$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e272a03c-6634-327a-a9e5-d01b85a22f75.roa File: e272a03c-6634-327a-a9e5-d01b85a22f75.roa (raw, json) Hash identifier: Tg2EMHcg/mH37zhMe3As5UgG0VBJne6KVrlAGD21lJI= Subject key identifier: 7A:F3:58:63:FC:88:1F:36:5E:EB:6C:FD:D1:F1:5A:CA:06:05:4D:14 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB32E48F0CAD72C544FB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e272a03c-6634-327a-a9e5-d01b85a22f75.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:32:e4:8f:0c:ad:72:c5:44:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4cdc78b0-34ac-4d7a-be47-706ec4b5663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6e:81:c9:21:94:9f:6f:68:67:6a:56:cd:99: 57:8c:80:9a:fa:52:d7:c7:65:9f:84:f9:dc:d9:26: d6:3d:e7:24:cc:5b:41:50:a2:c2:a9:ad:f2:c5:ee: fb:17:91:c3:e6:66:2c:21:fd:b9:bb:13:e3:d3:15: 36:ba:d7:0a:d2:4f:56:c7:23:41:22:c6:c1:75:41: 8a:b7:cf:bd:4d:87:f6:b4:e1:60:74:1b:2d:63:98: 00:27:05:77:c2:ab:00:ee:3a:a1:5c:9a:f3:5c:0f: 76:78:8d:95:65:22:41:41:d0:b9:26:5d:32:eb:92: 9b:d0:c9:b6:34:48:91:04:c8:da:d0:3a:ed:dc:61: af:4f:16:94:81:4d:df:c6:e9:00:21:f7:83:4f:49: 39:bd:9c:03:a8:33:08:03:68:af:34:53:69:07:a8: ec:be:75:c2:36:8a:47:93:4e:6e:41:9b:e8:ff:36: 58:04:8f:73:47:c6:93:67:14:d7:8d:8b:54:82:cd: f7:1c:63:40:a4:33:f0:9b:a7:d3:b2:2a:30:4a:84: ee:15:a3:21:ad:31:0b:cc:dc:59:c9:33:b4:1c:52: 9b:47:93:73:92:a9:56:17:7c:37:31:d0:8a:0f:8f: 04:7e:ed:f2:cd:fc:9b:94:18:27:f4:bd:c8:da:14: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F3:58:63:FC:88:1F:36:5E:EB:6C:FD:D1:F1:5A:CA:06:05:4D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e272a03c-6634-327a-a9e5-d01b85a22f75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fd:56:6f:b8:93:88:67:07:55:b0:31:cc:9a:d0:0d:5a:91: 29:03:15:19:7c:40:99:7a:88:23:f4:b0:4c:70:54:ab:99:e1: 71:51:c5:88:27:70:d1:e2:06:71:47:a7:10:18:c0:e5:5d:bc: 58:de:cb:90:5b:e6:84:b3:6c:48:41:54:4a:bd:02:6c:e6:08: 54:49:0e:97:df:93:41:64:c7:bb:94:e1:1f:91:cb:1f:8c:44: af:58:0a:2e:d6:2d:a5:a6:3b:4a:ca:c1:da:7d:42:8e:ce:f4: 77:ed:fd:ba:ae:36:7a:10:18:86:aa:3c:8e:19:f6:de:4b:00: 3e:a0:17:77:e1:65:d7:a3:50:21:9f:df:8c:96:27:a6:60:b9: 4e:dd:85:d1:13:3d:27:bd:40:81:a8:3d:a8:24:43:03:c4:46: 49:2e:64:20:32:46:26:7e:f7:9c:0e:17:bd:52:c4:4f:09:ad: d4:77:d3:1a:6c:f7:2d:36:d6:90:b9:2c:64:a3:e1:f3:4d:6c: 10:ba:c0:cb:8c:62:74:36:81:ad:98:2f:73:13:ff:56:6c:68: a6:6c:73:c2:fd:ec:8d:23:8c:34:f2:cc:e2:eb:c6:21:6d:08: b9:76:fc:52:dc:b3:c1:81:c4:ec:a4:02:fb:91:15:e9:48:df: 77:50:c1:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzLkjwytcsVE+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGNkYzc4YjAtMzRhYy00ZDdhLWJlNDctNzA2ZWM0YjU2NjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m6BySGUn29oZ2pWzZlXjICa+lLXx2WfhPnc 2SbWPeckzFtBUKLCqa3yxe77F5HD5mYsIf25uxPj0xU2utcK0k9WxyNBIsbBdUGK t8+9TYf2tOFgdBstY5gAJwV3wqsA7jqhXJrzXA92eI2VZSJBQdC5Jl0y65Kb0Mm2 NEiRBMja0Drt3GGvTxaUgU3fxukAIfeDT0k5vZwDqDMIA2ivNFNpB6jsvnXCNopH k05uQZvo/zZYBI9zR8aTZxTXjYtUgs33HGNApDPwm6fTsiowSoTuFaMhrTELzNxZ yTO0HFKbR5NzkqlWF3w3MdCKD48Efu3yzfyblBgn9L3I2hQFIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrzWGP8iB82Xuts/dHxWsoGBU0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTI3MmEwM2MtNjYzNC0z MjdhLWE5ZTUtZDAxYjg1YTIyZjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT9Vm+4k4hnB1WwMcya0A1akSkDFRl8QJl6iCP0sExwVKuZ4XFRxYgn cNHiBnFHpxAYwOVdvFjey5Bb5oSzbEhBVEq9AmzmCFRJDpffk0Fkx7uU4R+Ryx+M RK9YCi7WLaWmO0rKwdp9Qo7O9Hft/bquNnoQGIaqPI4Z9t5LAD6gF3fhZdejUCGf 34yWJ6ZguU7dhdETPSe9QIGoPagkQwPERkkuZCAyRiZ+95wOF71SxE8JrdR30xps 9y021pC5LGSj4fNNbBC6wMuMYnQ2ga2YL3MT/1ZsaKZsc8L97I0jjDTyzOLrxiFt CLl2/FLcs8GBxOykAvuRFelI33dQwTk= -----END CERTIFICATE-----Generated at Sun Apr 27 19:08:44 2025 by rpki-client