$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d021c669-5ac1-3528-ab3e-2d003203bb62.roa File: d021c669-5ac1-3528-ab3e-2d003203bb62.roa (raw, json) Hash identifier: 7Q4H8eVylUReZy3VgxOiHj9V2Z2OMAbQlo9LKwEnXF8= Subject key identifier: B3:72:DE:CD:63:D2:C9:FA:C8:C4:7F:D5:C7:2E:E6:41:4D:9D:7D:B2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3D7F6775E0C88185DB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d021c669-5ac1-3528-ab3e-2d003203bb62.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3d:7f:67:75:e0:c8:81:85:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=50a1e243-270b-4062-b12d-4decfa0527ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:91:7b:7d:eb:02:f2:07:51:21:b8:de:10: f5:cd:af:3e:38:df:eb:fa:df:0d:c2:09:67:33:8d: 19:e7:95:61:64:36:f4:b1:92:a4:c7:bd:69:34:f9: 13:24:50:80:3a:61:a3:5d:b5:59:9b:94:d7:ae:05: 00:fd:fb:5a:ff:9a:75:0c:d3:b7:54:62:48:76:18: 32:d5:3e:3d:61:71:e5:61:a9:4e:be:48:8c:bb:3f: c6:33:8d:1a:c5:5d:6d:41:26:c9:85:3c:17:d1:45: 70:67:8d:f1:57:cb:b8:d3:b3:df:77:0d:06:38:7c: d7:c2:56:50:a7:46:69:40:09:9b:a8:db:dc:b9:c0: 64:22:24:f5:59:52:d9:9b:c3:c6:92:c6:40:40:a5: 1d:ed:50:28:75:b0:70:4c:3d:0b:4d:9c:a2:54:66: 6c:fc:b9:16:31:bf:67:0f:a8:34:0b:e2:48:6e:4b: a7:fe:a8:63:16:a3:a2:13:72:77:ef:18:9c:e1:31: 18:0f:42:c7:23:35:86:84:87:04:ee:be:4a:45:0b: cf:01:dc:71:88:66:a8:34:cf:ad:39:49:aa:16:04: e5:c8:83:18:02:0f:ca:dc:6c:0d:4b:67:a1:72:04: 7e:26:fb:37:38:bf:9c:25:4c:83:d8:6c:38:b9:f2: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:72:DE:CD:63:D2:C9:FA:C8:C4:7F:D5:C7:2E:E6:41:4D:9D:7D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d021c669-5ac1-3528-ab3e-2d003203bb62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a2:56:a5:48:26:20:62:75:b4:8e:b1:43:4d:46:77:f1:29: 61:38:b5:86:1c:9d:45:ac:8d:24:cb:05:c7:fa:23:c5:69:0d: aa:35:8d:55:6c:bb:ca:cf:a5:1b:a9:a4:74:18:6d:76:ab:cf: 7b:a3:8e:08:1c:13:d1:32:8b:ec:27:a4:81:9c:ff:20:6b:63: ee:5f:3a:d4:9d:bd:24:e7:4a:bc:10:8e:34:d3:d7:81:2d:e0: 9d:cd:73:03:b8:4b:77:69:60:25:28:2c:a0:22:3b:2c:12:23: 9a:45:fe:98:cb:9b:42:46:0d:17:44:ed:f1:e3:51:bf:af:f0: 99:2b:5c:d3:c8:a9:32:4a:a7:28:c0:3e:c3:ee:5e:d1:65:b4: 83:14:13:8a:c6:81:3b:df:9e:fd:85:c5:6e:ac:02:5c:99:84: ad:10:06:58:1e:e2:61:07:0e:ac:4e:4e:3d:c5:83:c4:7b:37: 2e:69:2c:ce:d8:10:9e:61:0a:82:fd:b0:70:13:6e:28:80:35: 4e:b6:54:bf:1e:7c:7a:a5:97:e1:59:4c:2f:5d:74:27:78:df: 10:65:4a:d0:49:19:7b:30:a0:2d:26:17:8e:52:d4:f7:ff:7a: 7b:81:c3:ca:2e:cc:fe:ed:67:17:66:b0:48:35:b7:05:16:b8: 0a:14:36:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuz1/Z3XgyIGF2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTBhMWUyNDMtMjcwYi00MDYyLWIxMmQtNGRlY2ZhMDUyN2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueyRe33rAvIHUSG43hD1za8+ON/r+t8Nwgln M40Z55VhZDb0sZKkx71pNPkTJFCAOmGjXbVZm5TXrgUA/fta/5p1DNO3VGJIdhgy 1T49YXHlYalOvkiMuz/GM40axV1tQSbJhTwX0UVwZ43xV8u407Pfdw0GOHzXwlZQ p0ZpQAmbqNvcucBkIiT1WVLZm8PGksZAQKUd7VAodbBwTD0LTZyiVGZs/LkWMb9n D6g0C+JIbkun/qhjFqOiE3J37xic4TEYD0LHIzWGhIcE7r5KRQvPAdxxiGaoNM+t OUmqFgTlyIMYAg/K3GwNS2ehcgR+Jvs3OL+cJUyD2Gw4ufIoyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNy3s1j0sn6yMR/1ccu5kFNnX2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDAyMWM2NjktNWFjMS0z NTI4LWFiM2UtMmQwMDMyMDNiYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+iVqVIJiBidbSOsUNNRnfxKWE4tYYcnUWsjSTLBcf6I8VpDao1jVVs u8rPpRuppHQYbXarz3ujjggcE9Eyi+wnpIGc/yBrY+5fOtSdvSTnSrwQjjTT14Et 4J3NcwO4S3dpYCUoLKAiOywSI5pF/pjLm0JGDRdE7fHjUb+v8JkrXNPIqTJKpyjA PsPuXtFltIMUE4rGgTvfnv2FxW6sAlyZhK0QBlge4mEHDqxOTj3Fg8R7Ny5pLM7Y EJ5hCoL9sHATbiiANU62VL8efHqll+FZTC9ddCd43xBlStBJGXswoC0mF45S1Pf/ enuBw8ouzP7tZxdmsEg1twUWuAoUNrk= -----END CERTIFICATE-----Generated at Mon Apr 28 02:49:00 2025 by rpki-client