$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fbb29d-ab35-38fa-b0ed-9de3a2dadd9c.roa File: 85fbb29d-ab35-38fa-b0ed-9de3a2dadd9c.roa (raw, json) Hash identifier: a2J2IZ5yPJ9O8vOJ0+sG+o1Sgh0ssGa8iHo6IHigqtw= Subject key identifier: 95:B4:59:B3:CE:E0:2B:EB:49:9C:6F:C8:92:5C:16:4C:63:DE:85:E8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8F35CDB9444666680300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fbb29d-ab35-38fa-b0ed-9de3a2dadd9c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:8f:35:cd:b9:44:46:66:68:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=83d123ce-cf47-48bd-a625-911d37190f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c5:56:81:96:7f:61:d6:49:93:7d:ff:82:c0: 17:8d:b2:4e:d8:16:8a:1d:0a:bc:e6:48:5b:61:4f: 1f:11:88:da:b9:db:62:be:b6:c3:47:e0:b5:7a:84: 87:21:a0:90:76:5e:4a:92:ca:8e:24:7e:43:e5:48: 6a:db:05:26:da:e9:6d:bc:fe:3c:d3:6c:2f:9b:40: 25:a6:5f:b3:22:f5:08:ec:63:9d:98:9f:72:66:b4: 03:2e:1c:12:d1:08:a4:fb:84:c4:16:22:7c:dd:f8: 01:bb:58:b7:62:49:2a:70:e9:8f:44:3b:c1:2d:08: 67:e4:72:13:c0:de:0f:17:51:e6:a6:1d:9a:c1:34: 1a:90:fc:8d:81:24:2a:9a:77:a4:1f:15:fe:89:67: c7:23:71:23:ce:19:11:5d:70:a2:44:7a:53:03:eb: 00:57:81:0b:fb:bf:f7:80:57:f5:98:87:30:66:3a: b6:5b:8b:8c:86:ad:aa:43:f3:75:ba:44:0b:3b:65: d9:a5:26:c9:12:07:16:89:60:5e:d0:97:14:f5:7e: 1b:f6:99:8f:25:90:29:4c:d5:15:d4:ea:21:f9:e3: 93:1b:e5:07:b1:11:6b:8c:48:77:ae:f2:5c:47:92: 13:b1:92:68:96:98:4d:bc:03:83:34:ac:86:be:c5: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B4:59:B3:CE:E0:2B:EB:49:9C:6F:C8:92:5C:16:4C:63:DE:85:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85fbb29d-ab35-38fa-b0ed-9de3a2dadd9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:14:f4:6f:b1:a9:7b:00:06:33:66:d1:5f:37:2f:3b:59:f7: d3:80:d4:9d:ea:ca:d3:ff:75:b1:e4:b1:81:0b:a7:aa:91:45: d3:e1:0d:a8:3d:12:17:dd:c1:9c:30:31:60:56:52:3d:d4:06: c4:12:0e:7a:a8:5d:63:42:33:22:d0:66:e3:1f:9e:13:35:79: 91:95:b6:11:55:67:b4:54:dd:5b:a6:37:76:82:55:90:9c:bd: 53:14:a5:d1:e4:b6:e5:29:5d:f3:a7:80:bd:7d:b9:2e:dd:91: 26:92:31:5d:ac:9e:ef:52:b0:87:cc:84:33:93:e9:52:57:de: 13:1d:0c:06:d8:e6:1d:dd:45:6e:16:39:0d:95:ba:9d:c7:5a: 2e:40:91:c5:18:61:fe:90:6a:62:84:46:10:f6:60:0d:09:46: 3f:b1:46:27:2e:a3:9d:95:94:8c:88:89:7b:4b:1d:3d:e6:c9: 30:e7:09:28:d5:dc:02:af:aa:31:fb:64:68:c4:5b:12:af:f2: 0f:a8:cc:b7:95:31:e6:77:6c:26:64:26:a1:6b:52:6e:db:17: c0:af:51:9f:f4:fd:86:89:5a:77:76:61:8f:34:5e:98:ae:1b: b3:ad:e9:5f:db:33:48:7e:20:5d:2e:06:d1:69:3b:d0:8f:ae: 8f:21:f1:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuo81zblERmZoAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODNkMTIzY2UtY2Y0Ny00OGJkLWE2MjUtOTExZDM3MTkwZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcVWgZZ/YdZJk33/gsAXjbJO2BaKHQq85khb YU8fEYjaudtivrbDR+C1eoSHIaCQdl5KksqOJH5D5Uhq2wUm2ultvP4802wvm0Al pl+zIvUI7GOdmJ9yZrQDLhwS0Qik+4TEFiJ83fgBu1i3YkkqcOmPRDvBLQhn5HIT wN4PF1Hmph2awTQakPyNgSQqmnekHxX+iWfHI3EjzhkRXXCiRHpTA+sAV4EL+7/3 gFf1mIcwZjq2W4uMhq2qQ/N1ukQLO2XZpSbJEgcWiWBe0JcU9X4b9pmPJZApTNUV 1Ooh+eOTG+UHsRFrjEh3rvJcR5ITsZJolphNvAODNKyGvsWzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJW0WbPO4CvrSZxvyJJcFkxj3oXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVmYmIyOWQtYWIzNS0z OGZhLWIwZWQtOWRlM2EyZGFkZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4U9G+xqXsABjNm0V83LztZ99OA1J3qytP/dbHksYELp6qRRdPhDag9 EhfdwZwwMWBWUj3UBsQSDnqoXWNCMyLQZuMfnhM1eZGVthFVZ7RU3VumN3aCVZCc vVMUpdHktuUpXfOngL19uS7dkSaSMV2snu9SsIfMhDOT6VJX3hMdDAbY5h3dRW4W OQ2Vup3HWi5AkcUYYf6QamKERhD2YA0JRj+xRicuo52VlIyIiXtLHT3myTDnCSjV 3AKvqjH7ZGjEWxKv8g+ozLeVMeZ3bCZkJqFrUm7bF8CvUZ/0/YaJWnd2YY80Xpiu G7Ot6V/bM0h+IF0uBtFpO9CPro8h8W8= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:00 2025 by rpki-client