$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa File: 7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa (raw, json) Hash identifier: 6TTYyWp0ZMxJa6ZEIiDucQTVbZRZ9uuBvMGViDnHcDs= Subject key identifier: B1:68:89:ED:D3:97:E8:D1:D8:8A:D8:41:FF:51:AB:30:0A:CA:27:69 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3AF9CD04C2CF0ADEC180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3a:f9:cd:04:c2:cf:0a:de:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1ccc9a11-2a06-4b7e-95a2-6cd96b6458cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:03:17:f6:14:93:f2:28:eb:80:64:a1:ad:7f: 2e:4e:f1:f2:9d:c4:79:be:84:71:89:b3:11:e1:06: a5:df:ee:a1:dc:b0:e7:ed:da:88:fd:e3:57:00:2c: ad:8a:75:2a:68:fb:f6:3a:95:43:f3:8c:54:ec:b2: 3b:f7:1e:e6:10:ca:89:f6:aa:ae:49:c9:2f:71:8c: fc:21:eb:02:6a:5c:95:64:aa:f3:f3:45:aa:f4:90: 6c:e6:69:06:2a:56:b8:cf:4a:c9:32:3b:d2:b3:1c: 37:93:f2:da:be:bc:38:cf:3a:e5:8a:80:42:51:c1: b4:27:a9:23:bb:91:49:f7:9b:5c:f0:cd:f1:cb:43: 5f:03:67:b0:9c:d3:43:db:64:11:48:d2:7d:9e:2c: f7:42:6a:40:54:91:53:f9:39:b9:70:c2:6d:76:77: 2b:cf:01:57:a7:4b:70:70:47:fd:9e:83:d8:fc:5a: 7b:de:d8:bb:58:b7:ea:01:3f:50:1e:28:e4:75:4e: e4:4c:15:4e:67:98:07:a0:cf:66:6d:c3:22:40:be: fe:bf:4d:b8:20:bc:b2:9b:9f:84:8c:c8:89:55:1d: 09:82:06:d9:a8:31:f7:0f:1b:fc:ff:a0:9b:b0:57: b9:aa:e9:64:66:4e:d3:da:3d:64:3b:c3:d5:86:a6: 74:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:68:89:ED:D3:97:E8:D1:D8:8A:D8:41:FF:51:AB:30:0A:CA:27:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7232a66c-f3d0-3aa0-aad2-c594bf74bdb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:78:1b:ad:b7:e4:a5:22:b8:98:c3:56:20:b1:3b:3a:0a:7a: d4:85:88:68:c6:94:a2:b6:fa:bb:7c:c4:ed:6c:7a:60:49:e2: 30:fb:b0:68:0b:cb:a4:79:a4:cb:d9:5e:28:94:23:fd:5a:c6: ba:96:f0:91:14:08:a7:df:7c:7d:d7:5e:b1:cb:5b:91:92:4a: 46:36:e3:68:6e:01:92:fb:ad:f7:a4:36:47:4a:72:97:76:ae: 95:3b:0c:4f:31:f1:91:35:1b:3a:50:35:55:cd:df:b7:1b:1c: 34:a0:e4:b3:08:f0:21:c6:fb:78:02:9b:7e:fa:5b:0d:10:66: 0c:72:33:1a:b8:f9:ce:86:3b:31:42:c3:f8:23:08:eb:f2:70: e0:49:c9:08:fe:8c:01:27:eb:38:9b:3a:05:81:53:0f:92:ad: a1:97:6f:e0:b2:8e:21:7b:c4:01:37:87:0a:53:bd:17:f9:f7: 2d:2e:0f:ec:b5:97:c7:27:7f:99:cd:b8:ca:46:76:46:68:8b: 84:dc:2f:23:cb:d9:53:df:4b:d0:c0:a1:4d:d5:e3:96:19:d7: 9a:b6:61:44:57:ce:51:11:d0:e6:3c:7c:05:eb:e9:88:e6:b0: bd:b9:42:fd:cc:a4:a2:f0:e5:3c:e8:4c:6e:6c:7a:ff:66:a1: 8e:9f:1d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzr5zQTCzwrewYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWNjYzlhMTEtMmEwNi00YjdlLTk1YTItNmNkOTZiNjQ1OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAMX9hST8ijrgGShrX8uTvHyncR5voRxibMR 4Qal3+6h3LDn7dqI/eNXACytinUqaPv2OpVD84xU7LI79x7mEMqJ9qquSckvcYz8 IesCalyVZKrz80Wq9JBs5mkGKla4z0rJMjvSsxw3k/Lavrw4zzrlioBCUcG0J6kj u5FJ95tc8M3xy0NfA2ewnNND22QRSNJ9niz3QmpAVJFT+Tm5cMJtdncrzwFXp0tw cEf9noPY/Fp73ti7WLfqAT9QHijkdU7kTBVOZ5gHoM9mbcMiQL7+v024ILyym5+E jMiJVR0JggbZqDH3Dxv8/6CbsFe5qulkZk7T2j1kO8PVhqZ0pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFoie3Tl+jR2IrYQf9RqzAKyidpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzIzMmE2NmMtZjNkMC0z YWEwLWFhZDItYzU5NGJmNzRiZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ4G6235KUiuJjDViCxOzoKetSFiGjGlKK2+rt8xO1semBJ4jD7sGgL y6R5pMvZXiiUI/1axrqW8JEUCKfffH3XXrHLW5GSSkY242huAZL7rfekNkdKcpd2 rpU7DE8x8ZE1GzpQNVXN37cbHDSg5LMI8CHG+3gCm376Ww0QZgxyMxq4+c6GOzFC w/gjCOvycOBJyQj+jAEn6zibOgWBUw+SraGXb+CyjiF7xAE3hwpTvRf59y0uD+y1 l8cnf5nNuMpGdkZoi4TcLyPL2VPfS9DAoU3V45YZ15q2YURXzlER0OY8fAXr6Yjm sL25Qv3MpKLw5TzoTG5sev9moY6fHew= -----END CERTIFICATE-----Generated at Sun Apr 27 12:24:59 2025 by rpki-client