$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f853a0b2-95ae-31f2-b514-bb04402180a3.roa File: f853a0b2-95ae-31f2-b514-bb04402180a3.roa (raw, json) Hash identifier: JLXPEIBNl4aRyvh2DNsaWirQN/fYXvviZRa3iYSBFLI= Subject key identifier: 31:F0:C2:F4:E8:9E:C1:49:92:F1:36:F1:4B:E4:28:AB:AE:34:45:F2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3A7691FECF0973F57460 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f853a0b2-95ae-31f2-b514-bb04402180a3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3a:76:91:fe:cf:09:73:f5:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=549c83d6-a0a3-4ec6-8a99-2f4651c1cd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:df:0c:79:9a:69:a5:b1:6b:30:b1:3b:a3:15: de:bd:8f:45:8a:df:a3:f3:9c:da:8c:e7:11:1b:bf: f1:36:07:45:12:ee:7d:de:06:4d:01:ef:6a:08:8c: 17:81:50:d4:20:00:48:fc:d2:61:3f:20:53:e6:f9: c6:a2:74:4d:0b:5e:82:c6:4a:61:a2:72:10:b6:e6: 49:c8:2e:61:71:cd:13:aa:7f:65:b7:02:92:31:89: f1:36:9c:5d:de:1e:33:1f:e8:a5:4b:43:e5:1f:a9: 97:2f:5a:e3:07:72:df:24:10:93:f5:36:a1:d6:e7: 0c:ff:06:0f:29:4b:67:7e:cf:88:2e:1d:23:c8:5f: 4d:75:e4:73:cb:ed:6c:78:50:b9:e9:b1:40:43:81: 36:c2:75:92:92:eb:b3:2e:56:e4:3a:f7:a7:c2:a9: 72:ec:12:bc:39:68:cd:89:c8:64:21:be:e7:df:1d: 2b:5a:33:c2:25:82:98:10:32:87:0e:a5:1d:41:28: b2:bb:d9:6e:b9:9c:31:5b:5b:3e:63:39:7f:3d:6e: 56:bf:e9:73:ae:22:b2:bf:81:4a:c0:2c:df:09:9a: 56:66:2c:17:88:1e:1d:4d:fe:4f:e6:55:ab:a2:9b: 31:c9:49:b5:5f:b6:f5:c6:08:20:bd:f3:47:d0:fa: 21:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F0:C2:F4:E8:9E:C1:49:92:F1:36:F1:4B:E4:28:AB:AE:34:45:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f853a0b2-95ae-31f2-b514-bb04402180a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b0:09:61:9a:bc:d8:d5:7b:a7:b6:a1:7a:16:87:e3:7e:65: 8e:de:2b:57:12:44:15:39:74:d7:ab:39:55:b1:96:9c:b2:09: ab:1b:e7:38:e2:8b:81:97:19:60:36:70:13:bf:35:fc:82:80: 43:18:de:0f:1a:7d:d5:09:45:26:fc:da:d9:23:96:0e:8f:43: dc:50:4d:89:2e:78:f3:7c:17:72:56:23:a2:ce:d6:0e:ea:b7: d1:f9:86:8a:88:2c:81:b2:90:5c:21:18:bf:c2:fb:c1:28:5d: 08:b9:e6:1e:96:c2:a0:93:01:62:7d:dc:3f:fb:b0:e4:9a:d1: 43:4f:1f:79:9c:d1:c3:1d:e5:5b:82:f2:2f:4e:e4:fc:03:6f: 8f:2c:08:93:1e:72:b3:7e:87:56:31:4f:34:52:57:b2:8a:80: 04:62:1e:f2:b2:34:df:9a:84:0c:8b:a9:5a:3d:2a:53:e2:4c: 21:66:71:c5:5d:16:35:73:74:50:d4:c9:d2:52:68:14:7f:62: 94:0d:e3:28:13:0b:1b:0b:8f:2a:5f:d4:f2:81:45:2b:9f:92: 03:73:87:dc:a8:39:f3:10:57:a2:12:ca:8a:12:9a:6b:b3:8d: 83:43:91:79:92:0b:ff:cb:d7:7d:91:8c:e7:b7:0c:af:b4:48: 0c:a9:90:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzp2kf7PCXP1dGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTQ5YzgzZDYtYTBhMy00ZWM2LThhOTktMmY0NjUxYzFjZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN8MeZpppbFrMLE7oxXevY9Fit+j85zajOcR G7/xNgdFEu593gZNAe9qCIwXgVDUIABI/NJhPyBT5vnGonRNC16CxkphonIQtuZJ yC5hcc0Tqn9ltwKSMYnxNpxd3h4zH+ilS0PlH6mXL1rjB3LfJBCT9Tah1ucM/wYP KUtnfs+ILh0jyF9NdeRzy+1seFC56bFAQ4E2wnWSkuuzLlbkOvenwqly7BK8OWjN ichkIb7n3x0rWjPCJYKYEDKHDqUdQSiyu9luuZwxW1s+Yzl/PW5Wv+lzriKyv4FK wCzfCZpWZiwXiB4dTf5P5lWropsxyUm1X7b1xgggvfNH0PohqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHwwvTonsFJkvE28UvkKKuuNEXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjg1M2EwYjItOTVhZS0z MWYyLWI1MTQtYmIwNDQwMjE4MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCwCWGavNjVe6e2oXoWh+N+ZY7eK1cSRBU5dNerOVWxlpyyCasb5zji i4GXGWA2cBO/NfyCgEMY3g8afdUJRSb82tkjlg6PQ9xQTYkuePN8F3JWI6LO1g7q t9H5hoqILIGykFwhGL/C+8EoXQi55h6WwqCTAWJ93D/7sOSa0UNPH3mc0cMd5VuC 8i9O5PwDb48sCJMecrN+h1YxTzRSV7KKgARiHvKyNN+ahAyLqVo9KlPiTCFmccVd FjVzdFDUydJSaBR/YpQN4ygTCxsLjypf1PKBRSufkgNzh9yoOfMQV6ISyooSmmuz jYNDkXmSC//L132RjOe3DK+0SAypkE4= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:19 2025 by rpki-client