$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e155ec42-d837-3995-866a-d373aee2e510.roa File: e155ec42-d837-3995-866a-d373aee2e510.roa (raw, json) Hash identifier: GULncDD2zuDNRq6dn99B0pIzGFfPCG1dR4gXiWjY5NU= Subject key identifier: 94:A6:26:FF:34:A1:10:E0:7E:0F:DF:E4:DC:AC:EF:7E:6B:0D:50:DC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA93D1F156F068ECC8C1C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e155ec42-d837-3995-866a-d373aee2e510.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:93:d1:f1:56:f0:68:ec:c8:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f8100020-c7df-4a18-8388-c9abdd55a633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:7e:6c:9d:b2:2c:d3:a9:27:ea:fb:8e:ea: ef:04:00:4a:db:3d:7b:02:68:46:8d:c4:1d:bb:db: d5:a0:df:4f:22:7e:70:1d:d9:67:21:60:d7:31:da: 1a:e5:a6:d2:d2:cb:e6:18:2a:e4:95:9b:94:c6:56: 74:02:d8:57:ef:72:c7:6d:4c:c9:43:11:98:06:f4: c4:65:3b:68:26:e8:a7:e0:4d:a5:32:09:18:04:6f: da:b7:72:28:3f:af:66:43:05:96:ff:67:8b:e6:a0: f4:97:56:c7:65:00:ed:ca:c9:06:d9:a8:83:3f:3a: 36:6e:7c:be:b4:ef:34:e6:4a:92:c3:cb:48:d2:6d: 54:47:9b:7c:6d:b3:84:d2:b7:8d:63:8f:e1:e3:24: 39:a7:b9:0e:5b:5b:3e:8d:5e:39:ed:8a:00:b4:95: 25:da:93:24:1d:4d:59:c1:92:ac:bc:7b:1c:0b:28: 92:59:20:ac:69:df:62:31:01:27:04:5d:ec:d6:d8: a6:54:ad:41:fd:f6:33:82:25:84:87:af:cc:fb:62: 65:c5:05:ac:a2:27:5e:32:b8:bc:79:a9:5b:b2:f5: 0d:72:4d:0d:8d:66:37:6d:f8:8a:6e:a4:0a:35:3f: 59:07:0f:76:43:a0:3f:df:13:39:26:70:86:b9:bc: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A6:26:FF:34:A1:10:E0:7E:0F:DF:E4:DC:AC:EF:7E:6B:0D:50:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e155ec42-d837-3995-866a-d373aee2e510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:36:ec:76:f2:82:ad:f1:e1:c0:a9:29:cf:83:c6:af:7a:00: 73:d8:04:46:a6:37:20:3e:9f:17:13:b6:15:39:b0:0f:f6:36: 2f:a1:cc:20:a1:f9:76:0d:f5:04:d9:2a:dd:f8:6e:5e:8e:e9: 22:d3:ea:59:ce:20:6e:2a:a5:6e:d8:0f:d0:81:ae:b6:3b:3b: c9:9e:29:55:91:c0:37:c3:62:fa:94:66:d6:65:5d:e3:a8:61: 79:fc:f3:8b:9d:95:2b:1c:e2:77:d6:b6:e7:43:98:94:5c:bb: 68:a9:88:95:06:73:94:c1:b4:28:c6:c0:4d:92:d0:0f:e4:de: 79:b9:f8:be:90:ea:63:b6:49:23:1d:4c:d1:39:20:6b:f3:ec: 4d:ff:17:b4:6f:17:b8:88:11:7f:52:d6:01:34:9a:56:e5:45: de:cb:37:a9:af:21:88:de:bf:72:7c:a8:67:3c:8b:3f:29:d9: 18:65:90:6c:19:6a:91:94:94:71:4e:33:68:8a:67:62:ff:58: e2:18:e9:0d:e5:11:ba:5c:5a:ce:21:f3:2d:73:df:82:b0:a1: 35:e9:3b:1f:b1:8d:65:18:cb:60:69:56:56:88:9b:7e:ff:5c: de:a6:a5:e2:98:b6:a4:4b:29:2c:b0:b1:a1:96:b2:a6:1a:51: b7:2b:21:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupPR8VbwaOzIwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjgxMDAwMjAtYzdkZi00YTE4LTgzODgtYzlhYmRkNTVhNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNF+bJ2yLNOpJ+r7jurvBABK2z17AmhGjcQd u9vVoN9PIn5wHdlnIWDXMdoa5abS0svmGCrklZuUxlZ0AthX73LHbUzJQxGYBvTE ZTtoJuin4E2lMgkYBG/at3IoP69mQwWW/2eL5qD0l1bHZQDtyskG2aiDPzo2bny+ tO805kqSw8tI0m1UR5t8bbOE0reNY4/h4yQ5p7kOW1s+jV457YoAtJUl2pMkHU1Z wZKsvHscCyiSWSCsad9iMQEnBF3s1timVK1B/fYzgiWEh6/M+2JlxQWsoideMri8 ealbsvUNck0NjWY3bfiKbqQKNT9ZBw92Q6A/3xM5JnCGubzfnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSmJv80oRDgfg/f5Nys735rDVDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTE1NWVjNDItZDgzNy0z OTk1LTg2NmEtZDM3M2FlZTJlNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD827Hbygq3x4cCpKc+Dxq96AHPYBEamNyA+nxcTthU5sA/2Ni+hzCCh +XYN9QTZKt34bl6O6SLT6lnOIG4qpW7YD9CBrrY7O8meKVWRwDfDYvqUZtZlXeOo YXn884udlSsc4nfWtudDmJRcu2ipiJUGc5TBtCjGwE2S0A/k3nm5+L6Q6mO2SSMd TNE5IGvz7E3/F7RvF7iIEX9S1gE0mlblRd7LN6mvIYjev3J8qGc8iz8p2RhlkGwZ apGUlHFOM2iKZ2L/WOIY6Q3lEbpcWs4h8y1z34KwoTXpOx+xjWUYy2BpVlaIm37/ XN6mpeKYtqRLKSywsaGWsqYaUbcrIXE= -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:36 2025 by rpki-client