$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa File: f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa (raw, json) Hash identifier: KEZtLl7n/4RU8Q2CydB83lhSxZs0+6/rmoTN5t2Mj0M= Subject key identifier: 11:32:02:E4:CC:CE:06:CA:74:54:D5:52:DA:4C:7F:12:59:CA:C8:3C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA97F27A395283FB3EF280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:97:f2:7a:39:52:83:fb:3e:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=004105ab-77e9-4f46-8d8f-dd248fd567a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:56:ed:aa:5e:a6:9d:d4:98:9b:c7:35:ff:d8: 49:3d:ab:00:a7:52:15:c1:b7:f4:cb:05:bf:11:3f: a5:02:7e:34:f3:27:c3:b8:da:8f:17:11:4e:7c:ff: 2c:33:d5:47:d4:a7:1b:a2:b7:80:44:6f:b5:92:2e: 19:2a:3d:5d:47:6a:24:ca:99:c3:cb:78:4a:23:e1: 85:98:4e:5f:08:f8:f5:51:1b:66:1c:91:0f:3d:b9: 50:c3:06:e2:49:eb:d2:29:5d:e3:d5:a5:3b:a9:bb: ea:9b:37:f6:24:02:13:03:2e:82:46:50:e4:37:60: 19:d4:9a:02:5c:ff:2c:5f:18:06:40:41:14:af:79: 4a:92:7e:18:5e:02:aa:05:a3:a6:62:f7:bc:d7:e4: 26:22:ca:ba:32:5a:0e:71:2e:c9:f4:ba:98:0e:d4: ed:b2:6e:69:20:0e:17:49:68:70:f3:5f:87:3e:91: 71:8c:4f:f9:df:ee:b7:3a:56:06:a8:4a:b3:7c:7b: 45:05:c4:cc:53:74:6f:7a:8d:7f:40:9a:48:0e:96: 74:ba:23:41:d9:cf:f9:33:28:82:49:5b:84:7a:a6: a2:ba:d1:9b:12:35:d5:8a:04:e1:b2:57:8a:3f:cd: a1:fa:22:47:ac:f9:f6:fa:7b:3e:82:77:a0:92:7f: 3c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:32:02:E4:CC:CE:06:CA:74:54:D5:52:DA:4C:7F:12:59:CA:C8:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f1f10e20-8d39-3ede-96ef-d4beea3c2efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:cf:52:8b:8c:89:88:0f:55:3b:30:3d:4b:55:a8:c7:4e:e3: 50:98:3d:4c:98:9e:0c:ef:34:ab:db:88:b0:a2:b3:32:cd:f1: 8e:af:67:21:85:e5:53:15:69:83:16:cb:02:35:55:41:63:86: 7f:f7:88:a4:5e:f5:77:26:fc:cd:dc:03:a7:6a:de:0a:d8:b4: 80:cc:d7:61:e1:0b:74:99:4e:cb:05:c6:39:91:66:aa:a7:bd: fd:c2:37:6a:5b:4f:62:85:0c:06:9f:13:9a:f5:b4:a5:c1:fe: 63:b0:2a:49:76:27:e4:61:7c:58:7f:4f:80:b9:14:ad:2e:15: ca:64:9f:d8:f8:5d:60:4b:c8:bb:d0:4c:77:b2:50:5a:87:0e: 99:76:f3:c3:90:c7:e2:a8:6e:8b:43:e8:26:9e:6c:77:6a:6e: da:4f:44:08:a6:43:ea:04:af:35:59:2c:2c:63:12:fc:2c:a2: 36:71:f1:3d:af:15:09:6e:34:58:3b:ea:9e:a2:7f:d8:85:76: af:41:13:48:24:35:b8:1a:48:7a:80:eb:5e:a1:7f:b3:8e:c2: 71:d6:e0:83:c2:b7:80:8d:18:4a:88:07:05:0d:2e:83:dd:72: 9a:f1:74:d9:c3:92:be:77:5a:6e:5c:f0:3e:4f:01:c9:a2:97: d8:65:a8:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupfyejlSg/s+8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDA0MTA1YWItNzdlOS00ZjQ2LThkOGYtZGQyNDhmZDU2N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklbtql6mndSYm8c1/9hJPasAp1IVwbf0ywW/ ET+lAn408yfDuNqPFxFOfP8sM9VH1KcboreARG+1ki4ZKj1dR2okypnDy3hKI+GF mE5fCPj1URtmHJEPPblQwwbiSevSKV3j1aU7qbvqmzf2JAITAy6CRlDkN2AZ1JoC XP8sXxgGQEEUr3lKkn4YXgKqBaOmYve81+QmIsq6MloOcS7J9LqYDtTtsm5pIA4X SWhw81+HPpFxjE/53+63OlYGqEqzfHtFBcTMU3Rveo1/QJpIDpZ0uiNB2c/5MyiC SVuEeqaiutGbEjXVigThsleKP82h+iJHrPn2+ns+gnegkn88SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEyAuTMzgbKdFTVUtpMfxJZysg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjFmMTBlMjAtOGQzOS0z ZWRlLTk2ZWYtZDRiZWVhM2MyZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHPUouMiYgPVTswPUtVqMdO41CYPUyYngzvNKvbiLCiszLN8Y6vZyGF 5VMVaYMWywI1VUFjhn/3iKRe9Xcm/M3cA6dq3grYtIDM12HhC3SZTssFxjmRZqqn vf3CN2pbT2KFDAafE5r1tKXB/mOwKkl2J+RhfFh/T4C5FK0uFcpkn9j4XWBLyLvQ THeyUFqHDpl288OQx+KobotD6CaebHdqbtpPRAimQ+oErzVZLCxjEvwsojZx8T2v FQluNFg76p6if9iFdq9BE0gkNbgaSHqA616hf7OOwnHW4IPCt4CNGEqIBwUNLoPd cprxdNnDkr53Wm5c8D5PAcmil9hlqFQ= -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:11 2025 by rpki-client