$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf38adb-0101-3d54-88e9-679d1eb551c9.roa File: dcf38adb-0101-3d54-88e9-679d1eb551c9.roa (raw, json) Hash identifier: jORYTenGvmPj7AsKyqEbMSoxP2i7lL3X8CH7xrzvEe0= Subject key identifier: 07:17:53:8E:64:8E:20:1F:FF:71:D3:23:B1:A7:38:B7:E1:C8:71:F3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA95B6932063A5C585BC80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf38adb-0101-3d54-88e9-679d1eb551c9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:95:b6:93:20:63:a5:c5:85:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=24f0f595-aac4-40de-93dd-29c1485a4dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:b9:b1:a1:0f:5d:19:ab:2c:5a:3e:1c:81: c5:53:58:01:1a:d1:33:89:6d:a1:e6:a3:42:7f:25: f1:5e:bd:92:48:9d:a2:11:62:f1:cd:3e:d1:79:62: e3:5d:c4:ef:f2:73:6c:48:73:c7:1b:96:ca:dd:59: e8:c1:a3:56:e8:4b:c2:1d:09:50:a4:04:b5:b4:2e: 31:57:0f:5b:3c:87:d5:36:1a:1e:57:9c:2c:ca:84: 1e:47:2b:2c:a6:3c:64:70:81:2a:92:a3:7e:13:1c: a1:a8:6e:d0:9a:e6:8c:34:7b:82:6a:71:0d:b3:31: f8:9b:89:48:76:3f:4b:45:76:4d:5c:df:77:8e:f9: fb:bb:1b:58:90:2d:4f:b0:0f:21:3d:ed:f9:c2:d8: 67:bb:2d:b0:0d:b6:d6:98:05:99:ad:60:a9:76:25: 9a:b8:b8:60:79:38:bb:73:d6:b6:6f:42:0e:de:2c: 5c:56:8e:1f:d6:1c:5d:a3:14:9c:f7:00:1e:da:90: c5:d6:30:91:ef:7b:f3:60:79:10:97:0e:b6:1d:9f: d5:56:34:56:55:0b:9e:8c:f2:e4:f8:ce:2e:72:3a: ed:e0:61:40:8c:38:de:91:06:2f:b7:45:d1:9f:e0: 86:00:94:d6:36:5f:e4:5e:99:ac:a9:34:90:d9:c1: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:17:53:8E:64:8E:20:1F:FF:71:D3:23:B1:A7:38:B7:E1:C8:71:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf38adb-0101-3d54-88e9-679d1eb551c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4b:97:c1:dd:a8:2d:20:aa:fa:c2:0d:f5:88:d6:87:81:46: b9:ed:a0:42:df:44:9e:76:58:ec:e8:3a:cf:d0:8e:43:0b:68: eb:16:e0:ab:36:e6:b0:4c:97:27:ba:c4:81:2a:46:02:62:f5: 44:ce:1f:7c:dc:d5:fb:ce:eb:85:a3:fa:07:49:2a:e9:84:b2: 23:77:8d:e3:5d:6c:a3:1e:19:d9:71:b9:9c:60:0f:00:a6:00: 62:d5:b4:34:f5:a9:7f:b0:da:d7:b0:d7:df:53:5a:8d:fb:99: 34:81:07:59:09:27:dd:81:e5:84:c0:57:1f:f7:e0:30:70:4c: 4d:fb:1e:a9:55:d0:04:f0:c3:f9:f3:47:e1:23:ec:4a:11:c1: c6:63:3a:09:93:60:83:47:e7:63:d0:55:2b:7f:72:43:12:be: e5:05:82:98:fd:f1:0f:a6:f8:bb:ae:c1:ec:c4:1e:96:1f:70: 74:69:9c:e6:f1:1f:10:d4:6f:66:9c:c7:2a:5a:ef:88:09:92: d9:ac:6d:ea:b8:94:e2:33:48:0b:1b:3b:7f:a3:cc:20:d1:ae: 7f:5a:5a:c0:11:c7:61:f0:b9:7c:73:08:7d:d2:3e:8f:0b:c3: 8e:06:09:65:9f:f6:d7:81:44:a3:22:5a:39:e5:48:01:57:e0: 6c:4a:a5:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupW2kyBjpcWFvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjRmMGY1OTUtYWFjNC00MGRlLTkzZGQtMjljMTQ4NWE0ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFi5saEPXRmrLFo+HIHFU1gBGtEziW2h5qNC fyXxXr2SSJ2iEWLxzT7ReWLjXcTv8nNsSHPHG5bK3VnowaNW6EvCHQlQpAS1tC4x Vw9bPIfVNhoeV5wsyoQeRysspjxkcIEqkqN+ExyhqG7QmuaMNHuCanENszH4m4lI dj9LRXZNXN93jvn7uxtYkC1PsA8hPe35wthnuy2wDbbWmAWZrWCpdiWauLhgeTi7 c9a2b0IO3ixcVo4f1hxdoxSc9wAe2pDF1jCR73vzYHkQlw62HZ/VVjRWVQuejPLk +M4ucjrt4GFAjDjekQYvt0XRn+CGAJTWNl/kXpmsqTSQ2cHDawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcXU45kjiAf/3HTI7GnOLfhyHHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGNmMzhhZGItMDEwMS0z ZDU0LTg4ZTktNjc5ZDFlYjU1MWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNLl8HdqC0gqvrCDfWI1oeBRrntoELfRJ52WOzoOs/QjkMLaOsW4Ks2 5rBMlye6xIEqRgJi9UTOH3zc1fvO64Wj+gdJKumEsiN3jeNdbKMeGdlxuZxgDwCm AGLVtDT1qX+w2tew199TWo37mTSBB1kJJ92B5YTAVx/34DBwTE37HqlV0ATww/nz R+Ej7EoRwcZjOgmTYINH52PQVSt/ckMSvuUFgpj98Q+m+LuuwezEHpYfcHRpnObx HxDUb2acxypa74gJktmsbeq4lOIzSAsbO3+jzCDRrn9aWsARx2HwuXxzCH3SPo8L w44GCWWf9teBRKMiWjnlSAFX4GxKpfU= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:43 2025 by rpki-client