$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e056e1bf-863a-32b4-8bfc-0b27c19b2711.roa File: e056e1bf-863a-32b4-8bfc-0b27c19b2711.roa (raw, json) Hash identifier: ouHjKMdIfIF5rQjsStSah/XbekRId09Cn9D6hYEUY2g= Subject key identifier: 75:43:3D:03:90:33:49:01:3E:E5:8B:3D:1D:9B:E0:BA:70:82:8D:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3BEE4A5BC4506764F300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e056e1bf-863a-32b4-8bfc-0b27c19b2711.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:ee:4a:5b:c4:50:67:64:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4212ae2c-db3f-44a0-8032-f3aab0133e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9e:f1:3d:f0:46:ea:dc:97:98:f5:da:e2:04: 93:3b:7e:8c:d3:6e:7e:93:68:1f:7f:58:b2:18:55: 75:a1:28:44:bd:22:7f:07:ce:89:cd:b4:e1:98:0d: ee:08:69:27:01:d0:b0:e8:d1:31:b2:0e:a3:64:5b: 45:bf:68:a4:ac:9b:e9:f6:ec:9b:4b:bf:8d:a2:7f: e0:7e:4f:8d:0f:b0:15:e7:f0:c8:d0:9d:a5:67:24: 3f:a2:d1:3b:60:63:e0:cf:98:a5:f2:c3:ca:65:f5: a9:7c:6f:7e:2b:95:c3:85:74:08:f8:a5:2c:3f:a6: 52:18:b0:7c:21:2b:c8:1f:99:64:80:77:d1:50:e0: 4b:23:b3:be:c3:e9:27:3b:bc:32:fb:88:ea:1d:21: c6:1d:82:b8:a7:8d:01:7c:1f:ff:71:0b:f2:d9:01: ec:d6:c6:1f:1e:db:41:83:c1:01:75:f7:ea:60:47: cd:aa:10:bb:79:f4:a9:7b:91:da:f7:8a:42:d7:17: 72:62:78:e7:d3:87:92:67:e7:08:13:02:d5:51:82: fd:e6:d7:6b:04:bc:27:04:fd:cd:88:6e:32:09:f8: 37:c5:ac:33:53:68:4c:4b:a1:01:32:de:75:6e:25: 5d:07:ea:7a:24:61:b5:10:75:20:c1:c5:44:df:47: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:43:3D:03:90:33:49:01:3E:E5:8B:3D:1D:9B:E0:BA:70:82:8D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e056e1bf-863a-32b4-8bfc-0b27c19b2711.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:40:29:47:92:b5:5d:46:42:c4:d9:3e:46:12:73:c3:56:a6: a3:49:50:f5:c1:37:5e:6f:b3:d1:3e:cb:24:d0:ca:53:6a:18: fb:2c:67:78:4a:72:1e:82:3c:97:e3:36:1a:54:4f:33:1b:ef: 5d:a9:f8:04:73:f6:a7:d4:59:97:76:ae:62:8d:f3:2f:d0:c6: bc:46:f4:0e:1c:af:4a:34:c1:1f:11:5b:e2:0c:05:74:6d:e9: 2d:5d:ee:ed:b7:05:5f:43:d3:c3:e6:ba:b2:8d:9f:c7:b4:5f: 2a:89:a2:f3:39:38:85:8f:06:09:82:5c:b1:8c:7d:97:4d:14: 99:f9:0c:e0:5c:56:01:0a:da:32:e8:29:6e:35:1e:0c:43:fb: 88:e5:b7:65:ea:ad:0a:82:97:3a:40:8e:bd:f8:11:88:e9:fa: 0d:b6:0e:67:cc:d9:f2:11:82:79:bf:f8:68:32:e1:6e:76:02: fb:bb:c4:e5:6e:86:1d:a8:d4:46:82:c4:4a:98:03:30:89:a0: ce:48:e8:f0:42:d0:48:ff:32:a2:7e:94:32:c3:b1:2e:d6:4c: 0d:ae:11:14:89:ed:13:ef:b6:c8:58:cb:15:74:02:16:5f:90: 3c:41:89:0b:87:93:c2:1a:49:57:2a:14:c4:2e:41:e8:50:c7: 8d:7d:84:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzvuSlvEUGdk8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDIxMmFlMmMtZGIzZi00NGEwLTgwMzItZjNhYWIwMTMzZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z7xPfBG6tyXmPXa4gSTO36M025+k2gff1iy GFV1oShEvSJ/B86JzbThmA3uCGknAdCw6NExsg6jZFtFv2ikrJvp9uybS7+Non/g fk+ND7AV5/DI0J2lZyQ/otE7YGPgz5il8sPKZfWpfG9+K5XDhXQI+KUsP6ZSGLB8 ISvIH5lkgHfRUOBLI7O+w+knO7wy+4jqHSHGHYK4p40BfB//cQvy2QHs1sYfHttB g8EBdffqYEfNqhC7efSpe5Ha94pC1xdyYnjn04eSZ+cIEwLVUYL95tdrBLwnBP3N iG4yCfg3xawzU2hMS6EBMt51biVdB+p6JGG1EHUgwcVE30cxKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVDPQOQM0kBPuWLPR2b4Lpwgo1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTA1NmUxYmYtODYzYS0z MmI0LThiZmMtMGIyN2MxOWIyNzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxAKUeStV1GQsTZPkYSc8NWpqNJUPXBN15vs9E+yyTQylNqGPssZ3hK ch6CPJfjNhpUTzMb712p+ARz9qfUWZd2rmKN8y/QxrxG9A4cr0o0wR8RW+IMBXRt 6S1d7u23BV9D08PmurKNn8e0XyqJovM5OIWPBgmCXLGMfZdNFJn5DOBcVgEK2jLo KW41HgxD+4jlt2XqrQqClzpAjr34EYjp+g22DmfM2fIRgnm/+Ggy4W52Avu7xOVu hh2o1EaCxEqYAzCJoM5I6PBC0Ej/MqJ+lDLDsS7WTA2uERSJ7RPvtshYyxV0AhZf kDxBiQuHk8IaSVcqFMQuQehQx419hLY= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:23 2025 by rpki-client