$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa File: fa384edc-a611-3e15-9f11-52686901fc5a.roa (raw, json) Hash identifier: aqde5ALLSabKp6iMaaEZlfJOmnZ747spkK2G2rxwRgs= Subject key identifier: 07:B4:37:11:01:B4:A5:80:3A:ED:7C:B8:8C:13:2D:19:CC:BE:7F:7B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA99B9DA67647527FE1300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:99:b9:da:67:64:75:27:fe:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1be582a8-d539-470b-b781-6ff0d51d7e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:98:0b:1a:76:97:f2:ba:bf:df:29:4e:04: 6d:0f:8d:55:e1:f1:cb:0f:45:11:02:b3:1d:80:f0: b2:2f:0c:d0:5d:f9:6b:b6:78:18:bd:1b:e6:fe:d3: 08:f6:10:da:3d:b7:cf:2a:f4:c9:14:e1:d4:19:99: 7c:26:55:6c:37:2f:2f:c5:bb:ec:59:bb:d6:42:25: be:2b:50:43:6f:4a:1d:4f:26:ab:f5:27:0d:ba:a0: eb:56:25:09:e3:f8:e7:78:00:94:5d:25:61:fb:68: 36:20:a7:13:4f:85:10:1a:f5:50:13:49:5b:f2:d2: ef:9c:aa:b3:fa:48:6f:6f:ae:a2:d1:a9:15:ec:44: d3:e3:67:01:d8:a1:a3:9f:c8:6c:03:c8:82:ca:be: fe:a4:99:80:a9:b1:57:54:3e:0a:ec:07:1f:d2:57: 84:0c:fe:cd:e9:b1:db:17:a2:77:29:ea:32:38:43: 59:33:72:3e:e4:f9:15:0a:a1:8a:e3:15:53:2d:5d: 00:49:4d:c2:bc:14:27:80:0b:f0:4b:3f:dd:31:7d: 29:01:36:cc:62:a6:65:c9:11:7c:16:54:d6:e1:75: 56:14:94:c4:cf:b7:04:78:46:7a:33:5d:45:17:aa: df:20:92:df:bf:9f:b1:a9:29:1b:c1:6b:18:a9:67: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B4:37:11:01:B4:A5:80:3A:ED:7C:B8:8C:13:2D:19:CC:BE:7F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:32:ec:70:eb:e3:3b:b4:52:23:c5:75:bc:f4:60:68:ac:89: 32:c9:97:06:30:be:f1:43:7f:09:5d:74:d4:97:d9:93:a2:d9: bb:8e:9d:61:96:39:ce:4c:24:f3:62:6e:cd:4b:42:e6:3b:14: 2b:23:7c:ca:31:87:cd:f3:b7:68:69:29:47:74:bd:2c:2d:af: dc:a1:da:67:59:43:4c:6b:2c:18:cb:db:20:ae:e9:41:f3:3b: 99:f6:5a:5b:e6:e8:95:17:17:53:a6:4e:78:ad:cb:fb:1f:d4: 20:49:7e:1b:e2:7d:a0:4f:3d:ba:60:7f:0d:4b:db:7c:ae:b4: 32:a0:d6:89:3a:3b:4d:89:ae:41:5f:ef:4f:f5:72:7e:e6:34: 62:10:6a:b5:93:83:7a:b9:e0:10:83:1f:df:02:0f:f4:f9:55: ab:7a:11:d0:27:e5:42:2e:11:98:0c:b9:28:a5:e2:21:7f:98: 23:37:a3:79:cb:ac:38:1e:9d:43:4b:df:c3:79:f6:a9:8d:10: 3d:c5:4e:00:d9:62:64:f4:d5:e6:93:f8:98:bc:d8:5c:0e:3a: 20:b1:0d:4c:bd:3a:2c:f0:f5:db:51:8d:ae:5c:cf:f0:5b:62: 87:f2:97:c8:50:75:d1:25:22:a2:5d:df:65:2d:ad:65:2f:c5: 88:5e:5c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupm52mdkdSf+EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWJlNTgyYTgtZDUzOS00NzBiLWI3ODEtNmZmMGQ1MWQ3ZTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWiYCxp2l/K6v98pTgRtD41V4fHLD0URArMd gPCyLwzQXflrtngYvRvm/tMI9hDaPbfPKvTJFOHUGZl8JlVsNy8vxbvsWbvWQiW+ K1BDb0odTyar9ScNuqDrViUJ4/jneACUXSVh+2g2IKcTT4UQGvVQE0lb8tLvnKqz +khvb66i0akV7ETT42cB2KGjn8hsA8iCyr7+pJmAqbFXVD4K7Acf0leEDP7N6bHb F6J3KeoyOENZM3I+5PkVCqGK4xVTLV0ASU3CvBQngAvwSz/dMX0pATbMYqZlyRF8 FlTW4XVWFJTEz7cEeEZ6M11FF6rfIJLfv5+xqSkbwWsYqWfQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe0NxEBtKWAOu18uIwTLRnMvn97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmEzODRlZGMtYTYxMS0z ZTE1LTlmMTEtNTI2ODY5MDFmYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYy7HDr4zu0UiPFdbz0YGisiTLJlwYwvvFDfwlddNSX2ZOi2buOnWGW Oc5MJPNibs1LQuY7FCsjfMoxh83zt2hpKUd0vSwtr9yh2mdZQ0xrLBjL2yCu6UHz O5n2Wlvm6JUXF1OmTnity/sf1CBJfhvifaBPPbpgfw1L23yutDKg1ok6O02JrkFf 70/1cn7mNGIQarWTg3q54BCDH98CD/T5Vat6EdAn5UIuEZgMuSil4iF/mCM3o3nL rDgenUNL38N59qmNED3FTgDZYmT01eaT+Ji82FwOOiCxDUy9Oizw9dtRja5cz/Bb Yofyl8hQddElIqJd32UtrWUvxYheXBY= -----END CERTIFICATE-----Generated at Sun Apr 27 11:22:15 2025 by rpki-client