$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa File: c9d8e783-12ac-3b61-9dc9-88f74787c212.roa (raw, json) Hash identifier: uEqhALlZAmjsKxko3dvcGOTNEWvl7Q8PWB4lML+VgDw= Subject key identifier: 8F:D8:B2:73:1D:79:A2:12:F9:08:19:F5:5E:69:DE:54:56:8B:90:7F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3745A28B6144B7E18E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:37:45:a2:8b:61:44:b7:e1:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5ae917a9-6150-4084-8c74-5ac3ba4837bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:cd:4a:d5:9c:9f:d2:96:50:6c:e8:24:d9: 41:9d:83:28:0f:5b:47:f5:4c:32:4a:92:09:9d:0f: a0:ba:0f:b5:27:73:55:14:fb:9c:c9:6d:66:82:b9: 0b:27:8b:dc:df:44:c9:80:0b:ad:e4:5a:33:77:67: 81:5d:65:69:c0:29:24:a1:7e:0a:2a:e1:ea:67:e3: d7:29:ea:32:31:63:8f:df:6c:30:29:4f:b8:1d:89: 5a:e1:8c:9e:fe:cd:45:a8:d8:51:f3:28:1b:7d:a1: b5:8c:d2:c8:e3:a2:10:e0:6f:1a:f3:17:57:22:70: 7c:ac:f5:11:ee:63:df:bf:61:b1:5f:8a:a7:34:65: 75:21:f8:42:12:d7:cc:69:63:ad:a4:5c:56:94:83: c4:23:a6:8a:d0:52:be:7c:58:16:33:cc:26:70:f8: d0:45:27:06:98:6b:eb:ce:1e:fa:a9:40:76:72:7a: b2:80:20:17:a6:70:38:d2:d4:ef:4d:ad:ba:74:59: 54:af:c1:bf:5f:6f:3a:0c:fc:10:dd:6b:49:6b:19: bd:32:c5:09:9b:4c:91:7e:c7:77:94:89:d6:6a:4d: dd:b0:3c:ff:72:be:64:30:fd:10:95:cc:90:ff:d4: 92:d5:fa:f0:04:f7:5c:64:e0:0e:84:6d:8c:01:68: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:B2:73:1D:79:A2:12:F9:08:19:F5:5E:69:DE:54:56:8B:90:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:3a:35:22:71:37:15:1d:d1:9b:3a:24:46:7d:31:27:d0:f3: 61:d8:b1:2f:ae:1e:70:a5:c3:bb:71:b7:ac:0f:a3:5c:29:8f: 87:ea:c6:4c:6c:60:f8:72:da:9b:68:9a:cd:8e:51:9a:a8:df: d2:ee:c4:b2:e2:d0:47:5b:01:b1:89:90:22:ed:d4:4e:34:b9: d9:7b:cc:b8:b8:2e:c1:ff:e1:14:c0:9d:ce:a9:ce:3a:46:fc: 14:8d:52:9f:dc:25:9b:2d:cd:37:bf:28:06:53:66:87:37:6e: 47:09:ec:72:d4:93:63:8e:35:8b:77:20:12:63:81:71:1b:d5: ce:c6:79:56:24:89:85:99:66:8a:e3:49:96:55:ca:bc:82:63: 78:4b:36:57:e2:f1:a7:eb:a8:b8:aa:f9:5c:ec:7a:95:75:ee: d2:43:66:b5:77:9c:11:6d:c9:b7:c1:3e:82:58:81:85:1b:43: 7f:54:b3:76:d2:ff:de:04:a9:29:ef:05:6b:a0:96:65:a0:59: 90:dc:f6:6b:20:30:64:74:a3:7d:74:b8:ce:33:44:0f:3a:42: 6d:84:97:3d:80:27:1c:f4:1c:39:5d:88:fe:a0:fe:d4:49:6e: 58:e3:92:1a:83:06:39:fb:c1:31:4a:f5:ae:bc:55:f1:f3:12: cd:03:3c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzdFoothRLfhjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWFlOTE3YTktNjE1MC00MDg0LThjNzQtNWFjM2JhNDgzN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2LNStWcn9KWUGzoJNlBnYMoD1tH9UwySpIJ nQ+gug+1J3NVFPucyW1mgrkLJ4vc30TJgAut5Fozd2eBXWVpwCkkoX4KKuHqZ+PX KeoyMWOP32wwKU+4HYla4Yye/s1FqNhR8ygbfaG1jNLI46IQ4G8a8xdXInB8rPUR 7mPfv2GxX4qnNGV1IfhCEtfMaWOtpFxWlIPEI6aK0FK+fFgWM8wmcPjQRScGmGvr zh76qUB2cnqygCAXpnA40tTvTa26dFlUr8G/X286DPwQ3WtJaxm9MsUJm0yRfsd3 lInWak3dsDz/cr5kMP0QlcyQ/9SS1frwBPdcZOAOhG2MAWgL2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/YsnMdeaIS+QgZ9V5p3lRWi5B/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlkOGU3ODMtMTJhYy0z YjYxLTlkYzktODhmNzQ3ODdjMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKs6NSJxNxUd0Zs6JEZ9MSfQ82HYsS+uHnClw7txt6wPo1wpj4fqxkxs YPhy2ptoms2OUZqo39LuxLLi0EdbAbGJkCLt1E40udl7zLi4LsH/4RTAnc6pzjpG /BSNUp/cJZstzTe/KAZTZoc3bkcJ7HLUk2OONYt3IBJjgXEb1c7GeVYkiYWZZorj SZZVyryCY3hLNlfi8afrqLiq+VzsepV17tJDZrV3nBFtybfBPoJYgYUbQ39Us3bS /94EqSnvBWuglmWgWZDc9msgMGR0o310uM4zRA86Qm2Elz2AJxz0HDldiP6g/tRJ bljjkhqDBjn7wTFK9a68VfHzEs0DPAo= -----END CERTIFICATE-----Generated at Mon Apr 28 02:49:58 2025 by rpki-client