$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3117d42-d5b8-3316-afa1-5b3198177348.roa File: a3117d42-d5b8-3316-afa1-5b3198177348.roa (raw, json) Hash identifier: 7HxW4cCLew3KERt96YWBYH22WZIgVJDXlCJeBOnZLs8= Subject key identifier: B2:DD:BA:DC:ED:3F:A0:89:3D:7F:39:4E:6A:AD:0E:EF:64:7C:D1:58 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB356FA4C2E32343E8D000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3117d42-d5b8-3316-afa1-5b3198177348.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:35:6f:a4:c2:e3:23:43:e8:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=77a9a5bb-b63b-4dc1-a2f4-a7bbb806bad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:07:6a:bb:e9:ff:7c:9e:13:51:66:bb:c3: da:73:25:5e:c7:f3:41:bb:83:5e:1a:15:06:9f:cf: a1:7f:7c:86:71:d0:bf:2b:ca:00:dc:20:a7:7d:64: 28:56:e4:30:24:64:b9:5d:ba:20:81:5e:79:c5:dc: a3:5f:d7:c8:e2:c7:06:20:7e:da:15:0e:13:ac:ef: b9:a5:5e:95:fe:88:61:40:b0:83:e3:81:e1:9e:51: 03:c9:0d:e9:5e:cc:9c:45:2e:c5:9e:bb:d0:66:93: 39:21:09:d4:b2:90:b0:5a:44:47:2d:d4:5f:54:01: be:7f:b9:3e:c4:1c:6f:8b:62:59:81:a5:4b:e7:26: 65:b4:d1:67:c0:02:6c:72:61:fa:52:39:2e:63:ae: 0d:55:51:c2:a2:7e:a9:24:4b:8b:82:e1:5a:56:fb: 79:7b:55:e4:4f:24:a0:1b:51:cf:27:24:9d:ad:08: 60:f1:b2:8a:6a:5b:4f:b2:e6:ec:85:62:4e:77:08: 2d:8a:15:72:0b:a6:c1:39:96:46:aa:89:51:5f:61: 44:2a:95:af:6c:5d:22:0c:80:ed:2d:62:dd:d8:b8: da:14:7f:ee:18:8e:e8:fa:8d:5e:25:aa:cc:7d:94: 3c:09:3c:58:6b:25:ed:6d:ad:40:fd:93:53:fc:7d: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DD:BA:DC:ED:3F:A0:89:3D:7F:39:4E:6A:AD:0E:EF:64:7C:D1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3117d42-d5b8-3316-afa1-5b3198177348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7e:ad:fd:7c:65:e1:e9:89:ed:10:00:f5:85:e0:88:23:8d: 09:b3:65:65:52:d5:a7:10:dd:9a:8c:cb:7d:a7:79:d1:db:c0: 0e:39:11:20:c4:31:ed:81:82:d2:d5:e2:0f:89:c4:a2:ad:6e: 55:25:ff:21:b8:f9:4f:c0:aa:50:ef:b5:33:40:6b:92:24:93: 4a:0e:83:7f:94:ab:21:38:09:13:81:5f:f5:92:1c:94:5c:01: fa:c4:21:1a:3d:4e:60:4b:9c:15:ef:d9:88:b2:9f:80:16:46: e0:c2:62:87:80:f5:ec:8b:41:a4:32:a0:b4:ce:d2:df:a6:79: a7:1c:3d:01:d0:2a:1d:71:9a:80:ae:d9:d2:cd:3b:06:84:25: 48:fb:bb:41:9e:3b:31:c0:3a:d1:8c:43:38:74:90:ea:3d:d9: 39:83:d8:b7:6d:0d:5a:d2:b6:fb:d2:e5:11:bf:1c:03:55:05: db:e8:a7:34:dc:5e:e4:77:38:9a:b6:d8:3b:92:e5:83:af:55: 20:8c:36:62:d4:0c:4f:b3:43:cd:f1:04:f5:15:c5:1e:eb:de: 43:24:d3:7b:1f:24:9d:9d:f0:bf:1a:0e:0b:9b:be:58:ec:3b: 9c:3d:3d:3f:78:6d:da:b9:66:51:79:63:4c:10:8f:13:08:5b: 50:78:e8:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzVvpMLjI0Po0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzdhOWE1YmItYjYzYi00ZGMxLWEyZjQtYTdiYmI4MDZiYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzsHarvp/3yeE1Fmu8PacyVex/NBu4NeGhUG n8+hf3yGcdC/K8oA3CCnfWQoVuQwJGS5XboggV55xdyjX9fI4scGIH7aFQ4TrO+5 pV6V/ohhQLCD44HhnlEDyQ3pXsycRS7FnrvQZpM5IQnUspCwWkRHLdRfVAG+f7k+ xBxvi2JZgaVL5yZltNFnwAJscmH6UjkuY64NVVHCon6pJEuLguFaVvt5e1XkTySg G1HPJySdrQhg8bKKaltPsubshWJOdwgtihVyC6bBOZZGqolRX2FEKpWvbF0iDIDt LWLd2LjaFH/uGI7o+o1eJarMfZQ8CTxYayXtba1A/ZNT/H2LIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLdutztP6CJPX85TmqtDu9kfNFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTMxMTdkNDItZDViOC0z MzE2LWFmYTEtNWIzMTk4MTc3MzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh+rf18ZeHpie0QAPWF4IgjjQmzZWVS1acQ3ZqMy32nedHbwA45ESDE Me2BgtLV4g+JxKKtblUl/yG4+U/AqlDvtTNAa5Ikk0oOg3+UqyE4CROBX/WSHJRc AfrEIRo9TmBLnBXv2Yiyn4AWRuDCYoeA9eyLQaQyoLTO0t+meaccPQHQKh1xmoCu 2dLNOwaEJUj7u0GeOzHAOtGMQzh0kOo92TmD2LdtDVrStvvS5RG/HANVBdvopzTc XuR3OJq22DuS5YOvVSCMNmLUDE+zQ83xBPUVxR7r3kMk03sfJJ2d8L8aDgubvljs O5w9PT94bdq5ZlF5Y0wQjxMIW1B46GQ= -----END CERTIFICATE-----Generated at Sun Apr 27 04:08:59 2025 by rpki-client