$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8e54e04-8b00-365b-9bbc-2a412c34f27c.roa File: e8e54e04-8b00-365b-9bbc-2a412c34f27c.roa (raw, json) Hash identifier: kx8XBjBFiBZ3E2pMs2Y/gRCemhRN8BpScSF5czlr/XE= Subject key identifier: EA:64:EB:CD:09:15:07:06:C0:03:F7:4D:49:4B:3B:A0:B5:B6:71:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB36C27240FAFF84B3D140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8e54e04-8b00-365b-9bbc-2a412c34f27c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:36:c2:72:40:fa:ff:84:b3:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=37584ae1-4226-4201-8bd2-c767fe68b996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4b:ca:c4:04:23:86:ca:28:69:af:d0:98:58: 00:39:f0:b7:45:71:02:a3:ff:48:6d:5f:3f:8a:9e: 3d:25:b1:62:16:04:60:8e:d4:36:4a:a7:c5:1d:9d: 22:17:8a:18:8d:93:77:2d:27:52:92:58:fc:f7:66: c3:5a:d9:ab:51:82:c7:e9:da:d2:06:13:cb:c7:cf: 99:69:2a:3a:ae:56:ff:72:1b:3a:c1:b3:85:96:a9: e2:cd:0c:49:1f:7a:05:22:3a:d5:67:73:ef:cc:26: 2d:f9:fb:ce:b2:00:d8:66:d7:1f:2a:68:b0:f4:fe: bb:c8:d0:25:72:b8:60:97:d1:fb:67:c5:ab:ed:53: ba:4d:7f:5e:fa:c6:52:e8:d7:28:28:7e:53:1e:e6: 91:12:1f:17:7b:f4:31:1e:0d:9b:b9:16:90:87:e0: 35:42:b0:03:52:44:c4:52:08:96:b1:db:84:36:18: 10:f5:ae:44:e4:53:6a:1c:e0:b8:1e:61:3b:be:db: 77:8f:3e:ea:24:05:48:c7:92:2a:86:fd:b4:15:bd: d9:34:70:ca:7f:61:7b:38:e5:97:bd:46:ae:a6:ff: 15:6c:a0:2a:10:0d:87:ac:e5:c8:e8:41:ac:21:22: fa:11:78:35:4d:84:36:dd:55:07:18:9c:4c:67:a7: a3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:64:EB:CD:09:15:07:06:C0:03:F7:4D:49:4B:3B:A0:B5:B6:71:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8e54e04-8b00-365b-9bbc-2a412c34f27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:b8:4a:47:20:68:83:5c:5d:f8:c1:f0:8e:d5:5e:37:77:26: e4:b7:e9:e3:01:e1:13:bb:cd:de:fd:32:a8:db:78:1f:fc:06: 48:ca:5f:a0:ab:33:a2:5a:b9:97:3d:d5:a3:3c:ea:f0:8a:52: 4b:bd:04:62:0d:a1:5e:21:ab:69:a2:6c:1f:3d:86:dc:4f:7e: b7:96:82:80:09:33:6c:ea:a1:0c:2c:9f:43:b0:55:52:4a:c8: 5f:ec:58:0f:a2:4d:d9:dd:3c:37:5f:7c:08:92:5c:cd:b0:f6: f7:c3:d2:a2:bb:25:e7:b4:c3:c5:47:d5:0f:7c:fa:21:1a:51: 4c:e8:49:a6:af:59:c5:fa:d7:d6:0a:78:d2:1b:9b:22:1a:87: f2:59:6b:2e:8a:55:29:91:4e:2f:c0:53:0c:4d:47:57:09:d2: dc:6f:9a:31:60:92:1d:f0:a1:22:e5:00:bb:30:19:1e:ed:ce: b9:f2:b6:20:e2:38:3d:d6:fa:0f:1b:15:41:86:b5:57:c5:5a: 95:ca:fc:95:61:1e:50:0f:7f:0f:0f:46:6b:5c:3e:24:e1:3b: 3f:e5:8d:f1:b0:ed:65:46:d7:02:6e:d3:47:86:16:ba:5a:70: 57:0b:77:b9:e0:59:c9:93:fe:6a:c9:d9:24:ab:3d:d6:5a:c6: 29:86:31:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzbCckD6/4Sz0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Mzc1ODRhZTEtNDIyNi00MjAxLThiZDItYzc2N2ZlNjhiOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkvKxAQjhsooaa/QmFgAOfC3RXECo/9IbV8/ ip49JbFiFgRgjtQ2SqfFHZ0iF4oYjZN3LSdSklj892bDWtmrUYLH6drSBhPLx8+Z aSo6rlb/chs6wbOFlqnizQxJH3oFIjrVZ3PvzCYt+fvOsgDYZtcfKmiw9P67yNAl crhgl9H7Z8Wr7VO6TX9e+sZS6NcoKH5THuaREh8Xe/QxHg2buRaQh+A1QrADUkTE UgiWsduENhgQ9a5E5FNqHOC4HmE7vtt3jz7qJAVIx5Iqhv20Fb3ZNHDKf2F7OOWX vUaupv8VbKAqEA2HrOXI6EGsISL6EXg1TYQ23VUHGJxMZ6ej7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpk680JFQcGwAP3TUlLO6C1tnFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZThlNTRlMDQtOGIwMC0z NjViLTliYmMtMmE0MTJjMzRmMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMK4SkcgaINcXfjB8I7VXjd3JuS36eMB4RO7zd79MqjbeB/8BkjKX6Cr M6JauZc91aM86vCKUku9BGINoV4hq2mibB89htxPfreWgoAJM2zqoQwsn0OwVVJK yF/sWA+iTdndPDdffAiSXM2w9vfD0qK7Jee0w8VH1Q98+iEaUUzoSaavWcX619YK eNIbmyIah/JZay6KVSmRTi/AUwxNR1cJ0txvmjFgkh3woSLlALswGR7tzrnytiDi OD3W+g8bFUGGtVfFWpXK/JVhHlAPfw8PRmtcPiThOz/ljfGw7WVG1wJu00eGFrpa cFcLd7ngWcmT/mrJ2SSrPdZaximGMUA= -----END CERTIFICATE-----Generated at Mon Apr 28 02:01:10 2025 by rpki-client