$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa File: d12c5bca-e1ca-3d00-afc0-e005b203b536.roa (raw, json) Hash identifier: fH80I8W2Ox0IynimAtB1URGRHrHAqIFhD7Z6XQTlhog= Subject key identifier: 0F:B9:58:C2:AA:25:90:98:47:28:4C:AD:F6:64:93:63:5D:BA:A4:D2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3586ED844717EE1CDCF0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:35:86:ed:84:47:17:ee:1c:dc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=dfc81840-c7ac-4578-aa1c-68f7621af3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4c:0c:23:3b:df:4e:63:4d:77:b3:03:cf:d3: d8:76:0a:ef:5e:30:5c:be:51:29:f0:b3:b7:93:7a: be:00:e7:f4:85:23:f0:ea:da:2a:14:48:12:da:50: 6e:76:9a:8f:8c:5e:0a:b6:f3:b1:40:06:d0:7d:e3: 83:b5:20:7d:2c:09:e6:2f:1d:92:64:b8:3e:68:ff: 55:62:24:4a:1f:8d:ad:e8:a9:55:0f:4c:5d:4b:78: 95:da:33:b9:88:e3:8c:70:90:dc:a1:a4:71:65:30: b6:19:76:a4:92:1d:8c:d4:75:39:b3:1b:d5:3c:d0: 11:f5:64:85:ad:4a:af:6a:e8:cd:ca:2f:9b:da:24: 79:80:ed:40:7a:68:e4:fd:a9:b1:fb:45:28:13:fd: f4:d1:57:3b:11:a2:a2:b1:a2:a7:26:4b:46:04:94: 1a:3c:4f:13:58:ca:02:94:39:e4:d1:60:b0:60:38: 96:58:92:90:01:db:c1:65:cd:13:d2:bc:b5:97:88: 95:99:46:9b:ed:63:5d:17:99:90:cc:54:24:27:d1: 1b:94:94:5c:ec:32:5f:44:b5:e0:f2:d1:87:ba:e1: 9e:c4:88:e5:dd:fc:2a:33:d5:ad:84:dc:3a:84:46: 24:64:75:ba:15:93:95:58:58:88:b1:5a:87:39:94: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B9:58:C2:AA:25:90:98:47:28:4C:AD:F6:64:93:63:5D:BA:A4:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:47:54:bd:8f:0c:51:18:2a:95:09:9b:69:8c:1c:bd:e0:86: 3f:16:58:24:b8:98:96:70:07:3a:23:1c:f5:21:52:fb:8c:82: 30:68:7c:09:9a:93:7f:e5:dc:9c:54:7f:49:73:f5:f2:c1:16: 3f:4f:8f:9b:e6:38:67:75:59:86:b2:eb:ab:74:48:f1:31:bc: 19:1e:5a:76:7c:b2:96:ad:af:01:e4:e6:63:ef:43:a0:3c:1c: 9c:e3:6d:7e:49:40:90:98:7e:48:63:13:b9:34:30:b6:8f:b6: ac:99:0b:6a:18:d2:c1:86:a1:d0:90:b0:59:e1:ff:d9:b2:79: d4:00:1a:bc:4d:a8:8b:70:ce:df:77:1c:a3:af:b6:39:9c:d8: d5:95:c7:32:e5:7f:a4:5f:1e:60:a0:ea:e6:b4:01:58:89:49: 08:82:ea:ac:34:a7:f3:90:a9:03:e9:d6:b5:7d:ec:65:ce:82: 8d:9a:5b:18:64:ab:ff:9d:8f:45:7a:ea:51:85:ee:d1:64:5d: bd:4d:17:f9:01:b6:56:57:ec:fa:a5:a3:d2:87:19:4a:df:d4: a5:d4:69:04:f3:9a:1f:c0:72:cc:b8:34:1b:70:df:a6:87:da: 0a:ca:39:39:e4:27:71:da:9b:be:6a:0b:40:32:02:d8:27:c2: 2b:e5:dd:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzWG7YRHF+4c3PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGZjODE4NDAtYzdhYy00NTc4LWFhMWMtNjhmNzYyMWFmM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEwMIzvfTmNNd7MDz9PYdgrvXjBcvlEp8LO3 k3q+AOf0hSPw6toqFEgS2lBudpqPjF4KtvOxQAbQfeODtSB9LAnmLx2SZLg+aP9V YiRKH42t6KlVD0xdS3iV2jO5iOOMcJDcoaRxZTC2GXakkh2M1HU5sxvVPNAR9WSF rUqvaujNyi+b2iR5gO1Aemjk/amx+0UoE/300Vc7EaKisaKnJktGBJQaPE8TWMoC lDnk0WCwYDiWWJKQAdvBZc0T0ry1l4iVmUab7WNdF5mQzFQkJ9EblJRc7DJfRLXg 8tGHuuGexIjl3fwqM9WthNw6hEYkZHW6FZOVWFiIsVqHOZTQuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+5WMKqJZCYRyhMrfZkk2NduqTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEyYzViY2EtZTFjYS0z ZDAwLWFmYzAtZTAwNWIyMDNiNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFHVL2PDFEYKpUJm2mMHL3ghj8WWCS4mJZwBzojHPUhUvuMgjBofAma k3/l3JxUf0lz9fLBFj9Pj5vmOGd1WYay66t0SPExvBkeWnZ8spatrwHk5mPvQ6A8 HJzjbX5JQJCYfkhjE7k0MLaPtqyZC2oY0sGGodCQsFnh/9myedQAGrxNqItwzt93 HKOvtjmc2NWVxzLlf6RfHmCg6ua0AViJSQiC6qw0p/OQqQPp1rV97GXOgo2aWxhk q/+dj0V66lGF7tFkXb1NF/kBtlZX7Pqlo9KHGUrf1KXUaQTzmh/Acsy4NBtw36aH 2grKOTnkJ3Ham75qC0AyAtgnwivl3Rk= -----END CERTIFICATE-----Generated at Sun Apr 27 00:20:45 2025 by rpki-client