$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebed0e83-f85e-3004-8cd1-2f733f90e508.roa File: ebed0e83-f85e-3004-8cd1-2f733f90e508.roa (raw, json) Hash identifier: /uiBAU8Hx7VjJcKwsMEGcin84YJ4Up12/P5aJAxR8zQ= Subject key identifier: A6:5F:84:3E:AB:1A:3F:2C:4D:66:21:A2:29:59:F7:C3:AC:8D:B4:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9A00E437F0BA87BD2F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebed0e83-f85e-3004-8cd1-2f733f90e508.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:9a:00:e4:37:f0:ba:87:bd:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6297124b-09c7-4587-aa33-c2ace3e8e51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:57:96:9a:81:d4:c7:b6:d0:6a:45:1f:49: 0e:6b:01:8a:a2:a2:ff:38:5d:1f:b7:e7:f1:ca:b5: f3:24:5f:95:da:db:9a:be:95:5a:3c:23:83:1a:0b: 9b:3b:f9:18:28:a2:a1:e2:bb:03:d6:e7:70:ed:59: 1d:81:3c:8c:e6:aa:71:da:80:a4:46:ee:4f:fb:82: 76:fd:10:b0:a9:0d:1c:1c:c4:35:cb:e7:ce:54:bb: 5a:b9:5d:d0:a4:a7:64:5b:d0:68:1b:10:c7:0e:d6: 44:3f:f1:9d:45:10:7a:80:1b:cd:a1:44:f3:ce:bc: 0f:03:bb:f0:a3:2e:66:fa:a9:3c:df:d2:43:e5:4d: 54:2a:cd:08:4b:7b:7e:e6:0f:98:8e:b1:7e:bc:0c: 2f:35:e1:83:d6:93:33:73:2c:8d:42:9c:6e:a0:be: 71:0e:e5:6e:f7:2b:1b:4f:1d:6f:9a:ca:bb:4f:b9: 07:bd:ac:66:b7:0f:39:85:55:bd:5f:55:b4:5d:c6: 67:ac:dd:ad:fd:17:5c:3d:d0:f7:b1:dc:0e:26:42: 5a:d2:30:ef:c0:68:49:72:e9:bb:2a:bc:60:96:14: 99:b2:dd:78:d4:9c:b7:32:a3:75:7a:6d:a1:76:ac: 1d:34:b4:c8:a3:c3:57:84:e0:16:9f:ee:3a:4e:20: 87:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5F:84:3E:AB:1A:3F:2C:4D:66:21:A2:29:59:F7:C3:AC:8D:B4:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ebed0e83-f85e-3004-8cd1-2f733f90e508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:57:a0:66:1d:1a:9e:9a:d7:8e:15:ea:f9:62:4d:59:11:78: 12:d6:6d:60:d8:55:f9:e3:1b:b4:74:07:45:d0:21:21:7e:55: 43:0b:84:df:69:b7:2d:93:c4:93:f3:93:e4:d8:6b:d2:12:94: 01:20:4b:f4:67:9b:f5:44:cb:06:66:38:34:16:98:b0:f0:dc: fb:86:cb:5e:03:6b:7d:25:75:22:50:1d:e8:42:4b:e0:d6:fb: 71:5c:c6:62:6c:fa:4f:54:0e:8a:90:d6:e5:6e:80:ad:5f:96: 3f:e8:74:0f:68:25:c1:a7:c9:4b:14:6c:cb:b1:a5:5a:78:07: e1:15:7c:e0:07:e4:96:9d:94:33:c7:9a:be:c2:b0:4d:24:ea: 56:8d:f5:eb:30:54:c5:0c:16:a7:a2:8b:ed:67:5c:b1:64:4d: 5b:25:75:1d:15:42:34:29:63:42:85:f0:48:77:66:ca:54:f3: a3:a5:0b:c9:2f:b6:ef:6e:b9:84:eb:12:d6:fa:59:7b:f6:ab: 21:30:b1:ad:66:05:17:fc:54:9c:bb:a1:1b:11:9f:3b:9d:41: ea:0b:59:13:83:8d:46:b1:18:cf:58:1b:9d:d5:99:f2:bc:22: 83:51:9b:2d:f6:4c:81:3a:8d:4d:db:12:d8:7e:ad:35:30:9d: c3:15:e3:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupoA5Dfwuoe9LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjI5NzEyNGItMDljNy00NTg3LWFhMzMtYzJhY2UzZThlNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXlXlpqB1Me20GpFH0kOawGKoqL/OF0ft+fx yrXzJF+V2tuavpVaPCODGgubO/kYKKKh4rsD1udw7VkdgTyM5qpx2oCkRu5P+4J2 /RCwqQ0cHMQ1y+fOVLtauV3QpKdkW9BoGxDHDtZEP/GdRRB6gBvNoUTzzrwPA7vw oy5m+qk839JD5U1UKs0IS3t+5g+YjrF+vAwvNeGD1pMzcyyNQpxuoL5xDuVu9ysb Tx1vmsq7T7kHvaxmtw85hVW9X1W0XcZnrN2t/RdcPdD3sdwOJkJa0jDvwGhJcum7 KrxglhSZst141Jy3MqN1em2hdqwdNLTIo8NXhOAWn+46TiCH+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZfhD6rGj8sTWYhoilZ98OsjbRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWJlZDBlODMtZjg1ZS0z MDA0LThjZDEtMmY3MzNmOTBlNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxXoGYdGp6a144V6vliTVkReBLWbWDYVfnjG7R0B0XQISF+VUMLhN9p ty2TxJPzk+TYa9ISlAEgS/Rnm/VEywZmODQWmLDw3PuGy14Da30ldSJQHehCS+DW +3FcxmJs+k9UDoqQ1uVugK1flj/odA9oJcGnyUsUbMuxpVp4B+EVfOAH5JadlDPH mr7CsE0k6laN9eswVMUMFqeii+1nXLFkTVsldR0VQjQpY0KF8Eh3ZspU86OlC8kv tu9uuYTrEtb6WXv2qyEwsa1mBRf8VJy7oRsRnzudQeoLWRODjUaxGM9YG53VmfK8 IoNRmy32TIE6jU3bEth+rTUwncMV42o= -----END CERTIFICATE-----Generated at Sun Apr 27 00:17:59 2025 by rpki-client