$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa File: b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa (raw, json) Hash identifier: BDaVDFnJdrjlf5bUZgdEbce1GA99NMx4V1sWKMiYkcQ= Subject key identifier: 03:75:A2:FF:AF:60:5E:79:96:8D:FC:D0:D8:41:E2:EF:44:6F:90:C9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA90C183D7C28072712480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:90:c1:83:d7:c2:80:72:71:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7c3ce85e-1391-4988-aa86-b547c2ab2054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:47:0c:85:c9:f8:55:3b:6a:7a:60:c0:af:3a: d2:e6:57:09:0e:30:de:a2:ac:9d:62:c1:a5:c2:ac: 4a:de:04:a5:65:7d:3e:e0:41:af:11:2b:ed:69:6d: 20:4e:b4:b8:57:d9:f4:f9:c6:35:b9:62:a7:ac:e6: 7e:20:87:cb:5e:d1:39:c0:8b:a8:5b:a4:e1:96:10: c0:14:1e:d2:7e:54:34:c2:39:48:76:83:2b:0b:4c: 8a:c0:6e:e7:5c:d0:b1:ee:46:b9:3b:76:18:ff:90: 9a:83:7b:8d:cc:59:1c:f6:b5:9a:8d:cf:36:41:df: 43:9a:8c:1a:51:72:a6:5b:69:be:75:0e:ba:ec:f3: 9e:2c:a1:29:ca:a1:d6:f8:b8:d8:70:19:00:55:05: 41:90:9c:0f:91:22:4a:b7:bf:2f:d6:4e:5b:f7:10: 03:e8:cc:b5:c6:6f:99:72:ad:c8:8a:25:2a:6f:e4: 47:d9:bc:0e:fe:b0:59:14:8b:bf:1b:22:85:d7:c2: cf:9e:c8:82:15:4c:db:8e:0d:e4:2b:3f:78:47:4b: 09:0d:80:10:c0:10:ac:1a:4f:0b:6b:70:a6:c9:05: 2c:bb:b3:db:ce:c2:6f:a4:87:76:c9:c4:06:d2:a1: 1b:d6:7a:f0:a8:12:90:7c:4b:38:b2:9f:37:44:3f: c5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:75:A2:FF:AF:60:5E:79:96:8D:FC:D0:D8:41:E2:EF:44:6F:90:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:89:d8:e3:b2:fd:40:c2:ac:19:eb:ac:23:df:36:ba:2e:ec: 59:00:12:d1:38:2b:7d:fb:6d:bb:d5:a6:20:90:6c:03:34:d6: 0b:be:e7:f8:f5:1b:fc:e4:59:84:78:fb:92:ad:86:13:b4:3f: 51:df:2c:40:3a:b7:34:cd:c8:31:45:39:15:e9:13:f3:70:46: 60:36:34:99:25:48:5f:91:88:8a:b8:52:56:09:f7:02:9b:cf: e7:05:02:cf:c4:4d:ba:2e:55:a9:4e:2f:a7:20:76:cf:6f:a8: bc:df:2f:b1:84:75:5b:06:fc:2a:41:0e:94:3f:e2:79:38:ce: 4c:64:53:3a:b3:0c:98:36:70:23:02:37:a1:6c:54:8c:1a:6b: 0a:71:4a:7c:15:7b:df:ff:31:6f:fb:14:dc:b5:87:e1:d6:3e: 30:0b:65:e1:70:51:93:61:9f:8d:c6:18:ec:6e:d6:74:94:63: 80:04:76:f6:42:0e:98:d9:9d:b0:0e:bc:c2:7b:48:76:d9:c7: e2:9a:4f:13:79:13:29:14:d4:ed:c2:de:8b:37:7a:99:4a:f3: 95:8c:a6:6a:db:58:7b:95:ef:de:cb:fd:fd:87:67:aa:59:b2: 26:0f:11:04:91:17:a9:5e:40:e5:a2:a8:55:eb:62:eb:9c:9c: 10:2b:59:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupDBg9fCgHJxJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2MzY2U4NWUtMTM5MS00OTg4LWFhODYtYjU0N2MyYWIyMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0cMhcn4VTtqemDArzrS5lcJDjDeoqydYsGl wqxK3gSlZX0+4EGvESvtaW0gTrS4V9n0+cY1uWKnrOZ+IIfLXtE5wIuoW6ThlhDA FB7SflQ0wjlIdoMrC0yKwG7nXNCx7ka5O3YY/5Cag3uNzFkc9rWajc82Qd9Dmowa UXKmW2m+dQ667POeLKEpyqHW+LjYcBkAVQVBkJwPkSJKt78v1k5b9xAD6My1xm+Z cq3IiiUqb+RH2bwO/rBZFIu/GyKF18LPnsiCFUzbjg3kKz94R0sJDYAQwBCsGk8L a3CmyQUsu7PbzsJvpId2ycQG0qEb1nrwqBKQfEs4sp83RD/FdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN1ov+vYF55lo380NhB4u9Eb5DJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhiZmRkZWQtNmQxNC0z NjZlLTlhMTItYmY1ZDMwNmEzZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECJ2OOy/UDCrBnrrCPfNrou7FkAEtE4K337bbvVpiCQbAM01gu+5/j1 G/zkWYR4+5KthhO0P1HfLEA6tzTNyDFFORXpE/NwRmA2NJklSF+RiIq4UlYJ9wKb z+cFAs/ETbouValOL6cgds9vqLzfL7GEdVsG/CpBDpQ/4nk4zkxkUzqzDJg2cCMC N6FsVIwaawpxSnwVe9//MW/7FNy1h+HWPjALZeFwUZNhn43GGOxu1nSUY4AEdvZC DpjZnbAOvMJ7SHbZx+KaTxN5EykU1O3C3os3eplK85WMpmrbWHuV797L/f2HZ6pZ siYPEQSRF6leQOWiqFXrYuucnBArWYA= -----END CERTIFICATE-----Generated at Sun Apr 27 09:52:55 2025 by rpki-client