$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86d601bb-b984-3473-bdc5-c40ea6e50420.roa File: 86d601bb-b984-3473-bdc5-c40ea6e50420.roa (raw, json) Hash identifier: n71TMve7GYhfUUUjnqkJxEeGE1zTgYSn+5NSBpe/DuU= Subject key identifier: 2A:A7:39:A4:0B:89:DA:1B:6F:DA:74:20:5F:73:46:AC:F5:1E:BB:25 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B108C8AA8F4E00AAD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86d601bb-b984-3473-bdc5-c40ea6e50420.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:10:8c:8a:a8:f4:e0:0a:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b5f67ed4-897c-4df6-8093-0e62cca75eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:8e:88:4c:02:9b:6c:c6:7f:df:a4:07:76: d1:ae:cb:f3:b3:79:f7:35:06:6e:4c:e3:2f:9d:86: c2:c4:2b:4d:49:e1:4c:34:5e:6f:7b:dc:fe:5a:94: 65:86:2a:22:32:ed:ed:01:81:24:90:e2:87:9c:1c: 03:a9:93:9c:32:98:78:07:01:2a:20:c4:dc:61:28: 65:f7:24:9e:0c:84:c6:74:54:17:8f:d7:76:18:91: 45:1d:e4:57:c9:6d:01:4a:9a:5d:49:67:d5:da:fa: 4d:f7:dc:6c:a4:88:8a:7e:8d:77:cc:4c:2a:04:77: 95:52:c1:69:ef:18:b1:b7:8f:f8:38:1f:dd:13:17: 3e:de:9c:48:91:d2:f8:df:3b:af:5a:ca:09:eb:1a: 45:f5:d5:44:07:45:5f:c0:cd:78:27:de:d7:e1:56: 8a:d0:fb:ad:ea:5a:11:6b:83:65:06:16:fc:47:56: 5c:e0:a4:e8:fc:06:a0:a4:09:6c:a2:f8:0a:56:02: e0:8b:d1:07:05:51:dd:e3:22:ea:74:61:29:dc:f6: 51:1c:79:ea:30:4a:00:95:85:8b:06:f1:c6:51:1f: c5:91:4f:f5:36:1a:58:9d:a5:8c:44:60:07:26:63: 69:d9:23:0c:cd:3e:41:39:5b:ac:99:79:72:31:82: 5d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A7:39:A4:0B:89:DA:1B:6F:DA:74:20:5F:73:46:AC:F5:1E:BB:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86d601bb-b984-3473-bdc5-c40ea6e50420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1f:71:2b:df:05:10:22:b5:99:01:13:17:3a:eb:79:08:56: d7:3f:5c:21:b8:2b:cc:a2:72:b6:94:a2:44:9c:c0:7d:91:38: 08:76:de:6d:7b:fb:bd:5e:6f:32:f8:8d:ac:db:7d:89:8e:63: 0e:9c:1a:6a:f7:f1:9d:36:72:b8:e0:6f:7b:1a:5b:90:a7:06: b0:22:b4:f3:d5:4d:77:cd:0b:6e:63:79:93:e3:e4:c3:23:04: ba:e2:0f:06:62:21:49:bb:e1:e3:d8:d3:90:a7:6a:14:62:79: f4:e5:78:fc:13:f0:5d:fe:79:2a:84:c8:1b:3a:37:e9:fa:73: 59:41:e4:92:94:d5:9b:f9:fe:08:d2:04:2f:48:22:5b:ee:d7: ef:61:ee:b2:84:0c:56:82:9e:26:30:74:40:40:73:1a:b1:5e: 73:76:59:09:bf:e0:51:3d:ca:ec:1f:aa:fd:dd:03:42:ca:99: fd:a3:2a:07:75:a9:72:92:db:ec:d3:b3:ce:38:18:16:c6:a9: 26:d4:8a:bf:30:c7:9b:e9:5c:62:06:3a:20:eb:97:05:f0:ab: 99:f2:20:7a:e8:01:ef:20:48:5a:88:9e:21:68:8c:e2:97:23: 3f:32:a8:ac:5f:b5:5a:ef:dc:f0:5a:6b:bf:91:81:14:79:8c: 50:b8:3d:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzsQjIqo9OAKrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjVmNjdlZDQtODk3Yy00ZGY2LTgwOTMtMGU2MmNjYTc1ZWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW2OiEwCm2zGf9+kB3bRrsvzs3n3NQZuTOMv nYbCxCtNSeFMNF5ve9z+WpRlhioiMu3tAYEkkOKHnBwDqZOcMph4BwEqIMTcYShl 9ySeDITGdFQXj9d2GJFFHeRXyW0BSppdSWfV2vpN99xspIiKfo13zEwqBHeVUsFp 7xixt4/4OB/dExc+3pxIkdL43zuvWsoJ6xpF9dVEB0VfwM14J97X4VaK0Put6loR a4NlBhb8R1Zc4KTo/AagpAlsovgKVgLgi9EHBVHd4yLqdGEp3PZRHHnqMEoAlYWL BvHGUR/FkU/1NhpYnaWMRGAHJmNp2SMMzT5BOVusmXlyMYJdZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqnOaQLidobb9p0IF9zRqz1HrslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODZkNjAxYmItYjk4NC0z NDczLWJkYzUtYzQwZWE2ZTUwNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMfcSvfBRAitZkBExc663kIVtc/XCG4K8yicraUokScwH2ROAh23m17 +71ebzL4jazbfYmOYw6cGmr38Z02crjgb3saW5CnBrAitPPVTXfNC25jeZPj5MMj BLriDwZiIUm74ePY05CnahRiefTlePwT8F3+eSqEyBs6N+n6c1lB5JKU1Zv5/gjS BC9IIlvu1+9h7rKEDFaCniYwdEBAcxqxXnN2WQm/4FE9yuwfqv3dA0LKmf2jKgd1 qXKS2+zTs844GBbGqSbUir8wx5vpXGIGOiDrlwXwq5nyIHroAe8gSFqIniFojOKX Iz8yqKxftVrv3PBaa7+RgRR5jFC4PW4= -----END CERTIFICATE-----Generated at Sun Apr 27 20:20:32 2025 by rpki-client