$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3ab0ba9-007e-3ca7-b914-3fac9030fba5.roa File: a3ab0ba9-007e-3ca7-b914-3fac9030fba5.roa (raw, json) Hash identifier: qHCofWnw1uFkMQQ7Masmnp7kP4/mYwIwvgLIFBEJlbk= Subject key identifier: 53:9A:70:95:F1:D8:DD:3B:EC:AD:7E:C5:BB:A4:B5:67:E3:1B:95:6D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB38730B98267B7EA02A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3ab0ba9-007e-3ca7-b914-3fac9030fba5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:38:73:0b:98:26:7b:7e:a0:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=98ec8a17-c1d0-4a31-b885-5afd3bad5b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d4:39:9f:ea:ab:af:f8:44:b6:62:5c:31:2d: 14:6e:26:f9:a9:3a:e9:a5:f5:62:1e:d0:cc:81:d7: 06:69:c1:1c:61:fc:42:9c:71:82:e1:11:18:82:16: 91:cf:6d:c2:8f:5b:f4:7d:17:bf:5f:5a:1c:53:63: d3:a0:4e:e8:6b:7d:d4:5f:df:11:36:91:55:ab:08: a3:ce:a4:ca:6e:38:d9:3b:50:8e:14:de:68:79:ee: bf:a7:72:4b:cd:eb:69:05:df:7e:ae:24:4f:ec:dc: 9c:63:82:e7:4f:08:86:55:bf:5b:f1:d8:80:41:74: 9f:cf:a5:25:d3:cf:9e:fa:72:b5:bc:8f:b4:2e:49: 98:85:b9:87:da:00:d2:54:f8:a8:ab:f5:50:47:12: b9:1a:e5:88:c4:b3:a4:2a:a1:07:4f:fc:1e:8c:e6: 12:c5:1c:aa:82:bd:97:cd:2e:50:7a:b6:af:7c:d5: 7b:fe:68:a4:81:5d:06:97:de:6e:e9:12:da:a4:31: 3d:0b:85:ee:6e:1a:f3:73:11:9e:2a:52:24:26:c8: aa:bd:34:6f:68:3c:15:cc:36:d9:ab:fd:71:9f:7a: 14:7e:14:d1:d2:f3:3e:c3:6c:46:bf:75:0f:f4:b2: 4e:c8:2f:d5:4a:d0:e1:a4:5e:79:73:76:15:cb:ab: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9A:70:95:F1:D8:DD:3B:EC:AD:7E:C5:BB:A4:B5:67:E3:1B:95:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3ab0ba9-007e-3ca7-b914-3fac9030fba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5e:a1:11:46:68:76:aa:e6:74:6d:ec:d5:7a:e3:2a:b1:94: 09:c3:da:53:5e:4d:4a:a3:82:94:d3:01:18:61:81:8d:b7:96: 83:b4:78:b8:07:f9:86:85:37:9e:b5:93:d4:e6:9e:e1:f8:f8: 52:f0:72:d7:b6:95:98:20:25:65:3e:b4:a5:1e:44:4a:5f:0a: 78:3d:31:be:29:0c:f2:f5:e5:c3:55:b9:c5:ac:86:cf:56:51: e7:16:47:b2:7d:af:86:52:7c:ee:ee:0c:cc:29:93:f0:09:a5: 97:fb:ec:a3:e3:d2:22:d2:ed:4e:77:ae:01:4a:00:57:2c:67: b1:ce:b5:62:eb:8e:db:20:81:fd:50:e9:d5:ad:16:b4:8b:6e: 21:c8:9b:93:36:88:36:e1:d8:e8:03:04:ec:70:d4:76:ad:dc: d6:1e:b0:bb:98:f3:60:6c:30:8c:e5:54:32:d6:16:76:fb:a6: b4:c6:52:9f:e5:4b:59:ac:52:33:f7:81:e2:ce:d7:c1:e3:31: ca:ca:83:b3:74:e2:68:d9:f3:1e:9f:78:0f:5d:e7:8f:db:aa: e1:db:3d:50:32:b9:41:8e:e4:37:8a:c5:db:72:52:1d:f9:0a: 18:f5:ee:59:36:ed:7f:6f:fb:01:68:bb:2d:8e:d2:d6:51:fe: 43:94:8b:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzhzC5gme36gKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OThlYzhhMTctYzFkMC00YTMxLWI4ODUtNWFmZDNiYWQ1YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNQ5n+qrr/hEtmJcMS0Ubib5qTrppfViHtDM gdcGacEcYfxCnHGC4REYghaRz23Cj1v0fRe/X1ocU2PToE7oa33UX98RNpFVqwij zqTKbjjZO1COFN5oee6/p3JLzetpBd9+riRP7NycY4LnTwiGVb9b8diAQXSfz6Ul 08+e+nK1vI+0LkmYhbmH2gDSVPioq/VQRxK5GuWIxLOkKqEHT/wejOYSxRyqgr2X zS5QeravfNV7/mikgV0Gl95u6RLapDE9C4XubhrzcxGeKlIkJsiqvTRvaDwVzDbZ q/1xn3oUfhTR0vM+w2xGv3UP9LJOyC/VStDhpF55c3YVy6tOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOacJXx2N077K1+xbuktWfjG5VtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTNhYjBiYTktMDA3ZS0z Y2E3LWI5MTQtM2ZhYzkwMzBmYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFeoRFGaHaq5nRt7NV64yqxlAnD2lNeTUqjgpTTARhhgY23loO0eLgH +YaFN561k9TmnuH4+FLwcte2lZggJWU+tKUeREpfCng9Mb4pDPL15cNVucWshs9W UecWR7J9r4ZSfO7uDMwpk/AJpZf77KPj0iLS7U53rgFKAFcsZ7HOtWLrjtsggf1Q 6dWtFrSLbiHIm5M2iDbh2OgDBOxw1Hat3NYesLuY82BsMIzlVDLWFnb7prTGUp/l S1msUjP3geLO18HjMcrKg7N04mjZ8x6feA9d54/bquHbPVAyuUGO5DeKxdtyUh35 Chj17lk27X9v+wFouy2O0tZR/kOUi4g= -----END CERTIFICATE-----Generated at Sun Apr 27 11:21:30 2025 by rpki-client