$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa File: 97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa (raw, json) Hash identifier: TpBYOscnwEHthqHnZvbhMk+FjjZ40qoFZG0hMT+x+aw= Subject key identifier: 21:A7:FD:6A:B2:96:67:33:41:43:97:A7:1E:42:45:13:5A:E1:A8:C4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA965FBA4B3153E9A6DE00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:96:5f:ba:4b:31:53:e9:a6:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=44ef8a32-5ddd-4e75-ae62-5b1a182bcdca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:cf:05:45:2f:16:69:72:b7:65:b3:77:06: 24:29:e0:7e:d2:96:ce:cd:56:1f:fd:41:c1:1d:7c: 66:17:50:4f:96:57:22:ea:cf:29:42:a5:c8:b2:51: c6:27:f9:e7:8c:2d:e3:5b:fa:53:44:e6:01:7b:9b: 2e:98:2c:10:47:ae:1b:f2:20:f2:ed:38:48:d7:ef: 2a:11:f2:17:12:6b:1b:a1:06:ef:f2:d5:23:c3:78: a1:41:a8:b4:df:e0:99:7a:39:77:5f:da:9f:63:73: 58:f1:04:39:8e:54:75:3e:aa:a3:51:af:5f:62:c0: 7e:ee:ab:c4:9e:fa:7b:b2:7a:68:eb:77:3b:07:c4: ba:9a:5a:fe:0e:05:ec:72:4e:a7:7d:9b:e1:a7:66: 20:b6:c4:ab:27:fb:29:b8:eb:f3:c6:8d:ef:3f:eb: ff:24:d1:4e:cd:cd:89:51:b9:56:b2:2b:e4:fa:58: 69:df:1a:70:f5:87:e3:9d:9a:7e:d0:99:c4:34:5a: 0f:7a:0d:a7:27:43:a6:e2:4e:76:9b:27:bf:0f:54: 8c:9b:c0:ba:db:92:40:ab:df:80:d6:74:ea:5e:d9: bb:44:ce:62:03:ae:f5:ef:6b:c1:6c:bd:cc:ea:ae: 73:17:1a:e9:d0:54:73:23:7c:9b:f5:93:07:d7:ed: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A7:FD:6A:B2:96:67:33:41:43:97:A7:1E:42:45:13:5A:E1:A8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/97ae2640-26ad-3a68-b83d-7d2bb0bd5917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:f0:a0:c3:a0:07:58:3e:64:28:98:69:bd:93:73:47:da:49: 18:c9:f4:aa:09:7f:9d:00:a8:ac:42:67:c4:4c:c0:9f:57:76: 74:4c:de:2f:1a:63:aa:88:2a:8a:4d:75:d0:30:e7:15:95:b9: 0d:88:a1:e6:25:f8:58:3f:40:48:c6:48:7f:28:fe:5e:26:f4: cb:52:73:a0:56:88:a7:ad:43:a3:36:a1:69:06:e3:38:4d:dc: 03:6e:6b:66:8e:9b:ab:18:41:d6:f0:4b:df:f2:56:58:04:6c: c7:9e:1f:c2:79:d3:e8:99:4d:85:c6:6e:10:c5:9e:0c:25:7e: a9:a6:15:08:b3:a7:f6:ad:48:26:11:f4:f7:7b:46:54:40:3c: fe:c8:20:f0:39:61:6e:e6:54:76:38:d3:e4:31:b4:4b:21:a8: 4d:f0:2c:83:f2:60:9d:6c:88:9f:77:ee:ac:21:8c:cd:fd:3e: 1f:c4:57:34:85:e6:ba:a4:6e:b2:fd:35:14:1b:26:dd:d6:e9: 5b:f0:f6:51:c9:41:9e:31:4e:f5:e1:f1:c8:b3:bd:6d:5e:3d: 0a:4b:ad:d1:13:c7:62:84:6a:8a:5c:fa:8b:35:fd:e2:ef:22: c2:a1:2e:d7:e3:b9:21:bc:dc:48:88:c8:64:82:43:3e:d6:94: 57:8f:9f:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupZfuksxU+mm3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDRlZjhhMzItNWRkZC00ZTc1LWFlNjItNWIxYTE4MmJjZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX7PBUUvFmlyt2WzdwYkKeB+0pbOzVYf/UHB HXxmF1BPllci6s8pQqXIslHGJ/nnjC3jW/pTROYBe5sumCwQR64b8iDy7ThI1+8q EfIXEmsboQbv8tUjw3ihQai03+CZejl3X9qfY3NY8QQ5jlR1PqqjUa9fYsB+7qvE nvp7snpo63c7B8S6mlr+DgXsck6nfZvhp2YgtsSrJ/spuOvzxo3vP+v/JNFOzc2J UblWsivk+lhp3xpw9YfjnZp+0JnENFoPeg2nJ0Om4k52mye/D1SMm8C625JAq9+A 1nTqXtm7RM5iA67172vBbL3M6q5zFxrp0FRzI3yb9ZMH1+3OjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGn/WqylmczQUOXpx5CRRNa4ajEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTdhZTI2NDAtMjZhZC0z YTY4LWI4M2QtN2QyYmIwYmQ1OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrwoMOgB1g+ZCiYab2Tc0faSRjJ9KoJf50AqKxCZ8RMwJ9XdnRM3i8a Y6qIKopNddAw5xWVuQ2IoeYl+Fg/QEjGSH8o/l4m9MtSc6BWiKetQ6M2oWkG4zhN 3ANua2aOm6sYQdbwS9/yVlgEbMeeH8J50+iZTYXGbhDFngwlfqmmFQizp/atSCYR 9Pd7RlRAPP7IIPA5YW7mVHY40+QxtEshqE3wLIPyYJ1siJ937qwhjM39Ph/EVzSF 5rqkbrL9NRQbJt3W6Vvw9lHJQZ4xTvXh8cizvW1ePQpLrdETx2KEaopc+os1/eLv IsKhLtfjuSG83EiIyGSCQz7WlFePn9w= -----END CERTIFICATE-----Generated at Sun Apr 27 02:23:28 2025 by rpki-client