$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f61a537-3080-3844-88a9-ce6f3afc6d4d.roa File: 8f61a537-3080-3844-88a9-ce6f3afc6d4d.roa (raw, json) Hash identifier: ounf/mEncq4dfHqcmPj6sgb33zTHGEG3Nv5pwW502SI= Subject key identifier: 66:AD:17:34:A7:28:24:A4:4A:CF:FB:BF:70:0F:F3:11:FA:D8:22:EF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA93C68C43120E35726620 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f61a537-3080-3844-88a9-ce6f3afc6d4d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:93:c6:8c:43:12:0e:35:72:66:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8ca82971-0454-4722-9001-f17f5b9e777b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:1b:57:60:cd:1a:cc:0b:8e:5c:af:e8:31: 80:13:66:a6:14:7e:39:4f:38:97:69:34:99:2c:6b: 47:cb:f4:ee:df:42:90:25:9c:98:ae:9d:b9:36:65: 56:e6:43:f1:c8:f4:f0:81:6b:76:78:e9:b6:2e:f7: 29:02:db:fb:60:49:11:b8:9a:a7:4a:43:d1:c4:89: c8:40:f8:3a:70:d3:05:13:70:5f:09:3e:2a:73:69: 9a:f9:84:f6:b9:07:fe:c6:d9:2e:07:9c:dd:6d:cb: ba:9e:ca:4f:f1:ac:05:30:01:71:de:06:57:4e:91: ab:33:86:81:d6:a7:db:20:67:b3:24:81:10:8c:e1: f2:72:f0:1e:13:52:29:3b:39:89:1d:6b:b6:9b:07: 58:0d:e4:09:2a:e1:75:bf:cb:39:d8:f4:6c:72:5d: d0:c3:c7:5b:85:8c:24:e9:67:75:86:da:d9:12:38: 61:f9:56:60:e2:cf:74:eb:98:62:25:31:da:62:19: b8:c9:e4:8a:6d:d6:a2:bc:c8:8e:a5:c6:eb:c5:11: 49:37:7e:9f:13:32:71:90:67:62:e4:aa:4e:06:a8: 34:c7:94:4c:0d:a3:d8:31:9f:dc:0a:a5:fb:89:0e: 8e:ec:bd:5f:26:69:63:dd:e6:28:4b:4c:41:2d:28: e7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AD:17:34:A7:28:24:A4:4A:CF:FB:BF:70:0F:F3:11:FA:D8:22:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f61a537-3080-3844-88a9-ce6f3afc6d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9f:21:15:ff:37:c9:0e:7b:1b:c5:4b:e6:c1:d3:e9:85:a1: 61:59:6b:27:61:cf:52:e1:a1:d0:88:97:5b:e2:f5:b4:94:e4: 96:e3:f0:e3:e9:15:74:4b:27:12:37:bc:ac:c9:ac:35:c7:d6: 46:38:4d:40:35:20:67:2c:b5:6a:9d:0f:b3:85:b9:d9:97:62: 36:54:ad:85:14:9b:7e:31:2e:12:c6:87:a2:27:33:b5:8b:1b: c1:50:3c:ec:86:bf:ad:d5:4f:1d:bf:e9:d1:24:d7:15:e5:5d: f6:08:29:76:57:26:75:2a:9f:f0:43:4e:f6:d9:09:4f:8d:c8: 83:1e:dd:a7:b6:3f:4b:71:4b:c2:c7:8a:c3:0b:0d:9d:25:15: 46:2e:17:69:6f:8b:2c:07:6e:b3:6f:82:89:1f:41:19:26:4e: b5:47:b0:79:dd:a9:4b:8b:55:36:62:e8:e8:d6:bf:4a:80:4d: ce:de:0c:61:9a:08:6c:0d:77:88:12:94:7e:50:a7:ea:69:6b: 5c:b0:6a:31:53:00:5e:45:9f:8d:f8:8a:ec:b1:e2:a8:11:d8: b9:0b:78:d2:4c:e4:d8:f0:c4:0e:0a:ae:80:92:0b:f7:7b:a7: 98:da:0a:c6:c7:3d:f9:c6:be:1c:cd:77:ed:a3:7d:84:b4:74: a8:b7:6b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupPGjEMSDjVyZiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGNhODI5NzEtMDQ1NC00NzIyLTkwMDEtZjE3ZjViOWU3NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qwbV2DNGswLjlyv6DGAE2amFH45TziXaTSZ LGtHy/Tu30KQJZyYrp25NmVW5kPxyPTwgWt2eOm2LvcpAtv7YEkRuJqnSkPRxInI QPg6cNMFE3BfCT4qc2ma+YT2uQf+xtkuB5zdbcu6nspP8awFMAFx3gZXTpGrM4aB 1qfbIGezJIEQjOHycvAeE1IpOzmJHWu2mwdYDeQJKuF1v8s52PRscl3Qw8dbhYwk 6Wd1htrZEjhh+VZg4s9065hiJTHaYhm4yeSKbdaivMiOpcbrxRFJN36fEzJxkGdi 5KpOBqg0x5RMDaPYMZ/cCqX7iQ6O7L1fJmlj3eYoS0xBLSjnaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGatFzSnKCSkSs/7v3AP8xH62CLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGY2MWE1MzctMzA4MC0z ODQ0LTg4YTktY2U2ZjNhZmM2ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2fIRX/N8kOexvFS+bB0+mFoWFZaydhz1LhodCIl1vi9bSU5Jbj8OPp FXRLJxI3vKzJrDXH1kY4TUA1IGcstWqdD7OFudmXYjZUrYUUm34xLhLGh6InM7WL G8FQPOyGv63VTx2/6dEk1xXlXfYIKXZXJnUqn/BDTvbZCU+NyIMe3ae2P0txS8LH isMLDZ0lFUYuF2lviywHbrNvgokfQRkmTrVHsHndqUuLVTZi6OjWv0qATc7eDGGa CGwNd4gSlH5Qp+ppa1ywajFTAF5Fn434iuyx4qgR2LkLeNJM5NjwxA4KroCSC/d7 p5jaCsbHPfnGvhzNd+2jfYS0dKi3a6U= -----END CERTIFICATE-----Generated at Mon Apr 28 20:01:58 2025 by rpki-client