$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43e28de-6034-346b-a18a-a19332bd56e3.roa File: d43e28de-6034-346b-a18a-a19332bd56e3.roa (raw, json) Hash identifier: Ebks60ZQATkLurTBX/QBjyy6li++84DN3JRzVVp5VRo= Subject key identifier: 73:95:BC:26:B5:6B:0B:92:A3:D0:00:73:59:5C:21:60:87:28:71:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3313C428829B5E128780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43e28de-6034-346b-a18a-a19332bd56e3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:33:13:c4:28:82:9b:5e:12:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=18e96c53-8939-44c7-ab83-c61a9737c095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a5:04:bc:bf:09:03:29:30:0a:33:11:87:e4: cb:ae:9f:e9:85:18:da:0b:cf:0a:27:cc:82:39:ba: 20:e5:45:a3:54:7a:99:af:eb:11:7d:f5:c9:d0:c8: d8:6b:e2:83:39:70:3d:24:50:f3:81:b9:13:71:b0: 2d:dc:83:5c:b2:e9:12:45:3a:d4:f2:0b:3f:76:a7: 82:8b:19:39:ce:15:0d:25:bf:fa:ce:98:18:bf:d4: 64:63:53:e1:8e:88:45:c6:a3:86:06:3f:f9:aa:35: 1b:91:15:a0:51:1a:ec:e0:d7:f1:0f:1d:a4:7f:b6: ed:a3:42:95:69:bd:d9:0f:d4:90:5e:73:25:d4:1c: 29:2d:0a:e1:7d:f8:4f:5f:b4:55:e9:e8:09:7e:39: 36:04:7d:9d:1a:6b:31:9c:9c:3e:3b:9b:9f:0a:1b: 67:f6:88:43:86:cb:df:99:e8:f0:83:58:35:f7:23: b3:bc:e2:fe:ed:b7:ca:9c:42:7b:bb:19:09:bc:cd: 01:f2:da:88:8b:64:a8:89:1a:52:8d:57:98:ec:86: 69:5f:0b:52:6f:09:47:23:f4:39:f6:ad:4c:c0:cf: c2:bb:b7:60:08:8b:97:fd:67:87:c7:40:1a:ce:fd: 07:96:8c:a8:c8:ce:dc:78:10:c4:f2:4d:49:f2:58: 5c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:95:BC:26:B5:6B:0B:92:A3:D0:00:73:59:5C:21:60:87:28:71:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d43e28de-6034-346b-a18a-a19332bd56e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:60:e2:d6:c3:58:cb:c4:9c:bc:90:22:34:00:ff:f4:02:a6: 25:0d:06:ed:73:47:98:04:b2:af:6d:16:07:1e:9f:e4:fd:28: 86:02:c3:b4:97:4e:9d:5b:12:cc:e0:3e:a5:0f:ac:05:a0:12: 4f:6d:c0:46:80:9e:13:6e:a9:db:19:d4:35:80:fb:7c:a0:b4: db:e5:56:d1:80:b6:60:d1:7a:3b:d0:e5:4f:64:ad:d2:7b:53: 6a:a0:08:83:b1:64:b0:1e:3c:47:fa:88:7d:18:03:5f:0d:bb: 7d:e5:f3:48:88:52:20:28:9c:ae:22:06:8d:d2:9b:84:88:49: c5:3c:5a:a2:80:6e:ac:f7:7d:b9:aa:09:a3:4c:a3:4a:97:ea: 74:30:9f:30:4d:df:78:ff:1d:f6:4d:2a:74:9c:e6:66:c8:79: a9:af:b6:57:b4:1d:8a:9a:92:de:04:31:55:89:06:6d:eb:e4: 40:a2:33:4e:9d:42:46:4d:75:b7:da:24:c9:2c:5e:8c:ec:bd: e9:54:62:30:a9:4d:ac:d3:5e:ef:0d:9e:9c:00:4d:ba:20:8f: 39:cf:58:61:21:bf:fa:97:c9:3b:6d:ea:66:29:9c:81:71:8f: a3:31:be:87:09:4d:74:f1:f5:70:bc:1d:2f:c2:6a:4c:d9:f0: b8:ff:97:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzMTxCiCm14Sh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MThlOTZjNTMtODkzOS00NGM3LWFiODMtYzYxYTk3MzdjMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qUEvL8JAykwCjMRh+TLrp/phRjaC88KJ8yC Obog5UWjVHqZr+sRffXJ0MjYa+KDOXA9JFDzgbkTcbAt3INcsukSRTrU8gs/dqeC ixk5zhUNJb/6zpgYv9RkY1PhjohFxqOGBj/5qjUbkRWgURrs4NfxDx2kf7bto0KV ab3ZD9SQXnMl1BwpLQrhffhPX7RV6egJfjk2BH2dGmsxnJw+O5ufChtn9ohDhsvf mejwg1g19yOzvOL+7bfKnEJ7uxkJvM0B8tqIi2SoiRpSjVeY7IZpXwtSbwlHI/Q5 9q1MwM/Cu7dgCIuX/WeHx0Aazv0HloyoyM7ceBDE8k1J8lhc7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOVvCa1awuSo9AAc1lcIWCHKHEmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDQzZTI4ZGUtNjAzNC0z NDZiLWExOGEtYTE5MzMyYmQ1NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1g4tbDWMvEnLyQIjQA//QCpiUNBu1zR5gEsq9tFgcen+T9KIYCw7SX Tp1bEszgPqUPrAWgEk9twEaAnhNuqdsZ1DWA+3ygtNvlVtGAtmDRejvQ5U9krdJ7 U2qgCIOxZLAePEf6iH0YA18Nu33l80iIUiAonK4iBo3Sm4SIScU8WqKAbqz3fbmq CaNMo0qX6nQwnzBN33j/HfZNKnSc5mbIeamvtle0HYqakt4EMVWJBm3r5ECiM06d QkZNdbfaJMksXozsvelUYjCpTazTXu8NnpwATbogjznPWGEhv/qXyTtt6mYpnIFx j6MxvocJTXTx9XC8HS/CakzZ8Lj/l8k= -----END CERTIFICATE-----Generated at Sun Apr 27 01:01:47 2025 by rpki-client