$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0976537-df55-385e-a6a9-d44f83e0a602.roa File: d0976537-df55-385e-a6a9-d44f83e0a602.roa (raw, json) Hash identifier: NC3cehnJ/xJGw0lmXzScx2TcQl0tKOQTBIDZTzPEH4Q= Subject key identifier: 8B:73:DD:E5:22:36:51:52:CE:F3:7F:F2:92:27:91:C7:73:0F:92:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB39D13D125F5B00884200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0976537-df55-385e-a6a9-d44f83e0a602.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:39:d1:3d:12:5f:5b:00:88:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ad39e7a6-d66e-4a4d-920e-19aa419c7a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:fe:83:74:1b:60:ba:ae:bf:73:a3:25:04: 4f:cb:b7:06:eb:e3:d9:9f:fa:10:18:d2:11:b0:92: fc:84:06:f1:c4:f3:84:b5:20:5d:36:7e:56:d9:33: 31:dd:e5:94:95:dc:cf:7c:23:88:93:60:78:db:7a: bf:d3:80:39:11:7b:46:bb:ca:56:e6:17:d0:e6:94: 20:4b:a5:ea:bf:99:4a:6a:cd:fb:2e:35:51:1a:2a: 87:d3:24:be:d3:79:d4:a2:af:c0:98:64:3a:36:4d: f4:5b:30:ed:b0:0f:30:a8:96:67:38:8e:c2:8e:37: ee:d7:c4:f7:c1:fb:61:54:57:17:a0:6d:5e:35:e4: c7:31:e4:1c:7e:2a:66:b6:ff:ac:02:b3:5d:d9:48: 6f:23:d1:df:79:c6:a4:9b:63:95:8c:9e:ba:8b:80: 2b:1b:74:d4:4f:ea:d7:a0:f9:2e:19:b9:e4:89:c5: 95:65:20:e9:fc:77:3d:86:60:ec:07:f2:e4:e1:1c: fe:50:55:a2:54:88:3a:8b:35:28:94:fe:47:e7:26: af:60:3c:e6:38:a1:8f:9c:ea:05:66:23:36:58:d8: 04:00:53:16:ca:f0:11:70:2c:e7:30:dd:d9:e0:68: 91:61:9c:cd:a7:e8:8d:96:c9:d5:7d:31:0d:08:37: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:73:DD:E5:22:36:51:52:CE:F3:7F:F2:92:27:91:C7:73:0F:92:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0976537-df55-385e-a6a9-d44f83e0a602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b1:e4:7d:87:e2:07:e1:4f:7d:35:e6:25:5b:17:ec:5c:20: cc:c8:33:71:41:9f:93:75:4a:aa:3c:90:50:71:51:03:9d:34: a1:5b:18:e4:f6:dd:d8:a9:76:e0:91:46:d4:16:ec:e8:80:5a: 06:47:0f:73:a5:65:5c:c5:09:80:89:59:ec:96:30:f2:50:10: a9:a0:ce:a7:a9:26:fa:81:de:a0:92:cc:d9:66:24:5e:01:a1: 90:f9:27:d4:df:c5:6c:61:19:d8:c8:64:28:a0:2d:7b:3b:16: 82:02:90:0b:37:1e:7a:78:43:9e:08:82:c8:50:44:6e:90:e4: d2:87:ab:bf:49:c5:ba:da:49:a0:e7:94:31:b8:94:0a:37:56: dc:82:e5:63:26:37:46:f8:79:1e:83:9e:ab:a4:fe:7f:34:cc: 0c:5d:e2:71:71:00:c8:13:d6:d7:27:0a:63:61:09:18:35:b7: 2c:8e:74:72:75:7f:94:ac:0c:d8:77:da:22:ff:c6:0e:87:19: e0:8a:ba:10:eb:3e:0a:a1:43:9a:76:9a:2b:7f:bd:26:48:cc: 75:30:7c:c6:a9:2c:3d:6c:f6:1a:a5:b2:23:e5:9c:52:4d:4c: 52:34:8d:fd:2a:47:fd:86:9c:1d:3e:37:42:aa:ff:44:73:31: 8e:43:18:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuznRPRJfWwCIQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWQzOWU3YTYtZDY2ZS00YTRkLTkyMGUtMTlhYTQxOWM3YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywT+g3QbYLquv3OjJQRPy7cG6+PZn/oQGNIR sJL8hAbxxPOEtSBdNn5W2TMx3eWUldzPfCOIk2B423q/04A5EXtGu8pW5hfQ5pQg S6Xqv5lKas37LjVRGiqH0yS+03nUoq/AmGQ6Nk30WzDtsA8wqJZnOI7Cjjfu18T3 wfthVFcXoG1eNeTHMeQcfipmtv+sArNd2UhvI9Hfecakm2OVjJ66i4ArG3TUT+rX oPkuGbnkicWVZSDp/Hc9hmDsB/Lk4Rz+UFWiVIg6izUolP5H5yavYDzmOKGPnOoF ZiM2WNgEAFMWyvARcCznMN3Z4GiRYZzNp+iNlsnVfTENCDfb2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItz3eUiNlFSzvN/8pInkcdzD5LgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDA5NzY1MzctZGY1NS0z ODVlLWE2YTktZDQ0ZjgzZTBhNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAex5H2H4gfhT3015iVbF+xcIMzIM3FBn5N1Sqo8kFBxUQOdNKFbGOT2 3dipduCRRtQW7OiAWgZHD3OlZVzFCYCJWeyWMPJQEKmgzqepJvqB3qCSzNlmJF4B oZD5J9TfxWxhGdjIZCigLXs7FoICkAs3Hnp4Q54IgshQRG6Q5NKHq79JxbraSaDn lDG4lAo3VtyC5WMmN0b4eR6Dnquk/n80zAxd4nFxAMgT1tcnCmNhCRg1tyyOdHJ1 f5SsDNh32iL/xg6HGeCKuhDrPgqhQ5p2mit/vSZIzHUwfMapLD1s9hqlsiPlnFJN TFI0jf0qR/2GnB0+N0Kq/0RzMY5DGFY= -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:59 2025 by rpki-client