$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8233cdc7-f67f-348a-b8e0-676094f6c24b.roa File: 8233cdc7-f67f-348a-b8e0-676094f6c24b.roa (raw, json) Hash identifier: erZ/DyiL/qar68xaIIgKSzx1V94hpnEBA8H3bczs8tQ= Subject key identifier: A5:F4:95:1A:36:E2:ED:C6:4D:09:CB:A0:C9:35:3D:0B:CB:B4:DB:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA96AA8D857EF86A2EA680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8233cdc7-f67f-348a-b8e0-676094f6c24b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:96:aa:8d:85:7e:f8:6a:2e:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=dbaf46d4-57eb-4b55-b593-833d874a35ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:ca:63:2d:7f:8d:13:f6:03:7b:53:8e:7a: 28:cc:d5:19:d5:7f:48:37:58:15:af:94:b9:91:59: c1:fd:5f:a7:bc:cf:b4:e6:d3:d2:f4:44:bc:f8:58: 09:0c:a5:72:e1:ae:ae:db:07:1d:6a:8e:bf:fd:64: 5b:c2:f3:68:81:8b:58:27:2a:67:1d:07:80:ec:c5: 68:da:26:32:01:e4:e0:26:0c:6d:88:20:a9:4c:93: 27:2c:f6:75:de:de:52:44:30:39:00:91:b5:0f:08: 21:f0:2c:e6:a3:e1:b7:0d:a2:90:57:85:73:35:c3: 15:aa:b7:58:9d:55:7a:1c:f1:16:fa:9e:50:c6:aa: 6b:60:df:d2:df:ff:8a:63:ca:4b:34:dd:d2:10:c8: 3a:9a:ce:2a:24:de:69:19:db:ef:52:77:2a:50:90: 27:e5:34:0d:d0:1c:6f:f0:1a:0d:e5:e6:98:5e:d8: 94:f5:95:d3:bc:e5:98:02:32:81:9b:92:15:46:55: 34:b9:ee:27:86:dd:43:bb:0f:97:1b:82:1a:c1:99: 35:4f:79:34:f8:5c:81:f4:52:7f:d8:4c:84:4a:86: 37:b8:8f:07:87:db:a5:aa:49:c3:97:74:c0:25:25: c4:07:ad:eb:71:a5:96:5a:08:2e:ce:9c:eb:71:b6: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F4:95:1A:36:E2:ED:C6:4D:09:CB:A0:C9:35:3D:0B:CB:B4:DB:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8233cdc7-f67f-348a-b8e0-676094f6c24b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b5:e5:b1:8d:49:a2:2e:1b:fd:ca:d1:42:fa:14:20:63:3a: 57:cf:50:48:ce:0a:60:55:c6:78:a9:ef:4e:e9:ef:79:32:93: 5e:cd:a4:24:57:c4:7b:35:a2:af:6d:60:9f:6a:80:cc:f1:b8: 36:35:98:a5:45:e1:38:9c:60:14:60:15:c0:c1:80:72:10:aa: 92:14:8c:f6:7a:e1:01:e9:60:cd:fc:2f:06:d8:91:00:0a:15: f9:23:a4:3f:c3:5b:c8:54:b5:97:8b:9b:30:20:6c:aa:ba:ee: 29:94:bc:98:81:9f:90:85:b4:1e:b3:b2:33:af:4f:3b:6c:3a: bd:eb:0b:7a:6d:0c:30:94:a7:49:1a:00:29:a1:0c:97:bb:48: 62:90:d6:05:7c:57:05:44:b0:c5:90:3a:32:d6:51:7b:27:da: 62:35:40:ee:cb:cb:48:e0:52:6a:a5:b2:86:dc:98:b2:77:d5: 96:0b:7e:61:75:a7:69:0e:12:40:dd:45:53:ec:f9:59:1a:33: e7:98:e2:04:12:48:a6:27:47:36:cb:c7:1f:94:2d:e8:88:e0: b1:c7:80:fa:f1:14:9e:d2:e9:73:03:fd:4a:dd:20:08:16:80: 0d:40:de:ad:cd:80:8e:3c:ce:99:a6:0e:92:a4:06:bc:4a:14: a3:a8:8a:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupaqjYV++GoupoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGJhZjQ2ZDQtNTdlYi00YjU1LWI1OTMtODMzZDg3NGEzNWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx7KYy1/jRP2A3tTjnoozNUZ1X9IN1gVr5S5 kVnB/V+nvM+05tPS9ES8+FgJDKVy4a6u2wcdao6//WRbwvNogYtYJypnHQeA7MVo 2iYyAeTgJgxtiCCpTJMnLPZ13t5SRDA5AJG1Dwgh8Czmo+G3DaKQV4VzNcMVqrdY nVV6HPEW+p5QxqprYN/S3/+KY8pLNN3SEMg6ms4qJN5pGdvvUncqUJAn5TQN0Bxv 8BoN5eaYXtiU9ZXTvOWYAjKBm5IVRlU0ue4nht1Duw+XG4IawZk1T3k0+FyB9FJ/ 2EyESoY3uI8Hh9ulqknDl3TAJSXEB63rcaWWWgguzpzrcba9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX0lRo24u3GTQnLoMk1PQvLtNs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODIzM2NkYzctZjY3Zi0z NDhhLWI4ZTAtNjc2MDk0ZjZjMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm15bGNSaIuG/3K0UL6FCBjOlfPUEjOCmBVxnip707p73kyk17NpCRX xHs1oq9tYJ9qgMzxuDY1mKVF4TicYBRgFcDBgHIQqpIUjPZ64QHpYM38LwbYkQAK FfkjpD/DW8hUtZeLmzAgbKq67imUvJiBn5CFtB6zsjOvTztsOr3rC3ptDDCUp0ka ACmhDJe7SGKQ1gV8VwVEsMWQOjLWUXsn2mI1QO7Ly0jgUmqlsobcmLJ31ZYLfmF1 p2kOEkDdRVPs+VkaM+eY4gQSSKYnRzbLxx+ULeiI4LHHgPrxFJ7S6XMD/UrdIAgW gA1A3q3NgI48zpmmDpKkBrxKFKOoinY= -----END CERTIFICATE-----Generated at Sun Apr 27 03:59:47 2025 by rpki-client