$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc9fa2fc-0857-3518-abd9-34549b4dedd3.roa File: fc9fa2fc-0857-3518-abd9-34549b4dedd3.roa (raw, json) Hash identifier: PnrXRaN1k6oOJcbbe+s3vOow++9RKfEdzJij0Yy18+s= Subject key identifier: 4F:BE:9D:A2:2D:4E:5B:F0:4E:D6:DB:CF:69:99:F8:44:45:59:AB:6A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA98A453D8E2F8D3EE6800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc9fa2fc-0857-3518-abd9-34549b4dedd3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:98:a4:53:d8:e2:f8:d3:ee:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a8e2dfcb-7329-4334-84fc-bbdbae99e1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:80:a6:ec:cf:23:8e:97:15:88:ba:f7:bc: f2:ca:96:62:18:4e:e4:fe:bb:d4:1a:c3:31:cd:b8: 74:e8:c1:60:aa:42:34:0f:59:27:75:8d:f5:b2:cc: 15:8c:c3:ae:c1:e0:1e:86:7f:a5:88:1a:31:c6:94: 31:c2:c6:c9:ce:e5:7e:d4:8e:a0:0a:a0:2e:6f:5e: 31:46:b1:6a:07:41:4d:4b:e4:b3:a8:50:87:1c:dc: 92:fd:b6:e7:f0:b1:ce:ad:e5:46:31:51:44:84:ed: 6a:e8:fc:ab:3d:fa:b6:20:58:e9:91:4a:f0:cd:69: 89:06:08:f0:8d:3e:8c:88:eb:b6:c8:5c:81:ce:a0: ed:98:4f:71:98:2c:f3:ce:4d:eb:be:21:da:e7:7d: b7:40:04:18:0d:f2:29:18:be:60:45:0a:0e:96:ca: 27:13:a6:a1:2f:e1:17:56:2c:b7:43:8b:94:08:33: 0a:b5:f0:64:05:29:5a:4d:b2:e2:93:7b:73:0c:0b: 71:95:73:91:45:0a:b3:8b:31:2b:ac:cc:da:6e:12: 12:37:f9:d6:ea:c5:a6:e1:17:84:79:e7:a0:37:74: 77:67:ae:e3:72:10:53:f4:c9:b0:61:03:ce:26:70: 3d:2e:af:14:37:14:9f:e2:63:6a:2f:3a:ef:b3:93: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BE:9D:A2:2D:4E:5B:F0:4E:D6:DB:CF:69:99:F8:44:45:59:AB:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc9fa2fc-0857-3518-abd9-34549b4dedd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d6:39:16:cc:6a:90:c3:bb:a6:91:53:fb:08:92:7b:03:2e: 00:45:22:d8:fe:4d:44:68:f5:67:9c:41:33:f3:cd:9f:91:b6: b1:d2:89:3c:1d:29:cd:42:cc:ae:56:2f:17:dc:d8:99:7c:56: d8:b8:c8:4d:cf:b0:77:20:a7:e4:bd:09:98:16:bf:cf:5f:f9: dd:7f:fd:66:8e:e4:82:c4:e7:1b:51:4c:d6:64:06:99:80:d1: 0e:f2:f9:d6:e7:79:0f:63:ce:69:57:b6:bb:78:10:4e:1d:b2: 0d:eb:7e:9b:d0:6a:ab:5b:e0:07:46:0a:0a:34:69:50:04:30: 77:49:6d:a9:56:f1:73:f4:56:bb:6c:c3:9e:80:99:49:4a:0e: b8:38:ff:8c:45:40:be:75:fb:f1:5f:d4:0e:79:7a:95:f7:bd: af:3e:e6:b7:39:e7:25:78:a3:9d:19:e4:5f:af:16:6c:f2:07: b8:f4:fc:d1:b2:07:bf:fb:d3:aa:d4:50:7e:87:fa:29:d7:c7: db:77:7d:5a:03:02:0d:bf:17:73:24:04:ba:8d:f8:41:ed:f1: 1b:37:f7:38:f0:c8:59:e3:1f:a1:17:44:2e:07:b2:4a:fe:bb: 2e:07:de:a6:6c:93:ca:a6:10:22:06:a7:15:4a:7c:20:02:60: 80:b5:47:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupikU9ji+NPuaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YThlMmRmY2ItNzMyOS00MzM0LTg0ZmMtYmJkYmFlOTllMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQaApuzPI46XFYi697zyypZiGE7k/rvUGsMx zbh06MFgqkI0D1kndY31sswVjMOuweAehn+liBoxxpQxwsbJzuV+1I6gCqAub14x RrFqB0FNS+SzqFCHHNyS/bbn8LHOreVGMVFEhO1q6PyrPfq2IFjpkUrwzWmJBgjw jT6MiOu2yFyBzqDtmE9xmCzzzk3rviHa5323QAQYDfIpGL5gRQoOlsonE6ahL+EX Viy3Q4uUCDMKtfBkBSlaTbLik3tzDAtxlXORRQqzizErrMzabhISN/nW6sWm4ReE eeegN3R3Z67jchBT9MmwYQPOJnA9Lq8UNxSf4mNqLzrvs5NLlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE++naItTlvwTtbbz2mZ+ERFWatqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmM5ZmEyZmMtMDg1Ny0z NTE4LWFiZDktMzQ1NDliNGRlZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPO3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbWORbMapDDu6aRU/sIknsDLgBFItj+TURo9WecQTPzzZ+RtrHSiTwd Kc1CzK5WLxfc2Jl8Vti4yE3PsHcgp+S9CZgWv89f+d1//WaO5ILE5xtRTNZkBpmA 0Q7y+dbneQ9jzmlXtrt4EE4dsg3rfpvQaqtb4AdGCgo0aVAEMHdJbalW8XP0Vrts w56AmUlKDrg4/4xFQL51+/Ff1A55epX3va8+5rc55yV4o50Z5F+vFmzyB7j0/NGy B7/706rUUH6H+inXx9t3fVoDAg2/F3MkBLqN+EHt8Rs39zjwyFnjH6EXRC4Hskr+ uy4H3qZsk8qmECIGpxVKfCACYIC1R9s= -----END CERTIFICATE-----Generated at Mon Apr 28 01:21:46 2025 by rpki-client