$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa File: 8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa (raw, json) Hash identifier: VKbXad5eJb0p+Y9KO9/GOU0ADbJ3LoxmuQS1ThJw9k8= Subject key identifier: 3E:9E:1C:61:6E:01:B7:B4:84:6E:7B:0C:4C:3A:85:D7:42:1B:87:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3D42B177ABF1E41D8C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3d:42:b1:77:ab:f1:e4:1d:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1752f9ee-f5bc-44e6-8bc6-e6f79afb76b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:f1:5d:dd:2c:20:4d:93:7d:80:02:6e:c6: 36:ec:5a:4a:a7:d0:04:13:84:07:52:cf:39:be:0d: 6c:a3:82:df:23:01:b5:a6:ac:eb:ad:4a:af:71:1c: 7b:05:eb:23:39:46:fb:29:91:e7:ae:1e:1b:f1:fa: c1:e7:2e:fa:03:df:7a:18:0e:45:13:ba:5e:42:bc: c3:ef:1e:62:20:f6:b5:cf:d9:f5:35:f6:d5:49:df: d7:e8:9a:8b:80:31:d2:27:ba:eb:08:69:44:52:ef: 36:b6:6c:0b:81:d4:bd:f9:0f:60:66:f9:bc:66:50: 46:ef:2e:0e:d9:20:c2:f8:47:e8:23:c5:c7:35:6b: 7d:6a:bd:57:41:a6:df:91:57:e9:f9:b5:83:3e:76: 30:f7:64:35:77:56:42:90:82:fa:5e:68:d9:6c:be: dd:12:43:69:90:a5:6d:5f:6b:24:d9:98:1b:2f:37: 2d:cd:85:20:97:22:1d:a2:7d:e6:99:29:0a:26:ba: 45:f2:3a:91:50:2e:bf:be:3f:cf:4d:fb:09:be:f0: 90:47:5f:ba:5b:a5:92:24:28:2e:04:ef:09:bf:7f: 5b:70:63:e2:40:bc:d9:00:3b:24:69:6d:a7:5c:2b: 4d:a2:96:39:da:6d:63:2c:0c:42:9f:d1:80:ef:70: 9e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9E:1C:61:6E:01:B7:B4:84:6E:7B:0C:4C:3A:85:D7:42:1B:87:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:ab:6d:ae:f4:1c:43:d5:84:4a:1f:d2:83:42:55:b4:8a:51: 17:6d:67:c2:ac:00:25:76:d9:f8:54:33:a8:dc:7f:15:ea:93: 19:5d:3c:25:74:4e:06:de:04:7f:78:0a:17:07:d8:6d:43:d5: a1:bf:77:a4:40:5f:ec:8d:40:3c:bc:21:b7:78:3f:a7:b9:75: 73:a9:e5:c4:75:37:7d:32:31:f0:c8:70:ae:a5:5e:b2:0d:6d: d0:5c:45:31:e9:6b:a2:d2:0d:0e:4a:18:c0:16:41:08:d8:4d: fa:0d:cd:fe:e2:1f:82:f3:fa:5e:af:ed:cc:76:a2:f9:d5:b9: 6c:a6:69:46:25:1d:7c:f2:00:ee:cc:ed:41:d8:82:31:70:13: ae:da:00:5c:32:0d:2b:3e:cf:7a:d5:a2:50:3b:44:98:0a:d0: f1:9b:f4:65:4d:c9:ac:6b:ed:01:ff:40:3e:0d:52:f1:53:24: 0d:b5:f7:d7:f3:4e:c7:83:55:b8:6e:89:2d:fa:1f:3c:aa:74: 65:fa:c1:71:e1:b7:94:9e:ba:78:ae:8e:44:af:a2:ed:89:1d: 94:b7:6d:a1:39:4d:28:2f:eb:d9:1b:0b:49:12:a8:4c:63:0d: 29:bc:22:ba:02:b8:59:7a:e1:09:d2:5d:14:f7:b7:73:bd:08: 24:07:6c:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz1CsXer8eQdjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTc1MmY5ZWUtZjViYy00NGU2LThiYzYtZTZmNzlhZmI3NmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilLxXd0sIE2TfYACbsY27FpKp9AEE4QHUs85 vg1so4LfIwG1pqzrrUqvcRx7BesjOUb7KZHnrh4b8frB5y76A996GA5FE7peQrzD 7x5iIPa1z9n1NfbVSd/X6JqLgDHSJ7rrCGlEUu82tmwLgdS9+Q9gZvm8ZlBG7y4O 2SDC+EfoI8XHNWt9ar1XQabfkVfp+bWDPnYw92Q1d1ZCkIL6XmjZbL7dEkNpkKVt X2sk2ZgbLzctzYUglyIdon3mmSkKJrpF8jqRUC6/vj/PTfsJvvCQR1+6W6WSJCgu BO8Jv39bcGPiQLzZADskaW2nXCtNopY52m1jLAxCn9GA73CedQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6eHGFuAbe0hG57DEw6hddCG4f9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGZmYTViNjctM2Q2ZC0z OWNiLTg3YzItMDI3ZTk5OGRiZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCrba70HEPVhEof0oNCVbSKURdtZ8KsACV22fhUM6jcfxXqkxldPCV0 TgbeBH94ChcH2G1D1aG/d6RAX+yNQDy8Ibd4P6e5dXOp5cR1N30yMfDIcK6lXrIN bdBcRTHpa6LSDQ5KGMAWQQjYTfoNzf7iH4Lz+l6v7cx2ovnVuWymaUYlHXzyAO7M 7UHYgjFwE67aAFwyDSs+z3rVolA7RJgK0PGb9GVNyaxr7QH/QD4NUvFTJA2199fz TseDVbhuiS36HzyqdGX6wXHht5SeuniujkSvou2JHZS3baE5TSgv69kbC0kSqExj DSm8IroCuFl64QnSXRT3t3O9CCQHbM4= -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:32 2025 by rpki-client