$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a439b0-ed29-3a93-b403-8f5d0106f0b6.roa File: b7a439b0-ed29-3a93-b403-8f5d0106f0b6.roa (raw, json) Hash identifier: NKNgwB/ukz6Epht3JLMFLhkjY1YZoWmN1o2P3WEMAeQ= Subject key identifier: DB:BB:73:A3:8C:8F:42:BB:AC:AC:B5:DF:4D:DC:3A:76:38:18:EB:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3DE77BBD1B7FC2608690 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a439b0-ed29-3a93-b403-8f5d0106f0b6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3d:e7:7b:bd:1b:7f:c2:60:86:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3d979c80-bd67-4f99-870e-9b3625d9b6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1a:a5:3e:80:3b:c7:bf:d1:3b:59:f1:ba:0a: 94:29:53:f8:1b:ce:af:75:e2:5e:a8:06:3c:c9:84: 67:09:2e:65:da:96:90:aa:7c:25:6c:6c:6b:b6:eb: 86:95:3e:ab:74:9f:19:94:6d:3a:10:90:2c:33:d7: 63:23:96:15:fd:e4:2e:58:6f:55:97:8c:77:da:61: 85:db:65:fe:10:88:a1:3e:2a:9c:16:42:e7:25:dc: 24:99:e7:17:91:c9:10:9c:61:a6:73:14:24:5a:2f: 7b:75:1f:c6:34:63:2a:9d:cd:8d:8a:2c:88:c9:e4: d1:5d:de:bc:cd:3e:c9:0f:b2:92:2c:71:8e:31:98: 62:62:37:ad:bc:14:92:b3:f7:36:86:32:ce:b6:25: a7:a6:e6:20:31:3f:7e:89:21:43:4a:8e:02:37:86: 33:52:d5:0b:25:93:33:81:99:ee:3e:8c:28:e1:22: a4:ab:82:08:42:c5:57:15:20:06:90:c0:de:55:68: e9:05:6c:f0:04:16:3d:d2:cd:18:63:bb:96:9d:85: 43:50:6d:6b:24:99:b6:47:e2:51:bc:fd:ee:12:79: c0:c0:72:70:95:7c:28:cb:7a:3d:57:4d:aa:8f:ac: 55:86:49:1b:52:76:10:76:1c:09:4e:9b:23:34:26: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BB:73:A3:8C:8F:42:BB:AC:AC:B5:DF:4D:DC:3A:76:38:18:EB:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a439b0-ed29-3a93-b403-8f5d0106f0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:da:11:08:b5:b4:30:79:12:bc:fc:a7:c2:d8:7f:56:86:2c: b9:3a:d2:91:ee:2e:ce:1f:1a:57:5c:34:a7:ac:82:99:23:69: 71:4e:01:2b:82:e5:2a:05:ab:fd:ad:9a:08:f1:f1:8d:1a:7a: ae:bb:50:61:e7:91:a4:3a:43:7e:15:8d:d4:5e:a1:26:ef:e4: a4:57:7d:84:86:e7:a7:ea:f6:6e:43:2f:a3:53:f3:84:12:61: c2:65:ff:df:28:15:7e:8f:aa:ff:14:f0:14:89:55:85:27:d8: 4c:8e:60:9b:c1:ff:14:01:69:ca:2b:f7:d6:24:d1:ca:61:c1: b5:2a:e8:69:ec:2e:60:0a:3b:e9:6c:97:e5:d1:11:9e:31:ce: 30:12:c6:5b:c9:32:8f:82:d1:1b:5f:6c:cb:42:ea:ba:1e:9a: 92:ba:e2:6e:c8:b8:47:65:f3:8b:ec:8c:64:fb:e1:91:22:4b: f0:68:52:32:53:8a:5c:74:c6:55:b6:35:45:55:c5:31:1e:a0: 9f:66:f0:2d:a3:de:7b:47:d7:19:d0:53:0d:0a:dc:45:ab:ef: f1:15:1c:77:05:ed:1f:34:eb:29:c8:02:27:11:fd:31:c0:b4: 84:6e:7f:8a:b5:eb:78:68:5b:58:a4:e5:82:a3:59:93:79:e6: e5:2c:08:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz3ne70bf8JghpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2Q5NzljODAtYmQ2Ny00Zjk5LTg3MGUtOWIzNjI1ZDliNmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxqlPoA7x7/RO1nxugqUKVP4G86vdeJeqAY8 yYRnCS5l2paQqnwlbGxrtuuGlT6rdJ8ZlG06EJAsM9djI5YV/eQuWG9Vl4x32mGF 22X+EIihPiqcFkLnJdwkmecXkckQnGGmcxQkWi97dR/GNGMqnc2NiiyIyeTRXd68 zT7JD7KSLHGOMZhiYjetvBSSs/c2hjLOtiWnpuYgMT9+iSFDSo4CN4YzUtULJZMz gZnuPowo4SKkq4IIQsVXFSAGkMDeVWjpBWzwBBY90s0YY7uWnYVDUG1rJJm2R+JR vP3uEnnAwHJwlXwoy3o9V02qj6xVhkkbUnYQdhwJTpsjNCb8NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu7c6OMj0K7rKy1303cOnY4GOv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjdhNDM5YjAtZWQyOS0z YTkzLWI0MDMtOGY1ZDAxMDZmMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzaEQi1tDB5Erz8p8LYf1aGLLk60pHuLs4fGldcNKesgpkjaXFOASuC 5SoFq/2tmgjx8Y0aeq67UGHnkaQ6Q34VjdReoSbv5KRXfYSG56fq9m5DL6NT84QS YcJl/98oFX6Pqv8U8BSJVYUn2EyOYJvB/xQBacor99Yk0cphwbUq6GnsLmAKO+ls l+XREZ4xzjASxlvJMo+C0RtfbMtC6roempK64m7IuEdl84vsjGT74ZEiS/BoUjJT ilx0xlW2NUVVxTEeoJ9m8C2j3ntH1xnQUw0K3EWr7/EVHHcF7R806ynIAicR/THA tIRuf4q163hoW1ik5YKjWZN55uUsCIE= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:41 2025 by rpki-client