$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa File: 6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa (raw, json) Hash identifier: 0HVDmr+2+ruZ1EDOn45WMncKC5rVAUoWXk3wvQi9mUU= Subject key identifier: 20:C3:04:27:AA:78:C9:09:FB:82:9B:54:3B:24:5D:C7:F2:08:A6:E1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA91299C5C87012D8BDE40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:91:29:9c:5c:87:01:2d:8b:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b6352185-a1f5-42e2-a3d2-3b965aad7d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:14:5c:7d:04:7b:9d:84:40:e2:55:95:0b:6b: da:05:39:2e:13:ae:ed:a4:71:52:f1:f9:79:0f:54: e0:b0:c5:bf:85:8c:c5:a1:49:bc:c5:27:12:42:6e: 81:05:3e:e5:02:7f:77:52:e3:f8:93:1c:a7:6a:d8: 46:99:b1:2b:6e:ce:a3:e8:b2:e8:97:05:3b:cb:1f: 0f:83:96:28:25:66:55:f2:c8:ea:e1:ea:ae:57:f1: 1a:0b:75:c0:fb:f0:42:bb:ed:d2:3a:c3:07:5a:18: ad:0a:37:34:7e:ff:a5:25:b1:3d:84:34:49:99:f8: 0b:09:8d:d5:8a:e3:0b:e6:84:02:ee:89:80:05:48: 68:e1:83:9c:fc:c4:af:e6:38:2f:c6:20:f6:62:33: 88:fe:62:9a:93:db:44:2b:30:1d:f1:76:3a:ec:bb: 00:f7:75:62:18:48:05:18:83:4c:4d:54:4d:cc:cd: da:ad:62:0a:a4:8b:6f:aa:39:2f:38:55:3c:cd:b4: 5b:2c:8e:97:a6:d9:29:30:ed:c6:30:fd:27:dc:d8: df:84:0a:7f:ee:e8:c8:3a:08:cc:3c:16:ef:8b:d6: 04:5b:35:6e:f3:5d:94:42:e2:bb:01:72:d0:ab:e2: 44:03:91:3a:ad:c8:ac:7f:ab:93:c2:2d:62:3e:44: e0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C3:04:27:AA:78:C9:09:FB:82:9B:54:3B:24:5D:C7:F2:08:A6:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2a:d9:d3:61:8a:f1:4c:37:ca:34:b3:2c:0f:c5:b6:80:3b: 19:93:df:82:58:d1:ed:04:90:73:d9:5a:9c:e7:3a:4c:66:3b: be:f2:c8:fc:0a:09:47:f4:63:0e:59:d7:ef:13:00:ee:79:d0: ca:63:4b:9d:9b:76:3d:9d:71:5a:b3:c2:82:6b:d7:81:38:f4: 59:d7:f8:c7:2b:39:a0:14:56:22:78:44:89:e5:45:4d:21:70: 74:bd:06:08:ec:6f:e2:01:5c:9f:c8:4e:88:70:74:1e:bd:e2: 18:53:e9:a3:fb:58:3e:dd:88:63:ab:4d:b8:ff:44:fd:3a:1b: a2:91:c0:57:45:44:d1:52:4a:ee:74:0e:97:32:30:46:fa:f4: bd:b8:d8:1b:ae:ed:5a:89:28:8c:7f:5b:99:62:37:da:c7:13: a4:93:47:2a:9e:af:d4:1c:8d:5d:65:23:a5:8d:b9:e2:ec:df: 08:93:40:08:95:cd:ff:65:bc:7b:04:fd:ec:f1:71:b0:d6:2d: 25:0b:26:b9:dc:66:83:78:33:c9:1d:93:9f:9d:c0:e5:56:70: 89:80:f7:9c:e7:87:74:ae:88:1b:b6:f1:11:6b:e1:29:d1:65: d6:4a:2a:b6:c6:40:29:94:26:3b:34:f7:29:80:0b:43:2e:ab: 72:f8:6c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupEpnFyHAS2L3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjYzNTIxODUtYTFmNS00MmUyLWEzZDItM2I5NjVhYWQ3ZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixRcfQR7nYRA4lWVC2vaBTkuE67tpHFS8fl5 D1TgsMW/hYzFoUm8xScSQm6BBT7lAn93UuP4kxynathGmbErbs6j6LLolwU7yx8P g5YoJWZV8sjq4equV/EaC3XA+/BCu+3SOsMHWhitCjc0fv+lJbE9hDRJmfgLCY3V iuML5oQC7omABUho4YOc/MSv5jgvxiD2YjOI/mKak9tEKzAd8XY67LsA93ViGEgF GINMTVRNzM3arWIKpItvqjkvOFU8zbRbLI6XptkpMO3GMP0n3NjfhAp/7ujIOgjM PBbvi9YEWzVu812UQuK7AXLQq+JEA5E6rcisf6uTwi1iPkTg9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDDBCeqeMkJ+4KbVDskXcfyCKbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmQ2MzQ2MDMtMjVlMC0z YzNhLWJjNzctM2Y2ZGIxZjBjNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkq2dNhivFMN8o0sywPxbaAOxmT34JY0e0EkHPZWpznOkxmO77yyPwK CUf0Yw5Z1+8TAO550MpjS52bdj2dcVqzwoJr14E49FnX+McrOaAUViJ4RInlRU0h cHS9Bgjsb+IBXJ/ITohwdB694hhT6aP7WD7diGOrTbj/RP06G6KRwFdFRNFSSu50 DpcyMEb69L242Buu7VqJKIx/W5liN9rHE6STRyqer9QcjV1lI6WNueLs3wiTQAiV zf9lvHsE/ezxcbDWLSULJrncZoN4M8kdk5+dwOVWcImA95znh3SuiBu28RFr4SnR ZdZKKrbGQCmUJjs09ymAC0Muq3L4bDM= -----END CERTIFICATE-----Generated at Sun Apr 27 02:22:06 2025 by rpki-client