$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8cc01d3-a108-3357-abc7-c3469889b8ba.roa File: b8cc01d3-a108-3357-abc7-c3469889b8ba.roa (raw, json) Hash identifier: tsgO6vCrKR9K4KtqwmRjqhdwqDZ5vJuxdAPNV97zLk8= Subject key identifier: EA:AE:D8:D4:D9:66:2B:7E:83:0B:7B:D7:03:46:89:4D:ED:CB:C9:66 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA95FB6B08D756418E3B40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8cc01d3-a108-3357-abc7-c3469889b8ba.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:95:fb:6b:08:d7:56:41:8e:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7a242524-48b5-4e65-b164-731acb01cf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:61:e6:4b:45:f7:b7:23:48:65:d9:2f:67: 80:cb:22:d1:66:1d:c8:a9:36:fe:00:94:2f:7d:fc: 0c:2f:ee:75:03:92:65:65:fe:e2:76:25:8c:cb:c9: 24:76:ae:34:3d:11:d1:f5:f2:48:88:fd:c0:ce:ba: 06:90:f2:cf:58:82:cf:c0:93:00:e2:05:7c:eb:d2: 41:a0:4a:2f:65:3d:75:b2:c1:f1:6b:de:8a:76:4e: c3:56:1b:ff:27:d7:f1:37:25:65:6c:07:de:a5:db: ae:d0:49:54:61:69:22:2e:77:30:56:fc:2f:4a:70: 65:ef:b5:ec:bc:e9:0c:2d:6c:7e:cb:13:be:cd:a0: da:50:3f:29:7b:2f:13:46:4b:f0:29:e6:6e:b1:18: 26:7d:94:66:33:ab:07:11:87:1e:64:0a:d1:39:87: 4c:ed:14:b9:ec:ad:de:bc:5a:7a:33:be:5e:40:4b: d3:38:87:52:e0:62:77:44:3e:60:f7:c6:4f:dc:7b: 01:1c:d3:1d:f3:b2:09:df:b5:cd:86:6a:7b:48:98: 85:76:3e:29:b3:88:41:ea:a1:3f:60:e7:a3:2f:c4: 8c:27:48:b1:db:fc:d2:47:f6:59:13:38:19:51:67: 9c:3b:84:61:c6:c5:da:f4:b8:69:ac:4f:ac:b3:aa: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AE:D8:D4:D9:66:2B:7E:83:0B:7B:D7:03:46:89:4D:ED:CB:C9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8cc01d3-a108-3357-abc7-c3469889b8ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:22:e5:f1:f9:f3:70:3e:7d:82:d7:86:16:0d:8e:2f:b9:fd: 7e:30:49:6f:9d:9e:82:64:d3:6b:48:62:46:96:ff:19:a3:c8: e5:5e:c3:69:e8:77:b6:a8:3e:5b:d0:07:2d:00:e6:da:27:9a: 61:c5:9e:0b:1f:63:ff:15:5b:5f:4c:85:bb:11:ab:5d:b3:59: e4:09:ba:1c:26:82:2c:6b:33:11:cc:71:ee:07:d2:38:3d:af: 16:84:be:48:b0:d0:d1:26:2c:c0:d9:26:ad:3e:c4:7f:42:d6: 25:79:66:40:cd:e8:43:d5:77:77:01:fe:f4:9e:0b:3c:bd:7e: e4:6a:41:19:c6:dd:4c:28:80:2b:32:9e:45:81:de:9e:eb:d1: a6:16:8d:14:4c:73:92:8d:48:37:9e:d1:5d:15:e1:02:a1:36: d1:46:c6:2e:cd:14:7e:09:5b:e0:67:50:a2:71:96:54:53:eb: 23:20:ab:c3:f4:11:1f:97:79:df:73:4c:58:d4:19:2b:80:46: dc:ac:b9:79:ac:d3:2d:96:c7:27:df:28:2e:03:93:aa:37:0f: de:32:54:04:2e:29:f4:4a:b5:b5:70:94:8b:af:bb:79:24:40: bf:40:74:86:51:6d:8f:e9:11:4a:81:9e:57:25:75:cc:62:df: 6b:51:f0:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupX7awjXVkGOO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2EyNDI1MjQtNDhiNS00ZTY1LWIxNjQtNzMxYWNiMDFjZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopBh5ktF97cjSGXZL2eAyyLRZh3IqTb+AJQv ffwML+51A5JlZf7idiWMy8kkdq40PRHR9fJIiP3AzroGkPLPWILPwJMA4gV869JB oEovZT11ssHxa96Kdk7DVhv/J9fxNyVlbAfepduu0ElUYWkiLncwVvwvSnBl77Xs vOkMLWx+yxO+zaDaUD8pey8TRkvwKeZusRgmfZRmM6sHEYceZArROYdM7RS57K3e vFp6M75eQEvTOIdS4GJ3RD5g98ZP3HsBHNMd87IJ37XNhmp7SJiFdj4ps4hB6qE/ YOejL8SMJ0ix2/zSR/ZZEzgZUWecO4RhxsXa9LhprE+ss6oosQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqu2NTZZit+gwt71wNGiU3ty8lmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhjYzAxZDMtYTEwOC0z MzU3LWFiYzctYzM0Njk4ODliOGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUi5fH583A+fYLXhhYNji+5/X4wSW+dnoJk02tIYkaW/xmjyOVew2no d7aoPlvQBy0A5tonmmHFngsfY/8VW19MhbsRq12zWeQJuhwmgixrMxHMce4H0jg9 rxaEvkiw0NEmLMDZJq0+xH9C1iV5ZkDN6EPVd3cB/vSeCzy9fuRqQRnG3UwogCsy nkWB3p7r0aYWjRRMc5KNSDee0V0V4QKhNtFGxi7NFH4JW+BnUKJxllRT6yMgq8P0 ER+Xed9zTFjUGSuARtysuXms0y2WxyffKC4Dk6o3D94yVAQuKfRKtbVwlIuvu3kk QL9AdIZRbY/pEUqBnlcldcxi32tR8HY= -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:39 2025 by rpki-client