$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa File: c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa (raw, json) Hash identifier: XGKREpyzXUVIwFyCvOrJfrzh/gydkfQoN7Y4lLe/UGE= Subject key identifier: B2:4C:0F:17:72:51:A3:99:87:30:99:7D:81:D0:C0:1B:49:B9:86:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA91C76276909F3C4EA600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:91:c7:62:76:90:9f:3c:4e:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8394424f-8c16-428b-9a56-00297d77e791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e4:a1:8b:f5:f9:72:0a:73:04:a1:e8:35:52: 53:e4:12:8b:58:fe:aa:ed:64:1f:9c:a5:d2:10:84: c3:34:74:99:67:bb:a6:47:50:21:8a:0d:1f:51:a6: c6:60:b0:79:68:12:c0:4f:b3:db:1b:c1:a2:73:b7: 7a:36:09:b3:b5:26:a5:26:8f:8b:ee:f0:fe:9a:16: 06:9b:65:24:05:0f:8f:3d:4b:a8:d2:d3:90:75:db: 73:ac:e7:e9:58:68:cc:18:49:3c:77:cb:e8:21:ae: 54:58:be:8d:ff:fd:fb:da:ee:16:47:82:2d:53:2d: 62:63:b2:01:2b:79:11:c4:ef:49:2a:ba:72:9b:8e: 7d:c8:b6:5c:f2:1b:ae:72:77:4b:c3:de:a3:7c:9e: 3b:e3:da:b5:bd:ca:14:5b:ea:ab:b5:66:52:2d:1b: 68:f9:8b:08:ba:f8:93:e2:77:6b:25:6f:27:05:87: 59:87:53:3b:cc:8b:7d:da:2e:12:33:cd:74:63:dd: 5c:5a:6d:9d:58:e7:82:26:1b:a3:3b:a3:86:75:cd: 81:e1:b5:5f:db:22:60:1a:77:58:04:16:0a:a1:87: 94:51:4c:a6:6c:06:8a:48:32:86:23:c5:c5:5b:5a: ce:35:d8:6f:a9:72:c3:df:00:5c:c5:c8:da:77:3b: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4C:0F:17:72:51:A3:99:87:30:99:7D:81:D0:C0:1B:49:B9:86:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b3:af:49:c6:ec:61:31:04:bf:0c:52:80:bf:df:01:4f:5c: 3f:5b:f0:19:00:2a:38:e9:9f:c9:72:22:84:a8:ca:14:4a:3d: b5:e4:7f:f9:c3:71:d6:ff:45:37:6c:71:6d:d6:95:10:f5:41: 6b:31:8b:f4:56:32:c5:f3:ed:db:a5:87:ee:d1:02:ff:13:b1: 5c:b8:ff:19:4b:5e:f1:c7:92:9d:f7:3b:56:7e:7b:39:83:0a: 1d:2d:8c:fe:b6:06:9d:de:77:85:a6:9d:87:ff:1a:32:cb:be: 79:5c:2a:d4:62:27:56:09:3f:9b:9f:49:e2:b9:6f:c7:14:a5: d1:07:d6:7e:46:ff:dd:29:6a:79:81:49:ec:3a:29:cc:c9:a7: 52:b5:4b:85:44:21:13:ed:a6:04:b7:6e:44:08:92:c5:ac:dd: 94:4c:ed:f5:2d:31:69:e7:84:89:ee:14:bf:e4:d0:ba:5c:e8: 1a:40:bc:0d:b5:53:2d:0f:3b:aa:cc:80:d6:44:6a:cc:75:7f: f5:25:6e:02:fc:b2:74:f4:57:1e:55:51:dc:38:12:c9:8b:14: 87:b2:23:d0:f2:0e:96:ac:4a:1c:44:4b:9a:81:7f:6b:61:78: 68:46:28:8d:82:f7:2c:00:df:49:ca:85:72:c0:78:38:bf:43: 21:02:c9:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupHHYnaQnzxOpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODM5NDQyNGYtOGMxNi00MjhiLTlhNTYtMDAyOTdkNzdlNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Shi/X5cgpzBKHoNVJT5BKLWP6q7WQfnKXS EITDNHSZZ7umR1Ahig0fUabGYLB5aBLAT7PbG8Gic7d6NgmztSalJo+L7vD+mhYG m2UkBQ+PPUuo0tOQddtzrOfpWGjMGEk8d8voIa5UWL6N//372u4WR4ItUy1iY7IB K3kRxO9JKrpym459yLZc8huucndLw96jfJ4749q1vcoUW+qrtWZSLRto+YsIuviT 4ndrJW8nBYdZh1M7zIt92i4SM810Y91cWm2dWOeCJhujO6OGdc2B4bVf2yJgGndY BBYKoYeUUUymbAaKSDKGI8XFW1rONdhvqXLD3wBcxcjadztYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJMDxdyUaOZhzCZfYHQwBtJuYY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlmOThjNTUtMWRhOC0z OGM4LWE5YTEtYjQyNGRkZWZmMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWzr0nG7GExBL8MUoC/3wFPXD9b8BkAKjjpn8lyIoSoyhRKPbXkf/nD cdb/RTdscW3WlRD1QWsxi/RWMsXz7dulh+7RAv8TsVy4/xlLXvHHkp33O1Z+ezmD Ch0tjP62Bp3ed4WmnYf/GjLLvnlcKtRiJ1YJP5ufSeK5b8cUpdEH1n5G/90panmB Sew6KczJp1K1S4VEIRPtpgS3bkQIksWs3ZRM7fUtMWnnhInuFL/k0Lpc6BpAvA21 Uy0PO6rMgNZEasx1f/UlbgL8snT0Vx5VUdw4EsmLFIeyI9DyDpasShxES5qBf2th eGhGKI2C9ywA30nKhXLAeDi/QyECySU= -----END CERTIFICATE-----Generated at Mon Apr 28 12:43:28 2025 by rpki-client