$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9aa09022-f085-32b2-a4a0-806657394db8.roa File: 9aa09022-f085-32b2-a4a0-806657394db8.roa (raw, json) Hash identifier: w+3x1y9cItF822TygdxkC9mZd5ad32bwk/Ist3kRn0Q= Subject key identifier: DB:AD:6B:41:0A:B1:AF:15:56:D6:EF:F8:A3:96:CB:67:D0:F9:45:CA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8FCC7DD97E73A9C58F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9aa09022-f085-32b2-a4a0-806657394db8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:8f:cc:7d:d9:7e:73:a9:c5:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e87084f6-bfa9-491a-bd79-07b5dc5da275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:91:07:aa:5f:8f:29:c6:b0:7b:cc:07:55:49: ef:79:78:c4:f4:aa:46:13:ae:dc:69:a5:5f:cd:16: 11:19:90:36:a6:28:15:ea:9b:2b:f5:1f:f1:8b:8e: f5:53:17:dc:7c:0b:44:d8:d0:b3:f1:aa:ed:b4:f6: 86:fd:49:5c:6c:db:1f:9f:78:cc:13:c5:dd:30:77: 12:17:14:96:8f:ff:85:b6:2c:ca:47:85:c2:76:45: 35:27:7c:3a:0b:e5:6c:0c:fe:75:2f:b2:59:2a:67: aa:c7:85:f8:21:c8:0c:50:10:5b:be:b1:48:e2:cf: a2:ab:9f:f1:97:f0:05:1f:41:b9:a1:2b:f7:1f:3b: 33:79:c8:2f:39:76:f1:e2:da:57:34:ab:da:de:08: b8:61:07:d1:07:c7:48:4e:1a:c5:2c:44:22:e4:07: d1:0e:90:51:50:07:7c:25:02:a5:7e:d1:f0:a9:77: 19:12:4a:2b:e6:12:51:e6:7e:8a:03:d4:1b:fb:3b: c7:22:43:4e:56:69:a4:1c:2b:c8:6b:e8:54:a8:19: 62:b7:6c:18:90:9f:31:b5:1b:1a:fa:16:8a:c7:fe: d6:33:88:91:b7:bf:8a:b8:5b:6f:8c:14:96:57:ae: 71:9e:76:d8:8d:27:1d:e8:7c:d6:61:1f:17:92:c4: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AD:6B:41:0A:B1:AF:15:56:D6:EF:F8:A3:96:CB:67:D0:F9:45:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9aa09022-f085-32b2-a4a0-806657394db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ac:ae:e8:66:f4:3c:d0:12:56:a3:3f:b5:d5:80:6a:cc:6e: fd:9a:14:75:2c:6e:90:c2:23:26:54:45:83:a7:9b:94:4c:68: 5c:e5:0a:a0:cf:af:f0:b4:ed:34:f1:96:42:33:fd:27:16:71: 03:e4:c0:3f:20:a7:21:66:6e:50:88:30:60:40:9f:58:82:9b: e6:b5:6a:ce:2b:ad:a3:ca:bd:4c:e5:9b:0a:4e:c3:3d:df:30: 23:29:05:36:bb:63:d8:5b:78:da:06:ed:6c:f8:81:e4:54:7d: 3b:a9:4a:66:e9:8d:9f:e7:fc:30:c4:b2:6b:89:62:8d:55:96: 86:a6:17:e9:09:25:da:89:97:a3:96:24:1c:53:e4:6c:06:5f: 91:bc:ca:92:bd:0b:6a:09:d1:0a:1b:58:1c:1b:7d:33:a5:1b: 32:c6:db:b7:24:54:1e:63:ad:db:ee:bb:89:09:da:f7:2f:05: 2b:2d:9c:6c:17:21:32:ee:d9:ec:7d:20:5f:df:33:a3:84:8f: ac:2b:9f:33:10:85:28:7a:c7:81:c1:6a:22:75:43:70:9e:05: d3:d6:7d:5d:0d:61:d7:e7:63:b5:e0:65:17:79:3f:27:80:36: a9:94:53:02:cf:5b:e7:9f:15:c8:97:db:f9:91:fd:c3:8a:da: 6f:db:0b:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuo/Mfdl+c6nFjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTg3MDg0ZjYtYmZhOS00OTFhLWJkNzktMDdiNWRjNWRhMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZEHql+PKcawe8wHVUnveXjE9KpGE67caaVf zRYRGZA2pigV6psr9R/xi471UxfcfAtE2NCz8arttPaG/UlcbNsfn3jME8XdMHcS FxSWj/+FtizKR4XCdkU1J3w6C+VsDP51L7JZKmeqx4X4IcgMUBBbvrFI4s+iq5/x l/AFH0G5oSv3HzszecgvOXbx4tpXNKva3gi4YQfRB8dIThrFLEQi5AfRDpBRUAd8 JQKlftHwqXcZEkor5hJR5n6KA9Qb+zvHIkNOVmmkHCvIa+hUqBlit2wYkJ8xtRsa +haKx/7WM4iRt7+KuFtvjBSWV65xnnbYjScd6HzWYR8XksTKhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuta0EKsa8VVtbv+KOWy2fQ+UXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWFhMDkwMjItZjA4NS0z MmIyLWE0YTAtODA2NjU3Mzk0ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWsruhm9DzQElajP7XVgGrMbv2aFHUsbpDCIyZURYOnm5RMaFzlCqDP r/C07TTxlkIz/ScWcQPkwD8gpyFmblCIMGBAn1iCm+a1as4rraPKvUzlmwpOwz3f MCMpBTa7Y9hbeNoG7Wz4geRUfTupSmbpjZ/n/DDEsmuJYo1VloamF+kJJdqJl6OW JBxT5GwGX5G8ypK9C2oJ0QobWBwbfTOlGzLG27ckVB5jrdvuu4kJ2vcvBSstnGwX ITLu2ex9IF/fM6OEj6wrnzMQhSh6x4HBaiJ1Q3CeBdPWfV0NYdfnY7XgZRd5PyeA NqmUUwLPW+efFciX2/mR/cOK2m/bC9k= -----END CERTIFICATE-----Generated at Sun Apr 27 13:09:46 2025 by rpki-client