$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa File: df9b0389-0511-3f33-9eab-3d06768fd88e.roa (raw, json) Hash identifier: Ft02qT6RU8fcymMEI/RNpk6mciEkYZCoQTp2DQbvLM4= Subject key identifier: 8D:6C:EB:C1:2F:F6:3D:73:C6:C9:B3:C4:E2:C0:DB:BA:96:C5:A7:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA94A4D8B0DEB6D2CF1180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:94:a4:d8:b0:de:b6:d2:cf:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5c455601-144a-4c4e-9e09-98857c09ca5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:0c:3a:fc:ab:d9:d8:18:b1:26:fc:76:92: 66:ca:36:be:3c:d2:3b:bf:ea:be:22:22:dd:64:a4: 79:8b:76:12:fb:14:fc:20:6b:f3:fd:a3:fc:1b:3e: 2b:56:1e:f4:df:41:1f:ce:b5:6b:d5:95:91:ee:25: f7:7d:5f:b0:aa:68:ad:c7:47:5f:3e:cd:08:f9:7e: 9c:bd:a2:28:1f:e4:d5:c9:83:ee:42:fc:f5:b1:5e: 88:8b:db:32:57:ee:b2:b8:89:11:13:1e:32:e6:a6: 55:c1:c1:4e:e4:54:12:bf:80:a2:83:dd:ce:1f:9d: da:ec:48:22:a6:56:1d:1e:de:74:d2:bf:2a:59:e1: fe:25:96:12:02:d9:f8:90:ab:7b:15:b3:80:21:5e: c3:c9:e7:c7:b9:43:7b:98:41:c1:7b:11:2f:61:dc: a5:c3:2e:77:89:ce:73:30:eb:a3:6d:ca:29:09:38: 60:4f:1e:6f:57:cf:09:c9:55:07:d6:d6:2a:89:9a: 64:4a:e1:7b:6b:8f:68:13:a8:87:c8:40:31:07:38: f9:ee:73:2d:9a:e1:1a:8d:fb:21:28:5a:47:d9:5b: 82:49:37:e8:aa:ae:5a:e1:c7:2c:d5:44:78:a5:78: 0a:17:c3:a8:ef:3d:08:47:22:88:16:39:9d:90:29: 78:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6C:EB:C1:2F:F6:3D:73:C6:C9:B3:C4:E2:C0:DB:BA:96:C5:A7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:17:a7:9a:fc:d1:ec:50:ed:59:75:f1:67:0d:9d:78:2d:c1: f2:ed:40:5e:68:14:74:c5:98:b9:98:0f:20:c1:37:61:d2:62: 40:c4:60:97:3a:17:13:7c:19:85:3b:ea:1c:5e:d3:f6:b6:ee: 82:cc:99:11:14:65:e1:65:6a:25:ee:99:b2:f6:85:2d:b7:3a: dd:31:dd:ed:ab:7a:5d:36:25:68:d1:f2:13:ae:4a:83:f2:7f: 4e:71:8b:3e:ac:76:58:dd:a1:bb:09:b7:30:cd:4b:95:76:73: b1:8a:cd:55:ba:0f:34:88:3d:b8:30:21:0b:f9:bd:d2:d3:a9: f4:a2:84:16:57:22:ee:8d:ff:03:77:5a:32:a3:21:26:a1:61: d2:95:80:81:98:b8:69:67:7e:18:8a:68:b7:76:d8:f3:3b:1a: 70:ea:0f:d5:68:02:ca:b7:70:d8:51:70:2d:b8:c7:9a:d8:28: 84:ed:43:f5:f6:c3:52:dd:09:5b:73:db:10:5d:27:86:5e:3f: 5d:58:1b:d2:d8:81:75:3e:77:31:ad:28:d6:b4:4a:60:6b:1c: 5d:2b:7c:30:20:e5:1c:a7:cf:7f:a0:9f:b1:c6:f9:fb:a8:5f: 3d:4c:be:55:4b:c0:d0:77:f1:da:c7:0a:0c:a4:67:82:ec:7f: 1e:4e:16:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupSk2LDettLPEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWM0NTU2MDEtMTQ0YS00YzRlLTllMDktOTg4NTdjMDljYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT0MOvyr2dgYsSb8dpJmyja+PNI7v+q+IiLd ZKR5i3YS+xT8IGvz/aP8Gz4rVh7030EfzrVr1ZWR7iX3fV+wqmitx0dfPs0I+X6c vaIoH+TVyYPuQvz1sV6Ii9syV+6yuIkREx4y5qZVwcFO5FQSv4Cig93OH53a7Egi plYdHt500r8qWeH+JZYSAtn4kKt7FbOAIV7DyefHuUN7mEHBexEvYdylwy53ic5z MOujbcopCThgTx5vV88JyVUH1tYqiZpkSuF7a49oE6iHyEAxBzj57nMtmuEajfsh KFpH2VuCSTfoqq5a4ccs1UR4pXgKF8Oo7z0IRyKIFjmdkCl4UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1s68Ev9j1zxsmzxOLA27qWxadKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGY5YjAzODktMDUxMS0z ZjMzLTllYWItM2QwNjc2OGZkODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQXp5r80exQ7Vl18WcNnXgtwfLtQF5oFHTFmLmYDyDBN2HSYkDEYJc6 FxN8GYU76hxe0/a27oLMmREUZeFlaiXumbL2hS23Ot0x3e2rel02JWjR8hOuSoPy f05xiz6sdljdobsJtzDNS5V2c7GKzVW6DzSIPbgwIQv5vdLTqfSihBZXIu6N/wN3 WjKjISahYdKVgIGYuGlnfhiKaLd22PM7GnDqD9VoAsq3cNhRcC24x5rYKITtQ/X2 w1LdCVtz2xBdJ4ZeP11YG9LYgXU+dzGtKNa0SmBrHF0rfDAg5Rynz3+gn7HG+fuo Xz1MvlVLwNB38drHCgykZ4Lsfx5OFlo= -----END CERTIFICATE-----Generated at Sun Apr 27 10:40:56 2025 by rpki-client