$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa File: 7271c280-8ac0-3c17-ac66-d4537440da47.roa (raw, json) Hash identifier: k2RVrxJT1k/1hB8ml8MXJTMkSUDpZnpKevx8sGap8ls= Subject key identifier: 07:B3:F8:3F:78:C8:2E:9D:8B:54:20:59:B3:B5:81:53:AD:65:67:48 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B6F6D62F2275FE80800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:6f:6d:62:f2:27:5f:e8:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=23f8251c-b17e-44b1-a4be-8d1995f77e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b9:af:da:59:d8:4b:ad:60:a0:7f:6c:c6:c3: 00:ee:ee:a9:b4:83:45:95:47:a2:7a:a7:07:a8:ce: 86:8e:f2:cf:ba:ca:24:3a:31:df:07:75:aa:89:86: 9f:44:0d:87:71:70:bc:89:e9:c6:40:ee:27:85:ad: 1d:0b:88:c7:a7:40:df:02:0b:5c:07:75:97:50:cb: c4:f3:17:c0:5b:e7:54:80:9a:8e:11:60:88:f2:f4: 74:ff:bf:ec:45:75:b8:51:70:48:a9:35:cc:5d:be: 8d:53:5a:54:40:a5:76:01:9b:c6:74:22:fc:8b:81: 9e:91:b2:7e:dd:5c:0a:71:3c:3b:84:6b:e6:04:ac: 4c:2c:b0:de:62:43:c5:70:43:34:18:81:49:29:7d: 25:64:ac:c1:b6:b6:ec:69:e8:d7:50:08:dc:b6:31: cf:a2:f0:63:b7:cc:46:02:4c:96:7c:be:c4:ba:3a: bb:c3:e6:a8:65:3d:39:dd:0a:1a:1a:0f:0c:73:90: b0:1f:01:e6:2f:cd:d7:75:41:a6:d5:9c:04:2c:34: 00:8f:96:b6:12:09:6d:5b:4e:94:c2:1b:7f:7f:35: e8:3c:47:1f:ec:51:29:d3:b9:77:18:d6:ae:16:ab: 07:f6:3a:6e:3c:53:5d:91:23:21:14:a9:62:8c:fd: b2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B3:F8:3F:78:C8:2E:9D:8B:54:20:59:B3:B5:81:53:AD:65:67:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:87:1e:d2:b0:72:a3:12:14:dd:1f:90:1b:c8:50:7a:98:8f: 88:1d:cc:eb:71:7b:0f:88:e5:88:36:70:09:00:10:0f:8f:42: 65:fb:b3:4c:df:82:d1:09:15:79:ec:25:90:9c:fa:9f:03:35: de:7f:14:5f:eb:d8:8a:43:d6:a1:0b:f3:76:02:cf:b4:9b:ed: 7a:d3:49:90:8f:35:af:16:bc:96:86:f1:ed:18:85:8b:6d:3a: 84:04:28:fb:2d:f2:02:09:83:fd:9c:0f:7a:06:0a:71:bd:04: 74:4f:97:f3:48:aa:ff:86:ec:dc:52:25:a1:1f:24:72:c4:6d: 13:a8:81:e2:be:eb:d1:05:6a:ac:3a:3c:66:18:c0:49:3f:17: 36:d2:e6:60:36:ee:db:9b:4c:bf:fa:3d:50:a8:ee:f5:bd:5a: 27:6a:21:39:dd:10:12:72:92:85:41:f2:d4:5b:58:7f:bc:51: 4b:e0:5f:8a:03:d4:ac:a0:78:f6:2f:b8:7d:4a:76:db:bf:b5: 8c:e5:46:a2:df:8a:fd:87:f2:0b:ca:7d:13:92:b1:1f:cf:ce: 42:dd:71:d8:d0:e0:a4:84:26:ac:e0:94:ac:32:7b:5c:d1:06: 93:5a:c6:c3:42:2e:c3:c1:f2:55:b6:df:22:bf:c7:25:8b:49: fd:aa:01:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuztvbWLyJ1/oCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjNmODI1MWMtYjE3ZS00NGIxLWE0YmUtOGQxOTk1Zjc3ZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7mv2lnYS61goH9sxsMA7u6ptINFlUeieqcH qM6GjvLPusokOjHfB3WqiYafRA2HcXC8ienGQO4nha0dC4jHp0DfAgtcB3WXUMvE 8xfAW+dUgJqOEWCI8vR0/7/sRXW4UXBIqTXMXb6NU1pUQKV2AZvGdCL8i4GekbJ+ 3VwKcTw7hGvmBKxMLLDeYkPFcEM0GIFJKX0lZKzBtrbsaejXUAjctjHPovBjt8xG AkyWfL7Eujq7w+aoZT053QoaGg8Mc5CwHwHmL83XdUGm1ZwELDQAj5a2EgltW06U wht/fzXoPEcf7FEp07l3GNauFqsH9jpuPFNdkSMhFKlijP2yOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAez+D94yC6di1QgWbO1gVOtZWdIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzI3MWMyODAtOGFjMC0z YzE3LWFjNjYtZDQ1Mzc0NDBkYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANaHHtKwcqMSFN0fkBvIUHqYj4gdzOtxew+I5Yg2cAkAEA+PQmX7s0zf gtEJFXnsJZCc+p8DNd5/FF/r2IpD1qEL83YCz7Sb7XrTSZCPNa8WvJaG8e0YhYtt OoQEKPst8gIJg/2cD3oGCnG9BHRPl/NIqv+G7NxSJaEfJHLEbROogeK+69EFaqw6 PGYYwEk/FzbS5mA27tubTL/6PVCo7vW9WidqITndEBJykoVB8tRbWH+8UUvgX4oD 1KygePYvuH1Kdtu/tYzlRqLfiv2H8gvKfROSsR/PzkLdcdjQ4KSEJqzglKwye1zR BpNaxsNCLsPB8lW23yK/xyWLSf2qAbY= -----END CERTIFICATE-----Generated at Sun Apr 27 20:29:23 2025 by rpki-client