$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d062e90f-6a33-3713-a120-6582f98f58e6.roa File: d062e90f-6a33-3713-a120-6582f98f58e6.roa (raw, json) Hash identifier: 5ifJ7eDDZ97u/HkxeahCU9Yz7rUj0lT4fab5opcXRBU= Subject key identifier: 66:D6:A4:63:DD:4B:A3:80:BF:69:BC:0D:E1:A9:A8:EF:CA:CA:DB:9B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA976361D7C4C07BD17940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d062e90f-6a33-3713-a120-6582f98f58e6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:97:63:61:d7:c4:c0:7b:d1:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8ba26157-b106-41bc-8d6e-4aebb03a324f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f9:7d:3c:d4:09:18:f2:ba:33:36:c9:2d:c1: 5e:ea:3f:df:38:69:e4:44:a6:8e:d1:b1:3c:c4:b6: 71:00:75:72:52:9b:a4:f4:39:28:3a:25:38:38:15: b1:57:f9:a8:89:27:00:af:43:2c:e5:d8:b4:9f:fa: 5f:94:14:65:64:d9:e0:f3:f9:3b:23:78:46:e1:60: 8d:ab:32:d6:25:ed:72:b1:52:80:dc:4e:0e:d8:ed: 3d:78:d2:46:f5:fc:cd:a8:ed:38:96:0c:6e:5e:e5: 9d:5d:ec:e5:20:c8:61:9c:5a:6b:5f:cb:bd:33:f0: c6:cf:88:95:d1:79:ef:64:6c:44:0a:06:b5:8c:1e: ba:06:18:c7:91:dc:1e:2f:08:98:e1:4c:fe:70:6c: f9:e9:2c:d2:9d:b4:5e:34:1e:65:4e:08:26:b4:24: 47:3d:ec:55:6a:95:e0:8a:f2:59:93:45:7a:6c:35: b0:c3:c9:51:d1:a8:b0:c1:72:9e:b7:4d:ae:2d:29: 65:b5:c2:25:3c:0f:fe:44:4f:72:6d:15:26:ca:91: 74:f1:b9:ea:06:69:30:9a:f8:dd:f0:2b:67:f4:78: ae:c8:1f:da:b9:a0:ef:1d:28:d2:79:15:b7:cc:c5: 6a:59:46:f5:c7:6e:a1:2c:6a:73:bc:d5:8c:d3:0f: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D6:A4:63:DD:4B:A3:80:BF:69:BC:0D:E1:A9:A8:EF:CA:CA:DB:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d062e90f-6a33-3713-a120-6582f98f58e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:90:0f:c6:f4:5a:4f:20:37:8d:48:7b:1d:92:a7:d6:79:09: cb:b1:fa:b3:f8:01:5a:fa:3d:6a:fc:e4:cd:86:0b:fb:b5:42: f1:14:34:2c:14:84:eb:3b:31:53:5e:e6:be:e8:9f:f3:b3:7b: dd:1c:9a:f8:dd:0e:63:12:8f:9e:22:f3:5d:0d:d6:5c:1f:87: 74:c3:8e:95:30:f7:2a:02:91:63:5f:34:c7:4d:95:e7:83:a9: 31:fa:77:17:19:14:67:ca:f2:40:d6:ff:14:88:84:d5:2a:d3: 15:e0:e2:1a:f7:54:d6:a7:4c:6a:96:18:95:0c:0d:74:16:42: e5:2e:6d:f0:27:f4:87:0d:db:93:0a:0d:48:46:e0:2e:27:fc: 87:b9:b0:46:dc:40:e0:ef:5b:08:c1:7d:b7:31:e1:12:48:6c: e7:d8:c5:20:16:ac:0c:eb:6b:bc:7f:84:7e:a6:6c:e4:51:1d: b7:33:2f:90:dd:42:02:7a:e8:3a:8a:58:1c:a5:2b:ad:90:11: 58:52:d0:68:11:28:3a:ea:58:c6:1e:eb:14:f8:98:e2:37:68: 3c:97:86:ff:39:ea:e9:87:a9:9b:e0:06:fe:90:db:b3:8a:f7: e6:5e:00:a4:d3:84:3a:69:c6:b3:55:d4:6b:ee:e4:c7:00:eb: 7e:ad:0f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupdjYdfEwHvReUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGJhMjYxNTctYjEwNi00MWJjLThkNmUtNGFlYmIwM2EzMjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/l9PNQJGPK6MzbJLcFe6j/fOGnkRKaO0bE8 xLZxAHVyUpuk9DkoOiU4OBWxV/moiScAr0Ms5di0n/pflBRlZNng8/k7I3hG4WCN qzLWJe1ysVKA3E4O2O09eNJG9fzNqO04lgxuXuWdXezlIMhhnFprX8u9M/DGz4iV 0XnvZGxECga1jB66BhjHkdweLwiY4Uz+cGz56SzSnbReNB5lTggmtCRHPexVapXg ivJZk0V6bDWww8lR0aiwwXKet02uLSlltcIlPA/+RE9ybRUmypF08bnqBmkwmvjd 8Ctn9HiuyB/auaDvHSjSeRW3zMVqWUb1x26hLGpzvNWM0w/yRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbWpGPdS6OAv2m8DeGpqO/KytubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDA2MmU5MGYtNmEzMy0z NzEzLWExMjAtNjU4MmY5OGY1OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCQD8b0Wk8gN41Iex2Sp9Z5Ccux+rP4AVr6PWr85M2GC/u1QvEUNCwU hOs7MVNe5r7on/Oze90cmvjdDmMSj54i810N1lwfh3TDjpUw9yoCkWNfNMdNleeD qTH6dxcZFGfK8kDW/xSIhNUq0xXg4hr3VNanTGqWGJUMDXQWQuUubfAn9IcN25MK DUhG4C4n/Ie5sEbcQODvWwjBfbcx4RJIbOfYxSAWrAzra7x/hH6mbORRHbczL5Dd QgJ66DqKWBylK62QEVhS0GgRKDrqWMYe6xT4mOI3aDyXhv856umHqZvgBv6Q27OK 9+ZeAKTThDppxrNV1Gvu5McA636tD/s= -----END CERTIFICATE-----Generated at Mon Apr 28 20:48:37 2025 by rpki-client