$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa File: bccc062f-8e57-31cd-9ca2-081d4382b174.roa (raw, json) Hash identifier: 9Xlf9MyzujCQDFWHAo479CjxD6wcGBF0VzQhNjY+qMQ= Subject key identifier: 60:84:A8:60:33:85:92:EC:C1:93:FC:A5:AC:4D:4B:88:86:E3:E6:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB364CD0B721BB4D78D180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:36:4c:d0:b7:21:bb:4d:78:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d2727835-e24b-414d-9ede-9adc776bd8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0c:fe:b4:38:dc:15:c5:08:07:2d:1c:a6:aa: fd:da:71:52:91:3f:18:6a:51:d9:26:d9:f4:7f:36: 94:da:69:15:69:ad:94:9d:62:ac:6d:d5:4a:48:60: cc:89:b2:33:37:58:57:69:af:40:8e:1b:6e:26:52: 89:5b:b9:fb:81:8b:e5:2e:f5:a1:53:46:de:8c:6d: 60:ba:5e:a0:5e:68:df:bf:b3:ba:27:b9:82:72:61: 46:1c:be:35:25:9c:19:ce:69:46:18:5e:e1:77:0a: 23:45:5d:d2:5a:38:af:71:62:7c:1b:c0:1e:c5:37: 4d:84:37:bc:b1:1d:d6:87:41:1d:10:70:21:fb:66: b9:c7:4f:e1:d0:30:62:05:79:13:65:e4:81:96:39: 75:eb:6e:4f:f2:bf:47:24:d0:55:f1:18:e8:9d:a8: 57:ce:dc:71:30:b1:6a:24:bf:aa:96:11:03:f5:95: f2:26:b4:42:a6:c1:5b:14:9e:66:b0:f1:6b:21:c0: 3e:14:dd:71:2f:6b:76:6e:0e:09:59:52:ea:7b:e0: 82:3a:8c:6c:fb:66:e6:59:38:de:90:76:12:ed:45: 4b:b5:91:da:27:cb:3e:ff:19:d4:a7:9b:ae:53:bf: ab:66:9e:71:ca:de:fb:f5:cc:cd:f6:bb:00:22:48: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:84:A8:60:33:85:92:EC:C1:93:FC:A5:AC:4D:4B:88:86:E3:E6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:5f:90:32:fa:95:7b:85:3b:f4:64:0e:cf:b2:8a:6c:10:a3: 48:2b:75:c4:a6:3f:5b:a9:75:cd:4f:b5:4f:18:4d:51:77:c3: 49:5d:3c:41:68:77:ef:0a:cb:5c:a3:6c:75:05:75:db:e0:9f: f7:58:40:13:87:df:9c:6a:3e:ce:24:8f:d6:34:fa:3a:31:f9: 0a:e5:3a:fa:1a:d1:0d:91:1b:fe:29:c5:a7:21:9b:a2:18:19: 4a:42:2b:75:2d:f5:bb:fe:56:7f:c3:46:dd:fd:da:d5:03:02: 7d:44:54:ff:cd:b3:49:3a:f6:7a:11:b6:4c:cf:5c:86:98:22: d0:eb:02:de:a8:a3:de:f9:dd:b9:a7:c4:e6:e9:79:5d:50:e2: 91:ef:6c:ec:27:2b:1f:e9:0a:d1:45:ad:16:48:6f:6d:3e:c7: 12:a6:bf:ba:e3:98:79:73:d1:aa:9b:01:49:8e:3f:75:38:86: f0:ac:41:cc:17:86:4d:ba:ad:a0:e2:1f:83:99:17:4e:df:f0: 50:9a:d0:c6:db:2e:01:8d:87:24:4b:1b:48:df:6a:0f:99:74: a0:76:9a:5f:2d:9f:06:b7:98:b0:88:5e:0a:ca:b5:c1:31:22: 09:b3:5e:e8:c4:dd:62:3c:21:fa:df:66:ca:15:68:77:3a:26: fe:7a:33:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzZM0Lchu0140YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDI3Mjc4MzUtZTI0Yi00MTRkLTllZGUtOWFkYzc3NmJkOGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAz+tDjcFcUIBy0cpqr92nFSkT8YalHZJtn0 fzaU2mkVaa2UnWKsbdVKSGDMibIzN1hXaa9AjhtuJlKJW7n7gYvlLvWhU0bejG1g ul6gXmjfv7O6J7mCcmFGHL41JZwZzmlGGF7hdwojRV3SWjivcWJ8G8AexTdNhDe8 sR3Wh0EdEHAh+2a5x0/h0DBiBXkTZeSBljl1625P8r9HJNBV8RjonahXztxxMLFq JL+qlhED9ZXyJrRCpsFbFJ5msPFrIcA+FN1xL2t2bg4JWVLqe+CCOoxs+2bmWTje kHYS7UVLtZHaJ8s+/xnUp5uuU7+rZp5xyt779czN9rsAIkhDCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCEqGAzhZLswZP8paxNS4iG4+YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNjYzA2MmYtOGU1Ny0z MWNkLTljYTItMDgxZDQzODJiMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRfkDL6lXuFO/RkDs+yimwQo0grdcSmP1updc1PtU8YTVF3w0ldPEFo d+8Ky1yjbHUFddvgn/dYQBOH35xqPs4kj9Y0+jox+QrlOvoa0Q2RG/4pxachm6IY GUpCK3Ut9bv+Vn/DRt392tUDAn1EVP/Ns0k69noRtkzPXIaYItDrAt6oo9753bmn xObpeV1Q4pHvbOwnKx/pCtFFrRZIb20+xxKmv7rjmHlz0aqbAUmOP3U4hvCsQcwX hk26raDiH4OZF07f8FCa0MbbLgGNhyRLG0jfag+ZdKB2ml8tnwa3mLCIXgrKtcEx IgmzXujE3WI8IfrfZsoVaHc6Jv56My0= -----END CERTIFICATE-----Generated at Sun Apr 27 10:19:18 2025 by rpki-client