$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa File: d2cd914b-9844-3840-b55c-c3161da53a80.roa (raw, json) Hash identifier: vHb59cn4k2zZeTaPgItOQDIaZTSizCr7mo9zWsT+6mI= Subject key identifier: 40:71:99:67:4F:D8:A6:69:E5:D5:06:15:D5:FD:57:A5:98:07:75:41 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9A3A5D3AD0F463B8FB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9a:3a:5d:3a:d0:f4:63:b8:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d3f86fe5-8657-4987-9796-270a5edd9d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5d:17:ab:7f:88:44:96:eb:12:25:73:1b:c1: e0:e2:d3:8b:05:55:1f:fb:4c:9e:ba:d0:75:70:10: 2c:4f:7f:55:c6:ef:93:2c:6c:d1:53:95:f5:f1:b5: c7:b5:34:dc:12:d8:93:fe:47:a3:7c:c8:92:e9:c9: 00:15:db:ec:14:a6:5f:9c:14:97:88:c4:de:3d:9d: 9a:56:e6:35:d9:81:02:4d:26:26:c1:c0:69:de:6e: 14:e1:f3:4b:db:e0:53:5e:ca:02:77:23:72:c7:96: 84:6d:2f:08:f2:80:21:6b:4a:2a:83:cb:45:c3:bd: a5:79:1c:5c:12:df:50:05:64:57:ba:c7:ea:da:9c: 7b:4e:ab:b8:05:0c:4d:47:b7:41:b6:c2:8b:d4:c4: d4:e1:c2:ef:97:aa:09:d7:c4:82:ba:d7:18:d0:5b: 56:43:2b:d3:4a:fc:c2:a3:89:d8:97:91:ba:73:a9: 38:f7:eb:bd:0d:23:1b:d7:09:54:9d:12:7d:b1:3a: ef:c7:93:f1:67:69:c6:44:d8:4e:93:4a:72:79:78: 59:29:77:67:b1:53:dc:f6:29:cf:63:75:eb:f7:70: 2f:58:8a:73:e8:b1:00:c7:fc:38:97:ef:66:57:28: 21:9f:0e:d0:54:44:d9:85:88:a7:d6:6c:3c:34:84: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:71:99:67:4F:D8:A6:69:E5:D5:06:15:D5:FD:57:A5:98:07:75:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2cd914b-9844-3840-b55c-c3161da53a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:8d:58:68:14:d1:45:52:a4:34:c1:e9:ac:7f:34:8f:29:52: 64:19:58:6e:c2:37:79:59:b2:b1:f7:d5:c1:92:3f:0c:57:33: 03:5a:1c:3e:20:c1:07:03:1f:12:66:2f:8a:6b:a2:3d:e3:7a: cc:31:dd:e0:df:a8:98:8e:00:3c:20:50:cc:fd:84:b0:a2:40: 63:1b:92:35:f3:a7:19:1c:21:a7:b4:de:d4:47:3e:ad:35:3a: b0:be:8d:99:41:ce:7d:e0:78:08:30:25:1d:90:2b:4a:2a:7f: ae:73:0a:41:71:0b:ea:c1:ae:7e:23:99:ae:68:af:d4:0d:70: ea:73:0a:73:6f:af:02:cb:ee:49:71:40:37:30:b6:d4:e9:cc: 6d:30:3c:75:87:78:1a:2c:f4:68:65:b5:18:7b:2d:23:c0:ae: 17:85:73:04:a2:d5:fe:70:e0:84:dd:57:7d:48:74:e3:84:0d: bc:94:05:5f:14:d1:d6:a0:b1:fe:6d:79:7d:e9:e8:1e:dd:46: 3f:06:5e:b7:bc:46:7a:b1:62:0d:05:cf:0c:15:f3:1f:32:a6: a9:61:b5:f6:75:19:5c:c9:3f:18:99:c2:a2:b1:41:bd:82:40: ef:ff:9f:ef:57:98:4f:91:7a:99:92:7c:fb:38:69:9f:78:7d: 37:a4:b9:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupo6XTrQ9GO4+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDNmODZmZTUtODY1Ny00OTg3LTk3OTYtMjcwYTVlZGQ5ZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj10Xq3+IRJbrEiVzG8Hg4tOLBVUf+0yeutB1 cBAsT39Vxu+TLGzRU5X18bXHtTTcEtiT/kejfMiS6ckAFdvsFKZfnBSXiMTePZ2a VuY12YECTSYmwcBp3m4U4fNL2+BTXsoCdyNyx5aEbS8I8oAha0oqg8tFw72leRxc Et9QBWRXusfq2px7Tqu4BQxNR7dBtsKL1MTU4cLvl6oJ18SCutcY0FtWQyvTSvzC o4nYl5G6c6k49+u9DSMb1wlUnRJ9sTrvx5PxZ2nGRNhOk0pyeXhZKXdnsVPc9inP Y3Xr93AvWIpz6LEAx/w4l+9mVyghnw7QVETZhYin1mw8NIQMsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBxmWdP2KZp5dUGFdX9V6WYB3VBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDJjZDkxNGItOTg0NC0z ODQwLWI1NWMtYzMxNjFkYTUzYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKNWGgU0UVSpDTB6ax/NI8pUmQZWG7CN3lZsrH31cGSPwxXMwNaHD4g wQcDHxJmL4proj3jeswx3eDfqJiOADwgUMz9hLCiQGMbkjXzpxkcIae03tRHPq01 OrC+jZlBzn3geAgwJR2QK0oqf65zCkFxC+rBrn4jma5or9QNcOpzCnNvrwLL7klx QDcwttTpzG0wPHWHeBos9GhltRh7LSPArheFcwSi1f5w4ITdV31IdOOEDbyUBV8U 0dagsf5teX3p6B7dRj8GXre8RnqxYg0FzwwV8x8ypqlhtfZ1GVzJPxiZwqKxQb2C QO//n+9XmE+RepmSfPs4aZ94fTekufg= -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:35 2025 by rpki-client