$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa File: 7e1fc77f-639e-3273-a5fa-899d78297142.roa (raw, json) Hash identifier: AToVbo5vZx2CtnvxQAhcLx+L2QYNMhiUFVmu9KUj+lE= Subject key identifier: 91:50:B8:B9:60:57:D1:84:B1:3D:04:D4:44:48:98:4D:E6:3C:8F:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3BC517370651B9802B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:c5:17:37:06:51:b9:80:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=aff139b5-9c5f-4344-8866-97faa0ea1481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8a:e6:a0:cd:4e:31:31:da:6c:9f:d7:55:3a: d1:90:08:30:ca:07:f5:b5:fb:04:d0:4f:83:95:e9: 7f:11:b6:f9:1d:2c:69:64:68:ad:d0:aa:21:e8:39: 91:d2:d7:71:29:79:7d:4a:6d:b9:70:16:f2:cc:67: 1a:17:c1:d7:da:94:4c:99:bd:04:94:2f:23:1d:eb: af:3e:6d:50:58:8a:14:69:1b:ab:de:e5:61:b8:8e: 95:69:8e:8f:6e:b3:2e:a7:74:c3:07:31:f4:c6:36: 3c:8c:f4:48:e8:bf:07:28:4e:71:40:2c:12:2e:cc: 5c:06:df:d4:a1:03:0f:58:1d:51:14:0e:80:b1:44: 91:8b:e3:0e:dc:81:b0:0c:55:82:d8:e6:21:40:58: bf:70:5c:a2:4c:28:18:b1:85:6a:af:51:87:ea:53: 01:6f:cb:c3:7a:9a:2e:db:64:80:69:4d:1d:66:ec: f6:07:9e:8b:bc:cc:9d:43:48:8d:dc:f5:ca:11:84: e4:80:f7:69:ee:a5:66:20:7e:d5:6c:4d:62:22:f0: ef:ef:48:09:96:b8:0d:10:5c:6e:b3:91:11:66:ef: bf:df:c2:20:fe:9c:21:b3:00:98:19:3c:08:f8:8a: ac:40:9d:ae:d9:96:6b:ed:63:64:d6:0d:a4:ee:87: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:50:B8:B9:60:57:D1:84:B1:3D:04:D4:44:48:98:4D:E6:3C:8F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:dc:fd:80:f8:07:fe:09:08:7a:6d:2e:19:78:af:ca:9e:5b: 4d:60:5a:ea:d5:c1:ed:7d:3a:7c:3c:1c:a6:71:ae:ab:c2:ed: 74:67:88:5a:ab:57:63:6d:29:de:9a:57:39:fd:b1:cd:ec:8e: cb:03:25:48:b5:f0:51:fc:64:d1:64:e0:ab:93:d9:65:58:fb: e6:28:f6:65:f8:12:8a:5b:58:db:58:96:90:fb:89:07:2f:61: 18:34:a4:28:9a:fd:aa:7d:b7:a5:0e:56:c0:7a:ed:39:99:db: d7:3e:85:24:d7:97:ad:28:86:43:29:47:ce:26:c4:dc:d9:b4: 32:e2:eb:13:3e:06:22:9f:42:43:0e:27:ee:d2:14:b1:28:4e: 9f:58:e9:9e:87:42:9c:bc:bb:2d:bb:ac:f7:1a:e7:06:43:4a: 7e:04:f7:a7:08:80:5a:98:41:05:28:55:0b:08:39:1d:3a:d4: 50:62:d4:cc:76:49:16:91:be:3b:8f:40:36:1c:2a:7d:ec:a6: e6:e2:61:71:77:44:01:7d:fc:84:ee:a0:9e:8d:2a:0d:d8:62: cf:ec:82:65:a9:08:76:41:fb:16:3c:1d:a9:63:f7:5d:f8:d2: ad:5c:e1:86:ea:20:10:85:2c:82:1a:d1:93:dc:44:2a:39:c6: fa:a2:ac:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzvFFzcGUbmAKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWZmMTM5YjUtOWM1Zi00MzQ0LTg4NjYtOTdmYWEwZWExNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgormoM1OMTHabJ/XVTrRkAgwygf1tfsE0E+D lel/Ebb5HSxpZGit0Koh6DmR0tdxKXl9Sm25cBbyzGcaF8HX2pRMmb0ElC8jHeuv Pm1QWIoUaRur3uVhuI6VaY6PbrMup3TDBzH0xjY8jPRI6L8HKE5xQCwSLsxcBt/U oQMPWB1RFA6AsUSRi+MO3IGwDFWC2OYhQFi/cFyiTCgYsYVqr1GH6lMBb8vDepou 22SAaU0dZuz2B56LvMydQ0iN3PXKEYTkgPdp7qVmIH7VbE1iIvDv70gJlrgNEFxu s5ERZu+/38Ig/pwhswCYGTwI+IqsQJ2u2ZZr7WNk1g2k7oebTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFQuLlgV9GEsT0E1ERImE3mPI/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2UxZmM3N2YtNjM5ZS0z MjczLWE1ZmEtODk5ZDc4Mjk3MTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfc/YD4B/4JCHptLhl4r8qeW01gWurVwe19Onw8HKZxrqvC7XRniFqr V2NtKd6aVzn9sc3sjssDJUi18FH8ZNFk4KuT2WVY++Yo9mX4EopbWNtYlpD7iQcv YRg0pCia/ap9t6UOVsB67TmZ29c+hSTXl60ohkMpR84mxNzZtDLi6xM+BiKfQkMO J+7SFLEoTp9Y6Z6HQpy8uy27rPca5wZDSn4E96cIgFqYQQUoVQsIOR061FBi1Mx2 SRaRvjuPQDYcKn3spubiYXF3RAF9/ITuoJ6NKg3YYs/sgmWpCHZB+xY8Halj9134 0q1c4YbqIBCFLIIa0ZPcRCo5xvqirBY= -----END CERTIFICATE-----Generated at Mon Apr 28 16:30:47 2025 by rpki-client