$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8fc3bca-d4fa-378d-b6c5-968dc6876a69.roa File: b8fc3bca-d4fa-378d-b6c5-968dc6876a69.roa (raw, json) Hash identifier: 5cq4q8BMvP1ZD5h5iZ5weZOxkxyLi3G/1bjkDEb6u3I= Subject key identifier: 5B:87:30:B4:1B:02:7C:F0:E4:54:F9:9F:6D:BD:33:91:5C:8B:47:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA91D34BABFB6C151B8400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8fc3bca-d4fa-378d-b6c5-968dc6876a69.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:91:d3:4b:ab:fb:6c:15:1b:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9d17c3ad-23b0-4492-9f62-afa99ce214d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:fc:d9:d8:e2:4f:15:65:be:45:36:72:10: fd:ed:c9:5f:be:fd:c8:3e:15:fe:fd:e2:c2:39:30: 4b:fe:cb:68:e3:da:08:8c:b5:37:2e:bf:f2:a0:f0: 13:4f:32:98:02:cd:fc:80:dd:4a:2e:a7:54:da:77: aa:a9:5f:19:33:f2:cc:c7:de:21:6d:c4:37:01:95: 01:40:5e:d5:e4:02:22:a1:f1:7d:5f:e5:39:d9:8b: d8:71:0b:d1:f6:69:0c:ac:94:6b:ff:f5:0d:16:d7: e1:0f:17:b2:1f:1c:1c:55:2a:41:6e:26:2f:bb:d0: 6c:a8:68:84:ef:58:5f:ec:9c:70:e7:54:63:2e:2c: d5:59:37:7c:18:04:b9:28:92:37:1c:0b:a1:fc:f5: 0d:a9:fc:43:79:65:96:1c:ec:55:de:c1:97:27:5c: bb:6f:ef:5f:f2:e3:63:b4:62:ef:d5:96:93:12:94: 5c:a8:0f:99:fa:38:d1:e3:b2:35:5d:42:35:71:e8: da:0b:bb:66:b8:65:b7:7e:31:f4:11:e5:12:02:ee: 9d:75:d8:41:c5:2b:fc:19:30:3a:fa:59:a7:61:db: 84:96:99:ec:4a:7a:a6:08:33:78:7c:15:b5:06:66: f2:90:96:04:f0:2a:ee:82:e6:4f:27:3b:18:e1:d4: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:87:30:B4:1B:02:7C:F0:E4:54:F9:9F:6D:BD:33:91:5C:8B:47:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8fc3bca-d4fa-378d-b6c5-968dc6876a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1b:62:cc:f9:2b:f4:8b:38:a0:52:44:78:82:12:5c:8d:ef: 2e:8e:45:84:bf:eb:89:cf:78:7b:a1:0e:98:04:5e:9a:62:5f: 33:83:35:d0:f3:7a:6b:90:5c:09:1a:9a:99:24:a4:6c:be:e8: d3:50:9a:44:d1:b0:d0:7a:95:99:43:53:26:dd:1d:dc:bc:05: b7:d2:9a:81:cd:ab:34:b2:8d:09:a0:c5:01:81:fa:74:a2:10: e6:48:0d:9c:bc:44:fe:65:76:62:1b:b8:50:25:8d:70:0a:0a: a1:be:87:80:d8:8f:a4:4d:60:cc:47:09:ad:f6:d4:96:26:5f: 13:b5:50:3b:98:fe:4e:35:5f:51:ad:82:24:d8:3c:96:99:73: d2:1e:8e:a1:c2:16:5a:6a:1d:0c:17:67:f5:33:dc:57:6e:ce: 76:37:32:23:16:f0:64:57:67:62:ec:3a:03:21:40:0c:76:e9: 15:69:37:73:1c:4c:34:aa:24:80:67:08:28:87:12:23:09:4c: 29:22:17:7f:44:3c:2e:ab:a0:02:e1:51:b9:d0:be:6f:95:36: 0c:5f:75:8e:c9:db:eb:95:b9:c9:f7:21:8f:7d:9c:5c:c3:21: 67:77:8e:6e:06:bb:cc:0a:ce:e4:22:83:be:db:5c:3e:0e:f0: 71:95:f7:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupHTS6v7bBUbhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWQxN2MzYWQtMjNiMC00NDkyLTlmNjItYWZhOTljZTIxNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviD82djiTxVlvkU2chD97clfvv3IPhX+/eLC OTBL/sto49oIjLU3Lr/yoPATTzKYAs38gN1KLqdU2neqqV8ZM/LMx94hbcQ3AZUB QF7V5AIiofF9X+U52YvYcQvR9mkMrJRr//UNFtfhDxeyHxwcVSpBbiYvu9BsqGiE 71hf7Jxw51RjLizVWTd8GAS5KJI3HAuh/PUNqfxDeWWWHOxV3sGXJ1y7b+9f8uNj tGLv1ZaTEpRcqA+Z+jjR47I1XUI1cejaC7tmuGW3fjH0EeUSAu6dddhBxSv8GTA6 +lmnYduElpnsSnqmCDN4fBW1BmbykJYE8CruguZPJzsY4dQbTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuHMLQbAnzw5FT5n229M5Fci0cCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhmYzNiY2EtZDRmYS0z NzhkLWI2YzUtOTY4ZGM2ODc2YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAbYsz5K/SLOKBSRHiCElyN7y6ORYS/64nPeHuhDpgEXppiXzODNdDz emuQXAkampkkpGy+6NNQmkTRsNB6lZlDUybdHdy8BbfSmoHNqzSyjQmgxQGB+nSi EOZIDZy8RP5ldmIbuFAljXAKCqG+h4DYj6RNYMxHCa321JYmXxO1UDuY/k41X1Gt giTYPJaZc9IejqHCFlpqHQwXZ/Uz3FduznY3MiMW8GRXZ2LsOgMhQAx26RVpN3Mc TDSqJIBnCCiHEiMJTCkiF39EPC6roALhUbnQvm+VNgxfdY7J2+uVucn3IY99nFzD IWd3jm4Gu8wKzuQig77bXD4O8HGV93w= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:59 2025 by rpki-client