$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac8ca38c-3a9b-3c9a-8a1e-cb9815196b49.roa File: ac8ca38c-3a9b-3c9a-8a1e-cb9815196b49.roa (raw, json) Hash identifier: yNSxQy0AHGAH5M3ws6tCk6OgBqm0L/ZuA6wlhkUI74Q= Subject key identifier: 01:33:DA:B9:78:C8:34:D9:A5:69:BC:C2:AA:F0:9F:B6:95:17:3D:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA940ADFD0777D2407EE00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac8ca38c-3a9b-3c9a-8a1e-cb9815196b49.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:94:0a:df:d0:77:7d:24:07:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=26cb5fcb-3296-46e5-8319-5aac6117b680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:ef:99:63:d6:c1:92:b5:fd:4f:25:cb:cc: 74:b2:e6:69:ab:79:ee:08:04:40:4d:ce:ba:e6:d6: 8b:4a:4b:64:14:17:b6:6c:31:06:5a:f9:f5:f9:52: d6:c6:bb:4e:e3:bf:2b:90:c5:11:6a:77:5a:b8:f2: c4:93:14:90:40:50:81:90:50:35:8c:9b:e4:c0:e2: 05:70:72:b1:b0:ac:e2:aa:ef:08:df:af:55:86:14: 17:c5:bc:93:64:cf:78:67:77:ad:d6:39:6f:51:22: 99:6c:af:21:29:72:dd:9b:8b:96:75:d7:f0:28:e9: 05:2a:9b:df:e0:39:2b:c4:55:f7:40:37:8a:6e:73: 54:eb:b2:45:7b:2e:84:62:fc:2e:48:2d:ab:28:49: 7d:f0:d9:28:9b:39:0c:a3:b7:a4:70:26:68:66:29: 79:cb:74:5a:e7:49:dc:d1:48:6d:ed:7e:33:3c:dc: d7:c3:46:68:c7:64:c2:26:bf:d9:36:90:1e:e5:e0: 1f:ce:8b:1f:ae:bc:0e:fc:ee:68:5d:09:bc:a2:c2: e0:cc:f4:1b:b6:93:95:4a:46:7e:d9:5e:2a:be:ae: 74:22:ce:af:44:41:27:d0:29:13:fd:02:b5:36:a5: c9:dc:23:72:12:52:fc:65:bf:89:67:78:07:40:2c: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:33:DA:B9:78:C8:34:D9:A5:69:BC:C2:AA:F0:9F:B6:95:17:3D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac8ca38c-3a9b-3c9a-8a1e-cb9815196b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ab:6d:26:b0:d0:b6:9d:cd:e1:2c:d6:6f:58:eb:ae:0a:28: c3:9e:e0:b1:bc:5a:ea:9a:18:c2:35:90:0e:8b:ae:52:c9:77: 00:33:e8:61:e9:8d:1c:e2:99:21:5b:b3:d8:8a:3c:01:eb:62: 6d:8c:d3:c7:41:ae:cd:a1:aa:a9:7e:24:53:dc:a1:87:40:2c: 41:05:00:17:73:82:fa:b3:da:8b:b1:4f:88:40:1b:a8:97:73: a4:be:50:29:40:08:4d:22:d3:f8:9b:1a:33:ab:f4:ff:44:18: 1d:c9:f1:21:88:f0:fc:16:14:f9:6e:ea:6e:be:42:b6:13:9e: 2a:23:a1:48:77:57:ef:94:4a:c4:29:54:97:26:64:d6:1c:06: df:92:d0:69:64:54:f9:e7:46:f8:95:40:57:49:8c:6b:f0:ed: 6c:01:25:af:c5:6c:aa:da:99:cf:48:c0:54:39:5e:e5:ba:bb: 84:8d:a6:de:fd:6c:e7:4a:4b:36:dd:75:01:2c:50:da:52:f5: 39:28:d7:8e:4a:7e:27:39:76:32:93:74:60:d0:91:6f:55:d9: 96:42:27:5b:46:97:81:ea:27:2c:62:94:60:2b:c8:eb:52:f8: 3b:7a:34:2d:5b:52:8f:5e:54:cc:45:ec:b2:64:22:94:4b:2b: 23:c1:5a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupQK39B3fSQH7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjZjYjVmY2ItMzI5Ni00NmU1LTgzMTktNWFhYzYxMTdiNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwDvmWPWwZK1/U8ly8x0suZpq3nuCARATc66 5taLSktkFBe2bDEGWvn1+VLWxrtO478rkMURandauPLEkxSQQFCBkFA1jJvkwOIF cHKxsKziqu8I369VhhQXxbyTZM94Z3et1jlvUSKZbK8hKXLdm4uWddfwKOkFKpvf 4DkrxFX3QDeKbnNU67JFey6EYvwuSC2rKEl98NkomzkMo7ekcCZoZil5y3Ra50nc 0Uht7X4zPNzXw0Zox2TCJr/ZNpAe5eAfzosfrrwO/O5oXQm8osLgzPQbtpOVSkZ+ 2V4qvq50Is6vREEn0CkT/QK1NqXJ3CNyElL8Zb+JZ3gHQCxD0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEz2rl4yDTZpWm8wqrwn7aVFz0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWM4Y2EzOGMtM2E5Yi0z YzlhLThhMWUtY2I5ODE1MTk2YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWrbSaw0LadzeEs1m9Y664KKMOe4LG8WuqaGMI1kA6LrlLJdwAz6GHp jRzimSFbs9iKPAHrYm2M08dBrs2hqql+JFPcoYdALEEFABdzgvqz2ouxT4hAG6iX c6S+UClACE0i0/ibGjOr9P9EGB3J8SGI8PwWFPlu6m6+QrYTniojoUh3V++USsQp VJcmZNYcBt+S0GlkVPnnRviVQFdJjGvw7WwBJa/FbKramc9IwFQ5XuW6u4SNpt79 bOdKSzbddQEsUNpS9Tko145Kfic5djKTdGDQkW9V2ZZCJ1tGl4HqJyxilGAryOtS +Dt6NC1bUo9eVMxF7LJkIpRLKyPBWjc= -----END CERTIFICATE-----Generated at Sun Apr 27 11:20:37 2025 by rpki-client