$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83908fa5-27c6-38b0-9216-a3f879f2846e.roa File: 83908fa5-27c6-38b0-9216-a3f879f2846e.roa (raw, json) Hash identifier: nyuY193DqhC4zHJ2N08RQKaVXumdP829KllYFsf7PTE= Subject key identifier: B6:E5:8F:32:34:75:18:EF:33:2E:33:B6:E5:D2:44:91:E1:84:65:EB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA91B00B65D1402DA32A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83908fa5-27c6-38b0-9216-a3f879f2846e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:91:b0:0b:65:d1:40:2d:a3:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9b4a0249-8850-450c-b611-4975f2932cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:7f:45:5f:83:c2:67:2c:98:f0:7b:f2:be: 88:1f:4d:0a:f3:b9:61:69:5f:c3:55:f0:ca:90:e5: c5:db:f0:08:21:89:3e:ef:97:74:e2:52:9c:fc:34: 8e:ba:44:4f:a3:8f:41:f8:61:3d:dc:b6:fb:64:09: eb:29:1d:bd:cb:08:ad:f8:a3:a9:74:ec:c7:36:3a: b0:e2:07:96:20:23:28:68:f9:8f:f1:34:bf:53:70: cd:0c:f5:3c:44:5c:a4:4e:6b:1c:44:55:8d:e3:c3: e6:4f:4a:57:29:c3:5a:7e:15:cb:f4:96:94:2b:58: 89:65:2c:ed:73:7f:38:01:a8:63:84:8b:5c:84:8f: c8:11:ab:42:0c:00:22:25:c8:8a:4c:43:ec:f2:50: 87:77:e0:a1:cf:0f:1d:ef:75:98:c1:e5:87:8c:17: 25:f0:f2:25:2c:28:53:2c:ea:92:ef:90:43:2d:95: 22:8a:a4:02:1f:76:07:c8:a3:95:e2:89:d7:93:4e: 18:da:fd:c4:04:27:34:42:f2:77:ef:59:eb:d7:af: bd:c4:c0:13:01:2c:74:aa:a6:fc:bc:68:81:17:bc: bd:d1:d0:0b:66:70:80:10:4e:ed:e9:33:23:de:98: 2f:d8:db:11:ae:73:0a:6e:f2:42:a5:29:d4:49:0d: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E5:8F:32:34:75:18:EF:33:2E:33:B6:E5:D2:44:91:E1:84:65:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83908fa5-27c6-38b0-9216-a3f879f2846e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:aa:63:1f:86:4d:07:1e:27:fc:13:dd:da:3e:71:92:84:3e: 70:9b:49:46:1c:63:95:d6:67:79:3b:af:d9:70:04:b4:74:b2: a4:1a:fa:19:0d:c9:9d:93:56:b2:f5:f0:46:80:c1:8b:dc:33: d6:72:44:73:2a:21:c9:cb:bf:42:a7:88:29:49:71:ed:a5:58: 17:73:d0:92:0f:f6:cf:a3:62:59:79:42:b5:1d:df:bf:ca:8a: ad:7b:00:aa:09:73:96:d6:29:0d:86:76:b5:b9:32:9d:1c:6d: 87:a4:6d:f7:03:90:96:d2:b7:f6:82:39:e0:02:39:79:30:85: 80:a7:d0:f0:bd:ba:94:93:22:95:19:97:14:ac:bb:e9:7a:eb: bb:46:0c:a1:d3:64:00:21:70:34:8c:ce:6f:ab:e5:38:8a:a1: cd:8c:b4:e2:1d:a0:f1:f3:83:e7:45:5b:df:16:e1:b5:cc:42: 3d:03:95:ca:14:e9:13:ab:40:97:97:d1:f2:a4:d8:04:d3:e0: d6:3d:2b:93:2a:5e:13:6e:5d:25:7d:fc:9e:9f:6a:2e:7d:06: 9a:a3:74:bf:55:1c:eb:2c:76:63:6b:e1:4c:3a:e3:22:a8:f2: f5:96:1e:92:78:14:90:ce:60:cd:44:89:9f:f2:62:20:02:7a: ee:5a:68:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupGwC2XRQC2jKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWI0YTAyNDktODg1MC00NTBjLWI2MTEtNDk3NWYyOTMyY2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsR/RV+DwmcsmPB78r6IH00K87lhaV/DVfDK kOXF2/AIIYk+75d04lKc/DSOukRPo49B+GE93Lb7ZAnrKR29ywit+KOpdOzHNjqw 4geWICMoaPmP8TS/U3DNDPU8RFykTmscRFWN48PmT0pXKcNafhXL9JaUK1iJZSzt c384AahjhItchI/IEatCDAAiJciKTEPs8lCHd+Chzw8d73WYweWHjBcl8PIlLChT LOqS75BDLZUiiqQCH3YHyKOV4onXk04Y2v3EBCc0QvJ371nr16+9xMATASx0qqb8 vGiBF7y90dALZnCAEE7t6TMj3pgv2NsRrnMKbvJCpSnUSQ1ycwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbljzI0dRjvMy4ztuXSRJHhhGXrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODM5MDhmYTUtMjdjNi0z OGIwLTkyMTYtYTNmODc5ZjI4NDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+qYx+GTQceJ/wT3do+cZKEPnCbSUYcY5XWZ3k7r9lwBLR0sqQa+hkN yZ2TVrL18EaAwYvcM9ZyRHMqIcnLv0KniClJce2lWBdz0JIP9s+jYll5QrUd37/K iq17AKoJc5bWKQ2GdrW5Mp0cbYekbfcDkJbSt/aCOeACOXkwhYCn0PC9upSTIpUZ lxSsu+l667tGDKHTZAAhcDSMzm+r5TiKoc2MtOIdoPHzg+dFW98W4bXMQj0DlcoU 6ROrQJeX0fKk2ATT4NY9K5MqXhNuXSV9/J6fai59BpqjdL9VHOssdmNr4Uw64yKo 8vWWHpJ4FJDOYM1EiZ/yYiACeu5aaIk= -----END CERTIFICATE-----Generated at Sun Apr 27 05:46:24 2025 by rpki-client