$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04d19465-8716-36e7-9064-d31117e6b001.roa File: 04d19465-8716-36e7-9064-d31117e6b001.roa (raw, json) Hash identifier: LRjP8leUl4v+H/V8L5IR8l6l/JhOCuq0JW63uOs2oC8= Subject key identifier: CC:62:89:D8:79:37:BD:56:A0:27:14:E5:FB:C9:17:9A:CD:3A:0A:C5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9070C004F85414CD3040 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04d19465-8716-36e7-9064-d31117e6b001.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:90:70:c0:04:f8:54:14:cd:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3cf3745c-e2a8-40fa-86d1-2ceb20d009c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:ce:5d:11:72:7f:42:eb:fc:dc:94:73:27: 43:b9:3c:f2:98:d5:22:10:ad:de:26:ce:e2:b7:44: 89:bd:35:53:a5:47:39:8e:c4:0b:83:92:c8:0c:70: 3d:70:c9:fd:08:b2:f4:db:7b:a2:db:bf:6d:b2:a7: 64:ae:be:86:35:c9:84:51:99:b8:2a:86:21:9e:08: d3:4d:09:44:3d:49:5d:29:2e:40:d5:61:fb:c2:42: b9:d2:a6:aa:03:da:01:b0:8d:c6:2b:79:d3:be:c9: 13:49:46:52:1a:ac:77:33:77:01:dd:71:7c:65:b9: 6f:fa:59:e9:a6:be:07:0c:3d:4b:5e:94:c0:4e:49: 9c:ef:71:b2:5c:3b:31:1f:e7:90:92:d4:27:26:6f: e4:3d:76:94:6e:4f:e3:10:df:89:4e:c5:c0:9a:cc: 0b:ec:f9:73:70:bc:c0:d7:90:c3:3c:ac:22:4d:ed: b4:1e:5c:80:30:7a:ed:34:ef:2a:b0:2c:66:e7:f0: 56:85:8a:26:85:78:01:e9:a4:5b:6a:e7:90:96:f2: 77:e5:8e:10:ea:8c:10:65:20:9c:fb:5c:ff:2d:f7: ec:76:e8:18:58:cf:8d:d5:12:40:f9:c2:16:ee:5b: 08:20:07:36:3d:4a:ac:7d:2c:3c:76:ef:0d:b2:b0: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:62:89:D8:79:37:BD:56:A0:27:14:E5:FB:C9:17:9A:CD:3A:0A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04d19465-8716-36e7-9064-d31117e6b001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:85:25:90:de:3e:53:2b:7c:b8:57:2c:21:b7:c7:31:fd:3c: e8:3a:cc:2d:16:d5:a1:40:c8:be:aa:b2:44:5c:0a:ab:76:19: 2d:61:3a:21:0e:b2:36:7b:04:66:a5:a1:c0:95:33:e1:50:b6: eb:de:44:ee:8f:22:42:53:8b:93:3e:0d:ce:b6:ed:56:34:8c: 2e:1b:b1:90:86:c3:f1:0b:ec:03:a7:5e:c2:9a:ef:9a:77:7c: cc:af:65:fb:45:07:6b:12:02:01:cc:14:73:2c:eb:5f:be:d0: 14:c4:91:a7:2b:62:fe:a6:9b:1b:12:e3:5b:7d:d7:8b:0b:b3: 08:01:3c:19:a2:fa:07:16:f8:e3:64:d3:6f:03:23:72:13:56: a8:46:e9:20:a9:d7:96:08:5c:23:15:41:b4:d9:19:2a:e5:c1: 5d:7d:be:7e:26:15:14:7a:7a:62:75:a4:ee:8c:5b:cf:8c:b8: a8:7a:05:0c:bc:d5:14:61:00:c4:be:dc:5b:92:b2:79:57:9a: e2:94:54:55:a1:6d:15:a0:39:f1:ec:99:87:63:a8:38:2d:44: 7c:24:5e:b4:31:cc:27:e9:5c:94:0d:ec:c5:9e:56:02:24:dc: 85:68:f4:ac:a1:b9:34:05:c8:eb:56:e4:ea:51:a6:fe:ba:57: 69:59:e2:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupBwwAT4VBTNMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2NmMzc0NWMtZTJhOC00MGZhLTg2ZDEtMmNlYjIwZDAwOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEbOXRFyf0Lr/NyUcydDuTzymNUiEK3eJs7i t0SJvTVTpUc5jsQLg5LIDHA9cMn9CLL023ui279tsqdkrr6GNcmEUZm4KoYhngjT TQlEPUldKS5A1WH7wkK50qaqA9oBsI3GK3nTvskTSUZSGqx3M3cB3XF8Zblv+lnp pr4HDD1LXpTATkmc73GyXDsxH+eQktQnJm/kPXaUbk/jEN+JTsXAmswL7PlzcLzA 15DDPKwiTe20HlyAMHrtNO8qsCxm5/BWhYomhXgB6aRbaueQlvJ35Y4Q6owQZSCc +1z/LffsdugYWM+N1RJA+cIW7lsIIAc2PUqsfSw8du8NsrDMHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxiidh5N71WoCcU5fvJF5rNOgrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRkMTk0NjUtODcxNi0z NmU3LTkwNjQtZDMxMTE3ZTZiMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACFJZDePlMrfLhXLCG3xzH9POg6zC0W1aFAyL6qskRcCqt2GS1hOiEO sjZ7BGalocCVM+FQtuveRO6PIkJTi5M+Dc627VY0jC4bsZCGw/EL7AOnXsKa75p3 fMyvZftFB2sSAgHMFHMs61++0BTEkacrYv6mmxsS41t914sLswgBPBmi+gcW+ONk 028DI3ITVqhG6SCp15YIXCMVQbTZGSrlwV19vn4mFRR6emJ1pO6MW8+MuKh6BQy8 1RRhAMS+3FuSsnlXmuKUVFWhbRWgOfHsmYdjqDgtRHwkXrQxzCfpXJQN7MWeVgIk 3IVo9KyhuTQFyOtW5OpRpv66V2lZ4gk= -----END CERTIFICATE-----Generated at Sun May 11 16:48:29 2025 by rpki-client