$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aba5fd13-c9b9-3702-ae62-6c198c446922.roa File: aba5fd13-c9b9-3702-ae62-6c198c446922.roa (raw, json) Hash identifier: z8mdmZwyASHKPsJVmlhALr9pkHCqHzet8QEWilqOYb8= Subject key identifier: A0:53:B7:A7:D6:C4:A4:45:9B:D4:DB:0A:B1:3C:0F:56:73:96:ED:B7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B9E8CA98C3235DDC8CB Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aba5fd13-c9b9-3702-ae62-6c198c446922.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:9e:8c:a9:8c:32:35:dd:c8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=69424d0c-ff02-465c-8cda-3c08f1e5f669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:56:fe:98:3c:75:88:40:6d:e8:55:86:90: ee:0e:26:e8:35:be:f8:46:83:1c:a2:be:29:bf:5f: 9e:62:90:6b:4a:dd:78:30:91:ef:b4:d5:81:89:06: 09:88:05:ec:a3:ba:9a:3c:f5:4e:5e:aa:63:8d:19: ff:7c:65:e8:62:db:e1:8d:4c:ae:26:b2:fd:a2:1c: cd:de:2d:52:e3:30:b7:b4:f8:8a:a1:94:e9:e0:b5: 25:42:95:f3:9f:3f:8a:2b:b7:35:9a:06:6d:c4:c3: 84:1a:17:e3:dc:dc:73:4c:d6:91:7c:af:f9:ab:a7: 3c:12:9d:c3:bd:56:49:c3:d3:b7:30:e0:a7:ae:2f: 43:32:93:89:5e:21:69:41:49:54:f0:fc:63:f1:63: 70:d1:1e:9f:3d:42:17:99:3c:37:08:b9:7f:f9:06: 1d:b3:08:58:2c:47:e2:bd:1f:ad:45:81:03:08:1e: 45:59:05:55:ab:68:b3:b8:e4:1a:23:2e:6c:fd:64: 65:8c:31:90:74:3a:f3:ad:0a:76:54:a9:ed:db:70: 1d:2f:83:fb:7b:67:21:a7:7d:96:bf:0f:5a:72:49: 01:8a:67:94:aa:76:8c:96:d1:5d:fc:ef:db:90:2e: 50:ae:d6:28:cf:b9:a7:bb:9c:6c:12:6e:81:e4:21: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:53:B7:A7:D6:C4:A4:45:9B:D4:DB:0A:B1:3C:0F:56:73:96:ED:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aba5fd13-c9b9-3702-ae62-6c198c446922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:05:b9:4d:22:e4:37:d9:a6:e5:8d:a6:57:fb:f2:8b:b3:68: 13:24:6a:fc:fd:66:93:dd:ae:21:8d:54:78:c2:d6:02:f3:13: 2a:02:39:89:ab:cf:ed:67:5f:67:b5:a9:c8:fa:f8:88:48:b6: 81:40:12:43:16:50:0b:ce:2b:67:f1:79:67:85:9c:61:4b:fa: c5:82:d1:ec:9c:22:e6:d3:4b:9d:b1:a8:5f:7d:79:25:1a:a4: 0c:87:f1:d3:63:41:84:00:dc:35:33:be:d8:26:e6:4b:08:73: df:c3:b0:56:fe:63:6e:2d:7f:ba:73:3f:7f:2f:49:47:7c:77: fb:ce:3a:c5:2c:44:a6:64:cf:87:39:ae:ba:96:b6:c2:38:41: 29:3e:29:a7:2b:63:71:5a:58:31:7d:a0:a9:4e:7c:c0:20:96: 30:0d:d6:c5:d3:64:ca:ca:bf:d7:e6:ff:76:72:99:11:74:a5: 20:7e:09:28:23:8a:d0:9f:77:a0:43:61:56:0a:0d:79:14:5b: cd:2f:fe:ed:44:5e:ee:d6:79:9b:32:68:53:ae:73:af:cf:e6: 7e:7e:68:46:8a:8b:90:f9:0d:a4:bf:22:d2:06:e1:d5:52:e3: 75:93:36:c9:1b:02:63:da:b2:59:b1:a7:19:aa:f9:82:63:7d: 52:69:51:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzuejKmMMjXdyMswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Njk0MjRkMGMtZmYwMi00NjVjLThjZGEtM2MwOGYxZTVmNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3hW/pg8dYhAbehVhpDuDiboNb74RoMcor4p v1+eYpBrSt14MJHvtNWBiQYJiAXso7qaPPVOXqpjjRn/fGXoYtvhjUyuJrL9ohzN 3i1S4zC3tPiKoZTp4LUlQpXznz+KK7c1mgZtxMOEGhfj3NxzTNaRfK/5q6c8Ep3D vVZJw9O3MOCnri9DMpOJXiFpQUlU8Pxj8WNw0R6fPUIXmTw3CLl/+QYdswhYLEfi vR+tRYEDCB5FWQVVq2izuOQaIy5s/WRljDGQdDrzrQp2VKnt23AdL4P7e2chp32W vw9ackkBimeUqnaMltFd/O/bkC5QrtYoz7mnu5xsEm6B5CEc7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBTt6fWxKRFm9TbCrE8D1Zzlu23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWJhNWZkMTMtYzliOS0z NzAyLWFlNjItNmMxOThjNDQ2OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0FuU0i5DfZpuWNplf78ouzaBMkavz9ZpPdriGNVHjC1gLzEyoCOYmr z+1nX2e1qcj6+IhItoFAEkMWUAvOK2fxeWeFnGFL+sWC0eycIubTS52xqF99eSUa pAyH8dNjQYQA3DUzvtgm5ksIc9/DsFb+Y24tf7pzP38vSUd8d/vOOsUsRKZkz4c5 rrqWtsI4QSk+KacrY3FaWDF9oKlOfMAgljAN1sXTZMrKv9fm/3ZymRF0pSB+CSgj itCfd6BDYVYKDXkUW80v/u1EXu7WeZsyaFOuc6/P5n5+aEaKi5D5DaS/ItIG4dVS 43WTNskbAmPaslmxpxmq+YJjfVJpUSM= -----END CERTIFICATE-----Generated at Wed Apr 30 00:51:48 2025 by rpki-client