$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e5f4a44-d5ff-3f43-9eea-e2712b9f6c27.roa File: 8e5f4a44-d5ff-3f43-9eea-e2712b9f6c27.roa (raw, json) Hash identifier: Ro2W+SQMMzmYSPgNfyqYoKV2WB6YnTFkFgPbBV4Ij6c= Subject key identifier: 99:FC:5F:FB:28:B6:B0:17:E5:B5:02:6D:91:1C:0C:AB:C0:54:4D:FE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8F846B716C545C16E100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e5f4a44-d5ff-3f43-9eea-e2712b9f6c27.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:8f:84:6b:71:6c:54:5c:16:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cea1087e-ae88-4be8-bb88-c5d883df8e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c5:89:93:10:bd:9d:a7:f9:71:50:2c:cc:75: 17:bc:01:a7:cd:6f:82:41:96:fe:a3:36:68:88:8a: 38:90:b9:55:d5:c2:b1:3f:3f:59:ed:95:7a:b8:77: a2:e1:2f:0c:b5:06:b9:f4:77:89:5a:fa:b7:82:76: 1f:d7:b5:27:d1:3e:4e:40:5b:cb:b1:61:b8:fd:7a: b0:3b:2b:77:0a:37:10:f3:f8:58:d1:16:30:17:44: e4:26:23:cf:90:c3:5a:91:23:6d:20:d3:cc:b8:95: ef:7b:e9:a9:3a:f7:6c:b6:67:02:2f:80:93:28:fe: 9d:a1:bb:bc:78:c2:69:14:44:4a:05:72:da:e7:c9: fd:ad:b6:70:9c:8a:b0:2d:ba:73:94:bb:1d:d8:58: d5:cf:a6:fa:25:74:8d:92:59:2a:1a:72:09:25:82: c1:0e:1f:6b:c4:4c:67:bb:1c:72:fc:b9:b6:b3:80: 31:3b:4e:8f:7c:41:6f:63:95:d2:dd:df:95:76:b3: 87:41:fa:a8:cb:38:a4:ae:f1:45:e3:0b:6e:41:da: 88:60:ce:fb:22:72:ce:28:e0:28:57:8b:12:00:61: b0:75:26:3f:a8:00:0e:72:93:be:fd:48:4e:04:9d: d0:f2:69:81:1d:e2:f9:1f:35:e8:54:ba:dc:c1:e0: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FC:5F:FB:28:B6:B0:17:E5:B5:02:6D:91:1C:0C:AB:C0:54:4D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e5f4a44-d5ff-3f43-9eea-e2712b9f6c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:db:e6:12:b1:e6:60:82:e0:95:33:0c:bd:d4:7c:ca:a7:5f: 0a:7d:39:fc:58:49:97:34:de:10:66:62:e2:ee:da:58:51:e4: a6:11:bb:72:6a:7a:d7:4b:e2:c7:24:a1:0c:3d:1d:d3:c4:70: d5:0e:7b:c6:70:b7:72:4d:89:0c:55:19:5f:06:35:b6:2e:2e: c8:d3:dd:74:bd:2b:b3:73:2b:c8:ca:36:9c:8e:cc:bb:ee:ca: d6:e9:99:48:fd:7b:e3:5c:b5:21:8f:6c:ed:5e:eb:d1:fa:2d: 1c:93:87:f5:7a:20:be:9c:4c:3a:d9:85:f9:62:97:92:fa:28: 1b:f3:44:8f:56:cb:f2:e0:05:b7:3b:d5:96:a5:ba:5f:dd:e1: de:36:f0:dd:c5:a8:7d:c3:f8:07:13:a5:1a:40:f7:4e:01:88: a0:dc:cc:b2:28:6b:43:27:63:8f:e2:86:f9:8e:37:b6:f6:00: 36:57:1f:60:8a:b5:39:73:36:0a:af:4c:b2:6e:89:17:af:d2: 54:a5:5a:36:37:f2:4b:8c:29:15:6b:5c:d6:57:d1:e7:ba:df: df:53:9a:fb:6e:b8:e0:c9:3d:9a:96:26:2e:05:d3:e5:b3:a4: 18:b8:f2:cf:31:ad:8e:82:97:4b:f0:f4:91:67:65:87:dd:50: fe:92:54:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuo+Ea3FsVFwW4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2VhMTA4N2UtYWU4OC00YmU4LWJiODgtYzVkODgzZGY4ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18WJkxC9naf5cVAszHUXvAGnzW+CQZb+ozZo iIo4kLlV1cKxPz9Z7ZV6uHei4S8MtQa59HeJWvq3gnYf17Un0T5OQFvLsWG4/Xqw Oyt3CjcQ8/hY0RYwF0TkJiPPkMNakSNtINPMuJXve+mpOvdstmcCL4CTKP6dobu8 eMJpFERKBXLa58n9rbZwnIqwLbpzlLsd2FjVz6b6JXSNklkqGnIJJYLBDh9rxExn uxxy/Lm2s4AxO06PfEFvY5XS3d+VdrOHQfqoyzikrvFF4wtuQdqIYM77InLOKOAo V4sSAGGwdSY/qAAOcpO+/UhOBJ3Q8mmBHeL5HzXoVLrcweAG9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJn8X/sotrAX5bUCbZEcDKvAVE3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGU1ZjRhNDQtZDVmZi0z ZjQzLTllZWEtZTI3MTJiOWY2YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvb5hKx5mCC4JUzDL3UfMqnXwp9OfxYSZc03hBmYuLu2lhR5KYRu3Jq etdL4sckoQw9HdPEcNUOe8Zwt3JNiQxVGV8GNbYuLsjT3XS9K7NzK8jKNpyOzLvu ytbpmUj9e+NctSGPbO1e69H6LRyTh/V6IL6cTDrZhflil5L6KBvzRI9Wy/LgBbc7 1Zalul/d4d428N3FqH3D+AcTpRpA904BiKDczLIoa0MnY4/ihvmON7b2ADZXH2CK tTlzNgqvTLJuiRev0lSlWjY38kuMKRVrXNZX0ee6399TmvtuuODJPZqWJi4F0+Wz pBi48s8xrY6Cl0vw9JFnZYfdUP6SVFA= -----END CERTIFICATE-----Generated at Sun Apr 27 09:52:28 2025 by rpki-client