$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fcf7deb-a816-3640-b174-499dadd22af9.roa File: 9fcf7deb-a816-3640-b174-499dadd22af9.roa (raw, json) Hash identifier: 5hxfWIDBSwMMTwNwfTq0t3WHbs75DpmlsUN6sjNnZiQ= Subject key identifier: 35:12:04:42:29:BA:9F:39:28:80:F1:4F:5C:C0:9C:E0:1A:63:52:C9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9549A2BFDBD38902B180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fcf7deb-a816-3640-b174-499dadd22af9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:95:49:a2:bf:db:d3:89:02:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=88474d70-61c8-487f-80fe-a98d88f7f2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4b:ab:34:ef:c9:11:b1:5e:86:da:2d:07:a3: c7:8d:b0:69:8e:64:08:ae:bf:95:18:e3:74:f5:55: e3:55:06:62:4a:bb:0e:08:19:b7:a8:1c:ee:9d:46: 14:ea:74:66:f6:ed:ff:78:99:69:ac:8c:cf:a3:77: 91:38:4b:4d:4b:c4:5d:38:19:df:92:0b:5b:fb:fe: 6b:29:df:cc:61:1c:e7:4e:85:ba:95:89:da:6e:4c: 6e:65:dd:fe:47:62:7e:2d:49:12:86:46:73:40:14: de:dd:bd:9a:e7:ba:46:d9:21:a1:fb:98:4d:92:99: 69:9c:93:70:7a:b0:a8:1c:70:bb:90:2f:02:a0:e4: b7:42:bb:fc:0b:e8:5d:df:95:cd:c5:cc:ae:a3:71: be:f6:8e:1e:11:62:d3:0c:75:76:e7:65:68:24:2f: c4:85:12:ec:27:f9:c2:01:80:43:24:22:ad:59:0c: da:a5:b2:3d:0b:ff:19:b3:a1:2c:c7:54:6c:1a:1b: fa:94:5f:31:ef:64:ab:bb:0f:b2:7c:f5:71:1f:2b: 9c:30:47:c1:ba:96:28:3e:06:38:82:23:cf:dc:25: 0c:65:b2:67:3c:9d:b7:d5:04:ea:87:11:5b:12:7f: ea:4f:ba:d8:2e:d7:97:76:69:b3:35:b4:93:01:09: 77:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:12:04:42:29:BA:9F:39:28:80:F1:4F:5C:C0:9C:E0:1A:63:52:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9fcf7deb-a816-3640-b174-499dadd22af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:13:4e:1c:1c:c2:40:cc:0d:32:13:7d:ea:fb:6e:73:41:7f: a4:cd:48:31:ea:7d:38:4e:44:b7:73:67:f5:7b:2a:ad:7e:47: 26:e3:1d:ff:79:42:f3:c4:6a:f4:b3:a7:6e:83:fe:bb:5b:b4: 5e:af:71:65:27:08:04:68:36:d0:c0:e5:5d:81:0c:b3:20:e5: 25:ab:83:ad:aa:bb:56:1b:3d:1a:ae:79:f0:42:d5:e2:7e:a6: 05:f2:f1:2c:4e:64:4b:f3:34:68:0c:86:26:c0:cb:51:d7:ed: 7d:a6:f6:47:77:8c:76:5f:bd:20:4c:e8:c2:48:ba:54:a2:8f: 42:e7:34:64:b9:89:35:8c:aa:c8:11:e6:65:bd:c0:c7:f8:9e: 3c:c2:78:08:d7:28:98:1c:d8:88:47:d8:f3:b2:16:1b:c3:25: e0:f3:f0:ae:8c:23:fc:1c:8c:58:e5:97:7b:6c:49:af:0c:38: fe:0b:4d:6f:12:c9:6f:d1:e8:dc:d7:98:9f:99:35:d0:cc:31: 28:65:14:43:53:51:ea:eb:94:83:e5:93:42:70:d7:84:68:cd: 2c:1f:02:9c:cd:d0:95:50:61:d4:31:f6:94:97:52:fe:62:4b: 26:0e:84:96:8a:d4:2b:3c:12:a9:9c:fe:6b:44:d5:60:2b:1f: 17:99:ba:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupVJor/b04kCsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODg0NzRkNzAtNjFjOC00ODdmLTgwZmUtYTk4ZDg4ZjdmMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEurNO/JEbFehtotB6PHjbBpjmQIrr+VGON0 9VXjVQZiSrsOCBm3qBzunUYU6nRm9u3/eJlprIzPo3eROEtNS8RdOBnfkgtb+/5r Kd/MYRznToW6lYnabkxuZd3+R2J+LUkShkZzQBTe3b2a57pG2SGh+5hNkplpnJNw erCoHHC7kC8CoOS3Qrv8C+hd35XNxcyuo3G+9o4eEWLTDHV252VoJC/EhRLsJ/nC AYBDJCKtWQzapbI9C/8Zs6Esx1RsGhv6lF8x72Sruw+yfPVxHyucMEfBupYoPgY4 giPP3CUMZbJnPJ231QTqhxFbEn/qT7rYLteXdmmzNbSTAQl39QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUSBEIpup85KIDxT1zAnOAaY1LJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWZjZjdkZWItYTgxNi0z NjQwLWIxNzQtNDk5ZGFkZDIyYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIATThwcwkDMDTITfer7bnNBf6TNSDHqfThORLdzZ/V7Kq1+RybjHf95 QvPEavSzp26D/rtbtF6vcWUnCARoNtDA5V2BDLMg5SWrg62qu1YbPRquefBC1eJ+ pgXy8SxOZEvzNGgMhibAy1HX7X2m9kd3jHZfvSBM6MJIulSij0LnNGS5iTWMqsgR 5mW9wMf4njzCeAjXKJgc2IhH2POyFhvDJeDz8K6MI/wcjFjll3tsSa8MOP4LTW8S yW/R6NzXmJ+ZNdDMMShlFENTUerrlIPlk0Jw14RozSwfApzN0JVQYdQx9pSXUv5i SyYOhJaK1Cs8Eqmc/mtE1WArHxeZuiA= -----END CERTIFICATE-----Generated at Sun Apr 27 03:51:16 2025 by rpki-client