$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea5493ad-24c4-396a-be93-094cce31f408.roa File: ea5493ad-24c4-396a-be93-094cce31f408.roa (raw, json) Hash identifier: Sgu6zuBSNd/XIroRuzjF28w62usBgPERGdG4HA+6N84= Subject key identifier: 8D:24:6C:F8:BD:24:CE:1B:32:0E:87:43:A3:29:AA:D3:3E:B2:7F:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB33D39E8C95741E7F3BA0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea5493ad-24c4-396a-be93-094cce31f408.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:33:d3:9e:8c:95:74:1e:7f:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=84eb72af-66c9-4e91-9ff8-e39f2ae25556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d6:57:38:02:f4:c4:7c:b3:6f:28:41:e5:18: 52:df:b3:38:7a:4c:82:d5:c1:a2:f9:69:3c:89:e5: 35:8c:9c:c6:a9:d3:ff:7d:52:7b:d4:ec:4a:7f:87: 75:61:f4:7f:aa:a3:a2:87:cb:16:fb:63:5c:59:75: 8f:1a:b2:c9:c9:d8:67:d7:dc:57:4d:e7:c5:1c:8c: d1:fb:af:15:53:8f:b5:fa:1e:fc:25:17:bb:5d:d4: 57:05:c7:f6:8c:4e:f4:df:f6:8a:3a:96:db:9b:37: e2:b6:38:4a:c3:53:07:17:b1:83:d9:34:29:51:9a: 61:d9:d8:c9:3d:b0:89:7f:ae:72:f4:76:ce:5c:12: af:a3:14:a9:1e:1c:6d:84:2c:bc:71:c4:be:b5:08: d0:64:a0:3e:49:3c:5e:c5:6b:d7:0b:49:31:2e:ce: 71:5a:ba:67:5c:62:51:19:1c:c8:c9:02:27:de:41: eb:1b:c1:e2:70:0f:e7:08:c4:0f:8f:6b:e3:8b:f8: 3c:ce:04:ce:48:51:f0:d3:93:87:77:0b:e5:59:5b: 4c:3a:86:8f:83:3b:33:b4:73:71:b8:e1:3a:c5:a5: 47:1b:f7:a1:14:cb:ff:8c:08:69:88:1e:bd:b1:f7: c8:31:79:40:d2:d0:4e:23:42:07:c8:a9:f2:be:ba: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:24:6C:F8:BD:24:CE:1B:32:0E:87:43:A3:29:AA:D3:3E:B2:7F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea5493ad-24c4-396a-be93-094cce31f408.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:c7:aa:19:13:62:7a:50:92:4c:40:e3:be:c5:f8:45:0c:5b: 9a:9a:98:b7:1b:b3:14:d1:e3:54:6a:02:c8:a9:c6:e3:a4:b5: 0a:83:9f:ce:f3:f3:21:27:c7:4b:ad:7a:b1:4f:50:ff:37:08: fe:0a:d0:c1:61:ce:27:79:06:d9:3d:e1:04:1e:07:33:4e:f9: b7:a8:d8:29:21:a4:9e:4f:de:ea:b9:e6:e6:03:73:ff:2f:bb: 5b:ac:4b:9c:f2:06:7f:75:45:8c:dd:92:66:c2:56:48:36:3c: ca:78:91:00:f2:b4:d5:3a:36:fc:b1:0f:ba:fe:25:d4:b4:01: 87:eb:1c:65:e8:53:1b:12:da:f3:23:b2:95:8f:cc:30:1b:a6: 2c:6f:8d:73:91:f5:6f:18:ff:76:ba:cd:e0:82:61:16:95:99: 2d:dc:0c:04:cc:7d:a8:07:06:09:5e:6f:e5:da:66:3e:59:8f: 6c:27:ec:e5:46:31:54:5a:5e:60:af:96:eb:f6:f5:63:77:db: c6:3e:0f:34:16:6e:41:87:a4:ef:66:a3:cf:0c:61:27:79:07: cd:fe:63:33:91:5c:c4:ef:26:75:8d:b7:ac:c1:2a:35:e8:a8: d4:5c:26:44:6f:6d:38:01:fa:4b:c8:b0:e1:dc:44:a9:36:6b: 46:8b:6f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzPTnoyVdB5/O6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODRlYjcyYWYtNjZjOS00ZTkxLTlmZjgtZTM5ZjJhZTI1NTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tZXOAL0xHyzbyhB5RhS37M4ekyC1cGi+Wk8 ieU1jJzGqdP/fVJ71OxKf4d1YfR/qqOih8sW+2NcWXWPGrLJydhn19xXTefFHIzR +68VU4+1+h78JRe7XdRXBcf2jE703/aKOpbbmzfitjhKw1MHF7GD2TQpUZph2djJ PbCJf65y9HbOXBKvoxSpHhxthCy8ccS+tQjQZKA+STxexWvXC0kxLs5xWrpnXGJR GRzIyQIn3kHrG8HicA/nCMQPj2vji/g8zgTOSFHw05OHdwvlWVtMOoaPgzsztHNx uOE6xaVHG/ehFMv/jAhpiB69sffIMXlA0tBOI0IHyKnyvrqWxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0kbPi9JM4bMg6HQ6MpqtM+sn9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWE1NDkzYWQtMjRjNC0z OTZhLWJlOTMtMDk0Y2NlMzFmNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPI2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3HqhkTYnpQkkxA477F+EUMW5qamLcbsxTR41RqAsipxuOktQqDn87z 8yEnx0uterFPUP83CP4K0MFhzid5Btk94QQeBzNO+beo2CkhpJ5P3uq55uYDc/8v u1usS5zyBn91RYzdkmbCVkg2PMp4kQDytNU6NvyxD7r+JdS0AYfrHGXoUxsS2vMj spWPzDAbpixvjXOR9W8Y/3a6zeCCYRaVmS3cDATMfagHBgleb+XaZj5Zj2wn7OVG MVRaXmCvluv29WN328Y+DzQWbkGHpO9mo88MYSd5B83+YzORXMTvJnWNt6zBKjXo qNRcJkRvbTgB+kvIsOHcRKk2a0aLb0k= -----END CERTIFICATE-----Generated at Sun Apr 27 00:23:08 2025 by rpki-client