$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa File: c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa (raw, json) Hash identifier: y5NviKWrCBXQsrt/i7Gzj8tNhrJSmhbcxFo5Q8KuKMw= Subject key identifier: 00:D6:C4:16:BE:55:E2:38:31:92:D6:7D:D1:89:A9:F4:3F:C2:5C:83 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA98881894B7C656128D08 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:98:88:18:94:b7:c6:56:12:8d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6fee3908-1ce5-4978-95df-3e85439e9c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:af:5b:f0:5d:ab:ff:bd:fa:c8:c3:1a:9c: 05:b3:1a:79:9d:77:88:5f:16:ec:ab:94:45:2d:e2: 2b:26:46:c1:08:4e:d2:51:2a:d1:c9:67:1a:51:7d: 80:54:d8:6a:43:ac:39:38:15:3c:bf:93:38:74:11: 88:ec:ab:38:26:60:32:fe:16:9c:65:e8:a6:65:fe: e9:76:7a:65:c7:a0:7c:99:e5:85:d1:32:15:c7:62: 14:74:24:20:86:9e:ee:06:6a:b0:f3:5f:cf:27:d5: 4d:c3:bd:23:e0:e8:e2:2f:91:34:23:ad:62:20:27: ad:f6:5e:d2:47:31:1f:c0:d5:53:ba:85:f8:ce:08: fa:0c:c4:f5:20:9a:f3:0a:9e:f1:03:33:3c:09:a0: 34:0d:b1:5c:dd:2c:7d:78:63:0b:49:fb:21:44:c8: 1c:f1:19:d9:57:3d:09:3f:6c:90:bb:b0:73:c5:2d: e8:87:63:4f:7b:8b:f8:6f:dd:fb:32:a6:5f:73:20: c9:77:c5:0a:37:b0:08:39:91:bc:d7:d0:68:9f:e3: 70:47:5a:ee:e3:00:79:e9:b0:d0:8c:c5:5e:04:12: 0e:ba:72:4b:f4:09:73:30:58:3a:89:0c:6a:62:64: 12:91:c4:c0:f7:9c:ab:0d:9c:e4:11:e1:8f:08:a9: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D6:C4:16:BE:55:E2:38:31:92:D6:7D:D1:89:A9:F4:3F:C2:5C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c89a28ad-0d1e-34ab-9c5a-ff3e59af4604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3a:84:95:92:12:ce:f1:dd:ce:d2:b6:28:29:cf:93:1f:81: 2f:8b:94:28:f3:e4:33:e4:b5:90:b8:b5:36:db:85:7b:2b:81: 58:a6:e5:ff:fa:65:40:58:5a:62:e9:bc:17:8c:59:8b:29:2f: fc:a8:97:b2:99:61:8f:3b:36:a6:f3:45:50:7d:c4:f4:e8:d0: cc:f4:f4:26:2f:31:ed:4e:18:2b:ea:9c:8f:61:e1:6b:97:73: a8:91:68:09:21:06:5e:84:6e:c1:5e:4c:93:04:72:c1:27:7b: f4:6b:3f:e0:82:8f:2e:f4:29:7b:9e:12:2f:42:c8:e9:ff:79: af:c8:69:d0:f9:0b:d2:87:29:7c:e5:ce:4d:28:1d:ae:29:c6: 5d:23:98:21:41:29:5f:0f:e9:bf:39:b2:14:04:6a:19:72:07: 34:a9:3b:4e:10:62:4e:7b:e8:c0:66:03:8a:44:85:94:c7:da: f5:9d:53:00:6c:1a:a3:c1:1b:28:5b:e7:49:91:42:18:09:e6: f8:c3:45:65:7c:0d:61:07:1d:7d:ab:bd:d1:79:e6:f8:54:ff: 43:d9:d0:d9:27:b0:4c:8f:a0:2e:6d:fd:9d:12:42:02:7c:81: 50:80:9e:2a:e7:69:df:a8:e8:f4:59:f5:4d:45:9d:e5:90:06: ce:8d:e5:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupiIGJS3xlYSjQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmZlZTM5MDgtMWNlNS00OTc4LTk1ZGYtM2U4NTQzOWU5YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdavW/Bdq/+9+sjDGpwFsxp5nXeIXxbsq5RF LeIrJkbBCE7SUSrRyWcaUX2AVNhqQ6w5OBU8v5M4dBGI7Ks4JmAy/hacZeimZf7p dnplx6B8meWF0TIVx2IUdCQghp7uBmqw81/PJ9VNw70j4OjiL5E0I61iICet9l7S RzEfwNVTuoX4zgj6DMT1IJrzCp7xAzM8CaA0DbFc3Sx9eGMLSfshRMgc8RnZVz0J P2yQu7BzxS3oh2NPe4v4b937MqZfcyDJd8UKN7AIOZG819Bon+NwR1ru4wB56bDQ jMVeBBIOunJL9AlzMFg6iQxqYmQSkcTA95yrDZzkEeGPCKnZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADWxBa+VeI4MZLWfdGJqfQ/wlyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg5YTI4YWQtMGQxZS0z NGFiLTljNWEtZmYzZTU5YWY0NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPO0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD06hJWSEs7x3c7Stigpz5MfgS+LlCjz5DPktZC4tTbbhXsrgVim5f/6 ZUBYWmLpvBeMWYspL/yol7KZYY87NqbzRVB9xPTo0Mz09CYvMe1OGCvqnI9h4WuX c6iRaAkhBl6EbsFeTJMEcsEne/RrP+CCjy70KXueEi9CyOn/ea/IadD5C9KHKXzl zk0oHa4pxl0jmCFBKV8P6b85shQEahlyBzSpO04QYk576MBmA4pEhZTH2vWdUwBs GqPBGyhb50mRQhgJ5vjDRWV8DWEHHX2rvdF55vhU/0PZ0NknsEyPoC5t/Z0SQgJ8 gVCAnirnad+o6PRZ9U1FneWQBs6N5QU= -----END CERTIFICATE-----Generated at Sat Apr 26 23:53:41 2025 by rpki-client