOedsGw28bYxCbrxmeZyPd3ZxLucRh+Us/ro+3a0XpVvoy qejhvOx4VTdOwJsDqO1MQTp+66dHCmSCwUj4qGJS5+qb4p95ek8FF7Ev7HP+svmu wZO4pdliY07uCCNswvcEY0RDzq06gMRhESONRVAKUo36vNbiWUvOH7P2KIzumcey dGKcsF8vfjWLw4591I/KQrYYbk4Ji/qyIxmnkPLCLNZ8ag2LUj8bhyDFoYvbz5cy h9JsB1IZWZbpI6rQYsLCYbaJBgiU5LQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:42:21 2025 by rpki-client