$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9dedeb26-926d-381a-9625-07991ce44037.roa File: 9dedeb26-926d-381a-9625-07991ce44037.roa (raw, json) Hash identifier: pvcOacNCo7EkmeYTttrNh3FbXfCq8Q4w7i3BNAhZHgU= Subject key identifier: 0C:B0:C8:6B:05:DB:A8:43:C8:1E:F1:92:E4:D3:3F:24:A9:D0:C5:97 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB36CEE6A5D8A221B6F1B0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9dedeb26-926d-381a-9625-07991ce44037.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:36:ce:e6:a5:d8:a2:21:b6:f1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d47a8ac2-6e3e-4a9e-8a48-d3ca93281252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:6f:7c:3a:b4:8d:1f:e6:ad:93:1a:6a:20: 00:79:dd:26:bc:c4:48:26:be:50:de:8a:a6:9c:a0: e5:59:3c:77:f2:f2:fd:75:a7:78:37:60:ba:4e:01: 95:ed:7e:6d:e6:75:b2:d7:f5:2e:e7:cc:f1:6f:ab: bc:90:86:8a:0e:d4:0d:ce:c7:3e:eb:ea:90:48:38: 3b:66:c3:da:36:b5:6d:da:f5:66:14:3f:7e:9b:f3: 8f:be:e3:2c:d0:ec:37:6b:4d:c7:9a:3b:40:9c:6c: 17:f5:52:b4:f4:de:3f:29:d0:ea:f7:c0:44:ab:f4: 30:c5:1b:c7:42:b0:54:71:98:e9:b0:6a:dd:52:4c: 75:76:f8:a1:e7:16:70:37:e5:8f:ad:9d:69:24:65: 96:5c:dc:70:2c:4b:96:ea:9f:96:d0:51:51:29:d4: 2d:05:2f:af:58:39:32:e6:c8:5d:c8:db:88:62:70: 10:94:86:f9:bd:8e:8a:30:a0:63:1a:c7:79:a9:ee: 8a:cd:68:bd:e7:2f:0f:a1:9e:1a:90:3a:da:26:35: d8:3b:01:08:1a:13:e1:8c:03:d8:95:f1:38:ef:8d: 1a:db:ef:e7:c7:7c:fe:76:4c:0c:c8:1c:95:18:00: 2a:83:06:9b:61:75:4c:e6:99:bf:cb:19:6d:7d:82: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B0:C8:6B:05:DB:A8:43:C8:1E:F1:92:E4:D3:3F:24:A9:D0:C5:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9dedeb26-926d-381a-9625-07991ce44037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e3:a1:62:8a:c0:7d:a3:9f:c5:82:89:12:8d:85:c7:e7:d4: 09:5e:0c:73:8e:29:2a:a5:96:a9:e4:92:21:80:06:32:77:e6: b2:31:41:c9:97:c4:60:ff:d7:24:5e:9e:64:4c:a5:7b:05:37: 89:cf:33:b7:1e:ad:9b:6b:07:11:7b:59:80:cc:9d:7f:2c:a5: 0a:99:58:4d:be:cd:f0:31:e4:c5:63:3b:76:d0:05:ff:6d:56: f0:4f:28:bd:5f:0d:ec:84:2a:cb:74:5a:65:91:da:f4:e3:14: 9b:80:9a:d8:a5:cd:5c:cc:ec:66:4e:5b:3d:4c:92:30:f7:a6: 21:d7:e1:11:e3:bf:f5:03:87:60:68:d7:44:57:fe:cd:b7:40: 67:8c:7c:3b:65:67:7a:52:43:cb:66:63:a3:0a:f3:cc:78:87: b5:45:7a:ef:0d:ba:60:4d:10:cc:b1:f4:4b:fc:3b:cc:de:73: 01:f2:8c:f3:51:e7:86:f5:dd:fa:35:a9:bf:7d:32:e0:e4:ce: ba:81:98:8a:44:3e:68:3f:c9:2c:79:d0:88:31:ca:9b:82:6c: 2a:58:69:b5:ea:3b:4b:cf:b0:87:95:cf:da:d3:26:88:73:6b: 2d:50:bc:72:36:21:be:ca:c5:d1:cf:08:43:32:5c:89:f1:78: e4:88:f3:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzbO5qXYoiG28bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDQ3YThhYzItNmUzZS00YTllLThhNDgtZDNjYTkzMjgxMjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ5vfDq0jR/mrZMaaiAAed0mvMRIJr5Q3oqm nKDlWTx38vL9dad4N2C6TgGV7X5t5nWy1/Uu58zxb6u8kIaKDtQNzsc+6+qQSDg7 ZsPaNrVt2vVmFD9+m/OPvuMs0Ow3a03HmjtAnGwX9VK09N4/KdDq98BEq/QwxRvH QrBUcZjpsGrdUkx1dvih5xZwN+WPrZ1pJGWWXNxwLEuW6p+W0FFRKdQtBS+vWDky 5shdyNuIYnAQlIb5vY6KMKBjGsd5qe6KzWi95y8PoZ4akDraJjXYOwEIGhPhjAPY lfE4740a2+/nx3z+dkwMyByVGAAqgwabYXVM5pm/yxltfYJdYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAywyGsF26hDyB7xkuTTPySp0MWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWRlZGViMjYtOTI2ZC0z ODFhLTk2MjUtMDc5OTFjZTQ0MDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjjoWKKwH2jn8WCiRKNhcfn1AleDHOOKSqllqnkkiGABjJ35rIxQcmX xGD/1yRenmRMpXsFN4nPM7cerZtrBxF7WYDMnX8spQqZWE2+zfAx5MVjO3bQBf9t VvBPKL1fDeyEKst0WmWR2vTjFJuAmtilzVzM7GZOWz1MkjD3piHX4RHjv/UDh2Bo 10RX/s23QGeMfDtlZ3pSQ8tmY6MK88x4h7VFeu8NumBNEMyx9Ev8O8zecwHyjPNR 54b13fo1qb99MuDkzrqBmIpEPmg/ySx50IgxypuCbCpYabXqO0vPsIeVz9rTJohz ay1QvHI2Ib7KxdHPCEMyXInxeOSI8ys= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:45 2025 by rpki-client