$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa File: ad760d84-9ad6-391c-8399-873dafb9d352.roa (raw, json) Hash identifier: 3csdrWUoO309ht5t95pf/MCOcaUc8WtlgSvOuA+AT7o= Subject key identifier: E2:91:B8:FF:2A:C1:31:EB:CC:BF:FD:44:B2:1A:F2:9A:CA:78:00:8C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9134FC08155FBAB39300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:91:34:fc:08:15:5f:ba:b3:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=74a93aa4-b755-4024-b02d-e21a6e0ad1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:e1:a4:24:8b:16:85:4f:a0:ae:c4:0e:e2: 58:e7:1c:81:85:6b:4d:61:8a:ea:d7:d0:67:f2:a8: 39:63:96:36:5a:bd:a4:c5:04:67:15:af:5c:fb:0d: 3c:9d:a4:fe:2a:c3:5b:7f:16:ff:64:59:83:c5:40: 60:2b:91:39:e4:35:5b:17:57:2d:1b:33:d5:a3:94: cb:d8:82:2c:0c:30:bc:18:06:1e:1e:b9:2e:cb:b8: ec:01:06:38:0e:83:c6:32:db:2d:6f:b4:6f:de:ae: e8:48:92:a9:2d:02:7e:88:ea:f2:b5:44:59:2c:92: d5:e9:5a:06:bb:62:83:b5:bd:36:37:95:65:40:c7: 92:8d:67:7a:98:32:45:d2:5b:9f:17:cf:fa:f3:4b: b9:a2:16:f1:29:f9:a2:87:56:81:2a:c6:96:91:01: 74:ac:e0:69:70:a1:4d:f5:60:69:d8:13:94:e8:1b: b0:d9:54:2d:44:b0:3b:1b:17:6c:32:50:55:9b:28: 6f:10:79:4a:38:d3:91:1a:d0:1f:21:e0:e0:2d:b5: 82:19:b8:c0:c6:34:40:4f:96:1e:b1:b8:bc:8c:59: 50:e1:b8:21:80:17:79:da:32:e3:37:73:6b:72:33: 36:0f:60:1e:a4:96:14:2f:7a:3d:a4:e6:c1:98:95: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:91:B8:FF:2A:C1:31:EB:CC:BF:FD:44:B2:1A:F2:9A:CA:78:00:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9f:75:31:61:83:bb:95:9c:b6:7c:37:19:d8:c5:86:86:16: 88:dc:3b:7f:e1:09:7b:ed:d9:d1:3b:80:20:57:bb:9d:7b:7f: ed:27:84:36:3e:2a:c0:8f:52:bc:d8:14:bf:d7:e9:b9:79:25: 08:3f:d3:8a:4b:fe:13:92:bd:51:1e:cd:2f:b9:90:e4:90:e3: 52:f8:cf:85:ef:59:33:9e:68:93:1d:c1:b4:9d:ad:87:ad:ed: 50:2b:f1:cd:38:00:01:e7:54:8b:6a:c0:c5:98:5b:92:2b:33: 7f:71:df:1a:83:65:d0:1a:cb:f7:a4:06:e5:00:2d:0a:2e:1e: 8e:70:0c:84:f3:0b:b6:d0:14:08:0d:4d:bf:7c:26:1f:00:7e: ea:c0:61:12:7a:b8:88:06:2e:f8:a5:80:9c:b5:aa:ec:f3:ce: 43:b1:58:e4:dc:66:56:08:64:fa:17:cc:d6:81:42:3d:03:cf: 8f:b7:0b:17:72:93:7d:60:e7:a9:65:cd:d8:22:8c:e2:15:31: a8:0c:dd:b8:39:e4:19:ed:15:da:03:97:70:92:82:68:9b:96: b7:c2:e1:29:17:6c:8e:57:8c:e9:2f:c0:c6:f5:43:12:a4:5d: 80:1c:05:60:75:a2:29:61:df:28:1e:e0:10:f5:76:cb:ed:4b: d7:6a:ac:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupE0/AgVX7qzkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzRhOTNhYTQtYjc1NS00MDI0LWIwMmQtZTIxYTZlMGFkMWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPDhpCSLFoVPoK7EDuJY5xyBhWtNYYrq19Bn 8qg5Y5Y2Wr2kxQRnFa9c+w08naT+KsNbfxb/ZFmDxUBgK5E55DVbF1ctGzPVo5TL 2IIsDDC8GAYeHrkuy7jsAQY4DoPGMtstb7Rv3q7oSJKpLQJ+iOrytURZLJLV6VoG u2KDtb02N5VlQMeSjWd6mDJF0lufF8/680u5ohbxKfmih1aBKsaWkQF0rOBpcKFN 9WBp2BOU6Buw2VQtRLA7GxdsMlBVmyhvEHlKONORGtAfIeDgLbWCGbjAxjRAT5Ye sbi8jFlQ4bghgBd52jLjN3NrcjM2D2AepJYUL3o9pObBmJX0kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKRuP8qwTHrzL/9RLIa8prKeACMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWQ3NjBkODQtOWFkNi0z OTFjLTgzOTktODczZGFmYjlkMzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyfdTFhg7uVnLZ8NxnYxYaGFojcO3/hCXvt2dE7gCBXu517f+0nhDY+ KsCPUrzYFL/X6bl5JQg/04pL/hOSvVEezS+5kOSQ41L4z4XvWTOeaJMdwbSdrYet 7VAr8c04AAHnVItqwMWYW5IrM39x3xqDZdAay/ekBuUALQouHo5wDITzC7bQFAgN Tb98Jh8AfurAYRJ6uIgGLvilgJy1quzzzkOxWOTcZlYIZPoXzNaBQj0Dz4+3Cxdy k31g56llzdgijOIVMagM3bg55BntFdoDl3CSgmiblrfC4SkXbI5XjOkvwMb1QxKk XYAcBWB1oilh3yge4BD1dsvtS9dqrL4= -----END CERTIFICATE-----Generated at Sun Apr 27 10:15:36 2025 by rpki-client