$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d353c8ed-6445-34cf-b9a6-07c2df0625df.roa File: d353c8ed-6445-34cf-b9a6-07c2df0625df.roa (raw, json) Hash identifier: FUx8pL3UQKEMmMSUhHi0R651GrAfXzZtkQkxzcNf1Gk= Subject key identifier: 10:14:21:2A:BD:C6:3B:8D:70:89:35:70:21:40:74:DE:0A:CA:E9:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB39DC9FC4E04319765180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d353c8ed-6445-34cf-b9a6-07c2df0625df.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:39:dc:9f:c4:e0:43:19:76:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c6db51c0-951f-46f5-b2d9-803524ed787c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:62:ab:ee:24:ed:52:ca:e4:f7:72:d5:df:7e: 11:23:27:9c:9b:ec:a0:f3:a7:e6:be:74:60:d5:cc: c2:5e:cd:ee:6b:98:ce:36:82:d3:08:df:de:49:b0: 45:84:1d:7e:1b:2b:85:80:c7:55:df:8c:86:6f:0d: 15:5a:d3:89:25:a4:5e:6b:54:bf:a9:5e:e2:db:6e: 2e:8a:32:84:65:3a:ef:03:f7:cf:e3:c0:03:f3:7d: 69:d1:84:84:80:70:60:2e:2b:31:d6:ab:17:e2:ba: b3:b0:21:be:49:5d:58:ee:b9:f5:58:ec:66:83:e9: cb:c8:43:d7:1b:1f:b9:3d:39:83:bd:3e:1b:5e:69: dd:f9:3d:ca:84:88:f4:49:9a:2f:d5:ca:81:83:87: af:9e:ce:b7:bc:fd:1c:2c:4a:d9:5a:f0:d6:ae:6e: bb:f2:63:bd:21:42:f7:d0:7c:71:b8:3f:de:fb:c7: 15:b7:d6:79:3e:94:77:23:29:6f:fa:b0:91:50:f6: d1:09:1e:b7:7b:a5:85:ee:56:6a:83:63:ef:c0:95: 5d:b8:c7:ee:6d:59:2f:04:ae:f3:59:5d:1f:e7:c8: 40:27:0c:94:3e:f4:31:74:e8:f8:25:57:15:39:6d: 90:4d:bd:6b:74:ac:38:66:2a:23:a9:5e:41:54:5a: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:14:21:2A:BD:C6:3B:8D:70:89:35:70:21:40:74:DE:0A:CA:E9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d353c8ed-6445-34cf-b9a6-07c2df0625df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d3:83:6a:87:35:f9:d9:af:e7:f0:6c:2b:de:ff:76:25:81: 86:86:4f:98:db:4e:93:56:aa:6a:43:55:86:e1:cc:28:85:e1: 7f:a8:2a:4b:3c:09:b4:d1:20:1f:5d:7c:db:93:ff:67:fb:34: 02:65:fe:be:4e:80:0a:43:83:c6:eb:8d:de:5e:53:8d:1c:df: c5:1d:0a:35:80:72:81:4c:8b:f1:c1:36:8c:6a:3c:62:db:07: 94:7c:a1:1f:ed:b1:61:eb:9f:9a:cf:a4:24:4a:9f:53:d1:ff: e7:fa:1d:58:7d:91:7d:3e:25:eb:bd:4e:4e:2e:28:8d:df:9c: 41:71:6c:09:d1:9e:37:52:86:be:be:2a:32:6d:d2:b9:cb:a5: 88:78:f0:de:cd:84:d2:ed:1c:19:1b:c9:12:db:4b:04:65:a1: 54:25:fe:84:bc:36:dd:9f:3f:1e:65:35:3b:b6:e5:5f:8a:9f: 8e:6c:26:b7:8e:f1:36:a7:2d:ff:a5:33:b0:60:84:ef:1f:58: 9c:3b:a6:9b:38:f0:36:84:21:74:00:09:7b:82:69:d9:31:09: 53:e1:7b:3a:82:5b:e6:ea:7f:ca:8d:6f:ed:a7:68:fa:f2:19: ed:9e:be:a6:41:6d:a4:04:de:d3:b2:25:f2:4f:c1:17:c8:d5: 8d:38:74:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzncn8TgQxl2UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzZkYjUxYzAtOTUxZi00NmY1LWIyZDktODAzNTI0ZWQ3ODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmKr7iTtUsrk93LV334RIyecm+yg86fmvnRg 1czCXs3ua5jONoLTCN/eSbBFhB1+GyuFgMdV34yGbw0VWtOJJaRea1S/qV7i224u ijKEZTrvA/fP48AD831p0YSEgHBgLisx1qsX4rqzsCG+SV1Y7rn1WOxmg+nLyEPX Gx+5PTmDvT4bXmnd+T3KhIj0SZov1cqBg4evns63vP0cLErZWvDWrm678mO9IUL3 0HxxuD/e+8cVt9Z5PpR3Iylv+rCRUPbRCR63e6WF7lZqg2PvwJVduMfubVkvBK7z WV0f58hAJwyUPvQxdOj4JVcVOW2QTb1rdKw4ZiojqV5BVFppnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAUISq9xjuNcIk1cCFAdN4Kyuk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDM1M2M4ZWQtNjQ0NS0z NGNmLWI5YTYtMDdjMmRmMDYyNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXTg2qHNfnZr+fwbCve/3YlgYaGT5jbTpNWqmpDVYbhzCiF4X+oKks8 CbTRIB9dfNuT/2f7NAJl/r5OgApDg8brjd5eU40c38UdCjWAcoFMi/HBNoxqPGLb B5R8oR/tsWHrn5rPpCRKn1PR/+f6HVh9kX0+Jeu9Tk4uKI3fnEFxbAnRnjdShr6+ KjJt0rnLpYh48N7NhNLtHBkbyRLbSwRloVQl/oS8Nt2fPx5lNTu25V+Kn45sJreO 8TanLf+lM7BghO8fWJw7pps48DaEIXQACXuCadkxCVPhezqCW+bqf8qNb+2naPry Ge2evqZBbaQE3tOyJfJPwRfI1Y04dKg= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:28 2025 by rpki-client