$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf2c5255-de70-319f-8068-1b8a4e39486f.roa File: bf2c5255-de70-319f-8068-1b8a4e39486f.roa (raw, json) Hash identifier: XpP6txFa0xvJEvykhrWET8J8IOQdOJRyF/8JMsCwHvI= Subject key identifier: A3:60:EB:C8:EC:3F:D5:8B:C5:4E:E1:53:7C:C2:14:9B:8D:33:8A:25 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B4A902838F0D43EDC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf2c5255-de70-319f-8068-1b8a4e39486f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:4a:90:28:38:f0:d4:3e:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=84be2b67-9762-4dcf-8079-047e3875ce3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:66:01:04:c3:71:14:3a:79:e3:f1:d3:be:b0: e5:50:1a:1c:31:6d:ba:13:12:fc:08:da:85:7f:34: 13:c3:9f:f0:3e:09:fb:fa:85:33:ba:83:55:30:a8: c7:ca:3f:45:aa:fc:37:73:0c:96:38:f0:eb:d6:2e: ca:3a:83:f2:51:08:ea:f2:0c:6f:1e:cb:9b:9b:9d: 55:14:f0:6d:a3:94:44:c6:de:db:04:77:3d:80:1d: f8:c4:44:82:60:f3:6e:e8:41:3a:30:5d:6f:c3:78: 19:ed:c2:7e:13:b6:1c:47:77:c3:f6:fa:19:3a:d3: 84:eb:e2:b3:e4:58:f6:9b:ee:b9:8f:99:82:da:16: 97:a3:6f:93:e0:b3:03:cc:7d:02:bf:f3:1c:ba:ed: a3:28:e8:91:78:38:8c:90:1f:a5:ae:5a:81:25:5e: 78:89:d8:ae:1f:f1:82:46:3e:58:5d:53:49:9c:99: d7:75:71:23:17:1a:a3:92:fe:90:69:82:e5:7c:c3: c4:09:16:25:ca:31:62:b6:92:1e:cb:31:80:04:a8: 32:04:27:23:8f:0d:ab:74:ad:b3:37:21:15:f2:16: c5:25:eb:95:1e:59:b2:10:dd:ab:17:a0:11:dc:eb: 87:f0:d4:bf:fa:eb:87:4d:6f:31:a4:3e:08:ba:50: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:60:EB:C8:EC:3F:D5:8B:C5:4E:E1:53:7C:C2:14:9B:8D:33:8A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf2c5255-de70-319f-8068-1b8a4e39486f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:15:5a:fb:c4:2b:ef:08:79:87:b1:d7:7c:c8:6d:ed:01:b4: f1:a9:b8:49:8d:5f:33:02:4a:54:99:dc:c6:57:07:cd:12:8c: 94:58:a9:ce:ea:d8:5b:1b:f6:fe:49:99:0e:78:61:0a:f3:e1: 21:3a:6f:98:c8:1e:2c:e2:b6:d7:6b:54:e0:ee:ac:46:ca:b0: a4:72:18:61:be:93:60:42:68:4e:dd:80:5b:e1:c5:ff:7a:f8: 7b:d1:ab:2d:75:2f:b0:11:fa:99:0b:06:7f:4d:50:36:85:7b: 1f:57:1c:8d:8f:e9:a7:63:92:e8:8b:6d:14:f4:dd:1e:11:37: cb:4d:74:02:5a:f0:e2:99:d4:ee:ac:25:dc:c8:d1:bd:ea:e7: 46:79:c5:b9:5d:b7:9c:d7:ce:2b:13:1a:60:7c:81:ba:56:c8: 32:ae:5c:88:68:91:ab:97:b4:66:b1:10:de:85:d3:0b:b1:0d: a2:3f:9c:9f:c7:3f:3b:c0:6a:14:a2:a9:e0:c3:1e:9f:58:e2: 2d:0b:e2:9d:53:e7:65:db:86:63:7e:7a:34:b1:0b:b7:cb:d0: f6:2b:b8:e8:af:54:81:97:3a:5e:25:50:8b:c4:99:6c:95:c2: 4d:cb:1b:34:8f:26:3e:98:97:d3:77:1b:6f:ae:80:17:90:25: 14:77:4b:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuztKkCg48NQ+3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODRiZTJiNjctOTc2Mi00ZGNmLTgwNzktMDQ3ZTM4NzVjZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2YBBMNxFDp54/HTvrDlUBocMW26ExL8CNqF fzQTw5/wPgn7+oUzuoNVMKjHyj9Fqvw3cwyWOPDr1i7KOoPyUQjq8gxvHsubm51V FPBto5RExt7bBHc9gB34xESCYPNu6EE6MF1vw3gZ7cJ+E7YcR3fD9voZOtOE6+Kz 5Fj2m+65j5mC2haXo2+T4LMDzH0Cv/Mcuu2jKOiReDiMkB+lrlqBJV54idiuH/GC Rj5YXVNJnJnXdXEjFxqjkv6QaYLlfMPECRYlyjFitpIeyzGABKgyBCcjjw2rdK2z NyEV8hbFJeuVHlmyEN2rF6AR3OuH8NS/+uuHTW8xpD4IulDQbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNg68jsP9WLxU7hU3zCFJuNM4olMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmYyYzUyNTUtZGU3MC0z MTlmLTgwNjgtMWI4YTRlMzk0ODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQVWvvEK+8IeYex13zIbe0BtPGpuEmNXzMCSlSZ3MZXB80SjJRYqc7q 2Fsb9v5JmQ54YQrz4SE6b5jIHizittdrVODurEbKsKRyGGG+k2BCaE7dgFvhxf96 +HvRqy11L7AR+pkLBn9NUDaFex9XHI2P6adjkuiLbRT03R4RN8tNdAJa8OKZ1O6s JdzI0b3q50Z5xbldt5zXzisTGmB8gbpWyDKuXIhokauXtGaxEN6F0wuxDaI/nJ/H PzvAahSiqeDDHp9Y4i0L4p1T52XbhmN+ejSxC7fL0PYruOivVIGXOl4lUIvEmWyV wk3LGzSPJj6Yl9N3G2+ugBeQJRR3S/8= -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:35 2025 by rpki-client