$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dbce31f-f057-3e8e-9fe6-46b165ce7862.roa File: 6dbce31f-f057-3e8e-9fe6-46b165ce7862.roa (raw, json) Hash identifier: bST+mRHwcVXwaiJTsCpLiXF/StDHnSzea0GwVEML9yY= Subject key identifier: E0:E0:56:5A:E0:6D:E5:47:BD:54:62:68:16:3E:64:4B:F7:A2:7E:55 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB35EE8009CB87930A5680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dbce31f-f057-3e8e-9fe6-46b165ce7862.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:35:ee:80:09:cb:87:93:0a:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=928f57e0-1345-47b1-8e1c-7e5603540240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:4c:07:8f:fe:bd:58:50:a6:15:3c:45:2b: 8b:e4:9d:77:e5:30:80:d4:7c:3a:05:4c:6d:33:66: cf:a7:14:a6:50:06:16:bc:67:b7:50:ba:8e:9d:53: 71:a4:d3:cc:82:13:af:8d:88:57:c2:46:3e:bd:5d: 47:2b:d8:b6:c4:22:f9:6f:af:1a:7f:00:7d:af:79: 0a:13:da:0a:b8:44:0f:83:26:fa:98:16:07:72:d4: f6:ac:cd:70:34:62:99:60:ff:0a:80:26:cf:ed:b3: 9e:03:fe:9f:44:e6:04:71:89:f6:fa:6e:07:29:bc: b6:a9:cd:b2:39:d6:92:d7:f1:73:67:f3:e8:d7:cb: 82:f8:dd:4f:42:8d:65:fd:bd:5b:b8:e5:d1:ed:b5: 58:ea:7c:9d:d2:4c:1f:de:99:e0:ac:bb:41:a0:c2: 3c:ec:a3:4d:d2:3c:ba:9e:88:48:34:e2:13:68:75: d2:64:95:74:eb:c6:1f:5c:90:07:c4:53:26:67:52: f6:71:d9:eb:50:b8:2a:0b:76:d7:64:fa:c4:0b:c8: 19:ca:56:85:c4:08:e4:74:7a:d9:20:da:9c:1c:e7: 78:99:6e:70:fa:8d:08:2b:bb:db:d4:d2:22:00:f7: e1:51:6c:5e:df:e0:b3:e7:36:2f:ff:32:2a:c1:a9: 36:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E0:56:5A:E0:6D:E5:47:BD:54:62:68:16:3E:64:4B:F7:A2:7E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dbce31f-f057-3e8e-9fe6-46b165ce7862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:5e:1a:66:89:2e:d3:73:da:39:69:08:22:e6:16:3c:d9:96: dd:4c:0e:f7:7d:73:af:95:67:82:0e:66:4e:b5:6b:6a:4a:b0: 9b:f7:bc:ea:d0:12:5a:64:5b:17:42:45:f7:3d:86:99:5d:b0: e4:11:3d:9a:74:49:61:6a:7f:3b:84:ab:5b:e2:2f:f4:c5:df: d4:9f:ba:b8:7a:7e:ab:6d:2e:7c:ec:db:63:2d:06:a6:ae:5b: 5c:0d:26:95:20:ca:2f:00:91:b6:84:83:fc:74:5e:d4:84:14: c9:ab:9c:bc:29:7a:14:62:6d:9b:f1:c4:42:70:39:c5:83:bf: 92:4f:f4:8d:7e:58:85:ed:93:14:ba:3f:5f:b3:c0:8f:41:7b: 12:5b:9f:c0:08:bd:75:04:e5:d8:da:6a:c7:e7:9a:e6:66:2e: 32:88:f7:87:b5:41:50:1f:62:e5:97:b9:62:19:60:1f:e9:31: 2f:97:e1:1f:d9:f7:c6:51:93:25:f8:93:1b:04:6d:df:35:b7: 66:25:07:99:71:54:40:6e:17:af:72:ac:76:f9:b3:f3:7e:f6: a9:68:4a:de:97:8d:f1:57:1c:cf:8e:07:8a:0d:ad:03:98:57: 72:38:aa:b0:43:9b:5c:a0:0d:d7:a5:1d:e5:57:0d:7d:79:9a: e5:96:d9:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzXugAnLh5MKVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTI4ZjU3ZTAtMTM0NS00N2IxLThlMWMtN2U1NjAzNTQwMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlxMB4/+vVhQphU8RSuL5J135TCA1Hw6BUxt M2bPpxSmUAYWvGe3ULqOnVNxpNPMghOvjYhXwkY+vV1HK9i2xCL5b68afwB9r3kK E9oKuEQPgyb6mBYHctT2rM1wNGKZYP8KgCbP7bOeA/6fROYEcYn2+m4HKby2qc2y OdaS1/FzZ/Po18uC+N1PQo1l/b1buOXR7bVY6nyd0kwf3pngrLtBoMI87KNN0jy6 nohINOITaHXSZJV068YfXJAHxFMmZ1L2cdnrULgqC3bXZPrEC8gZylaFxAjkdHrZ INqcHOd4mW5w+o0IK7vb1NIiAPfhUWxe3+Cz5zYv/zIqwak2RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODgVlrgbeVHvVRiaBY+ZEv3on5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmRiY2UzMWYtZjA1Ny0z ZThlLTlmZTYtNDZiMTY1Y2U3ODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJeGmaJLtNz2jlpCCLmFjzZlt1MDvd9c6+VZ4IOZk61a2pKsJv3vOrQ ElpkWxdCRfc9hpldsOQRPZp0SWFqfzuEq1viL/TF39Sfurh6fqttLnzs22MtBqau W1wNJpUgyi8AkbaEg/x0XtSEFMmrnLwpehRibZvxxEJwOcWDv5JP9I1+WIXtkxS6 P1+zwI9BexJbn8AIvXUE5djaasfnmuZmLjKI94e1QVAfYuWXuWIZYB/pMS+X4R/Z 98ZRkyX4kxsEbd81t2YlB5lxVEBuF69yrHb5s/N+9qloSt6XjfFXHM+OB4oNrQOY V3I4qrBDm1ygDdelHeVXDX15muWW2aQ= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:39 2025 by rpki-client