$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/238f67a4-50f6-375a-8bdc-648c20a85767.roa File: 238f67a4-50f6-375a-8bdc-648c20a85767.roa (raw, json) Hash identifier: S7O9QZMcbBvWNgbA35MrUdAo3zuLzNJ5ecekbWSl+Rc= Subject key identifier: 71:28:07:9C:29:9C:C4:2A:31:CC:2B:53:95:10:F5:72:B6:95:F1:11 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9498E77DC340B06B2700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/238f67a4-50f6-375a-8bdc-648c20a85767.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:94:98:e7:7d:c3:40:b0:6b:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a3c00973-bfe3-4f04-8ce6-d4d604027b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:2b:51:d2:78:1b:69:86:3e:11:34:c1:cb: 67:ff:76:6e:6b:43:13:28:81:e4:46:1d:78:d4:67: af:56:5e:52:01:a0:c9:f4:f6:72:fe:9f:73:27:2b: c9:bf:7f:e5:24:a2:09:7d:cf:3f:8b:20:9b:87:ef: c3:07:df:3b:6e:92:c1:7a:94:41:c4:0e:26:13:b2: a0:df:ab:38:e9:c6:88:53:2f:16:34:69:b2:06:fc: 10:3d:9a:93:83:f3:7e:6e:c5:ff:2a:86:0c:70:65: 70:5e:56:7e:65:16:38:a3:1f:0b:42:8a:d8:49:ce: 39:f1:3b:37:10:1a:73:ae:c7:2a:db:2b:64:7b:8c: bb:91:5c:26:f6:7a:52:64:48:b3:d2:6d:cd:95:ed: 33:f2:d4:a5:89:5d:ed:f6:b0:09:ab:69:e9:23:95: 8d:d9:a3:14:33:ce:8a:c9:4b:5a:d1:8b:4b:51:65: 42:2b:b3:f7:c3:b7:3b:e3:ef:11:f7:48:e7:cf:56: 0f:4b:0b:38:71:72:8f:29:cc:40:7d:20:d5:18:7a: 0e:14:c3:9f:40:13:b6:a3:97:71:44:20:bf:b7:33: 4e:7c:5c:61:5b:3d:d4:01:35:11:fe:12:af:62:4d: f7:a0:4f:70:91:98:ba:7e:06:e2:4f:3a:6b:77:df: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:28:07:9C:29:9C:C4:2A:31:CC:2B:53:95:10:F5:72:B6:95:F1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/238f67a4-50f6-375a-8bdc-648c20a85767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:b8:b7:39:06:e1:70:d4:6b:32:dd:55:3f:20:f3:f8:c4:4d: f7:f8:22:e5:15:cc:5f:05:76:c7:0f:cf:ff:6d:1b:82:25:12: 39:ae:9b:a7:74:be:fe:d9:d3:83:25:bb:70:e2:36:56:f0:a0: 85:c2:11:2d:5e:f5:ec:30:e6:d7:3a:2a:95:39:92:3b:cc:63: dd:89:e6:96:3e:8f:12:51:5e:00:1e:5f:a2:d0:fd:fe:79:ac: 0f:7d:59:c6:9c:f2:82:65:5c:9b:d2:f8:e3:69:71:f7:f7:8a: c7:79:fa:80:67:59:d1:e7:13:7b:e4:ee:16:f2:c4:17:f9:3f: be:02:76:ca:ac:5c:bd:c5:01:51:5c:9f:f3:09:59:fb:9e:1f: 8f:d6:f7:30:ce:66:99:95:23:7f:17:1b:fa:2f:9c:25:8b:d3: 94:9a:61:43:d8:c1:5e:c6:21:3d:fb:54:eb:5f:b7:fa:8b:07: e9:a7:96:c6:38:aa:48:4f:ff:17:5f:8d:c9:8e:0e:27:54:fc: f7:e9:37:0b:7a:91:6b:1c:07:10:ea:ba:ed:4f:a8:9c:01:da: a8:64:5b:2e:64:e0:2d:b8:e7:c4:3a:a0:d5:1a:65:79:1f:87: 2f:81:3d:38:da:dd:a5:05:16:de:f3:c7:be:aa:24:c4:ff:b0: f4:1b:21:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupSY533DQLBrJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTNjMDA5NzMtYmZlMy00ZjA0LThjZTYtZDRkNjA0MDI3YjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvkrUdJ4G2mGPhE0wctn/3Zua0MTKIHkRh14 1GevVl5SAaDJ9PZy/p9zJyvJv3/lJKIJfc8/iyCbh+/DB987bpLBepRBxA4mE7Kg 36s46caIUy8WNGmyBvwQPZqTg/N+bsX/KoYMcGVwXlZ+ZRY4ox8LQorYSc458Ts3 EBpzrscq2ytke4y7kVwm9npSZEiz0m3Nle0z8tSliV3t9rAJq2npI5WN2aMUM86K yUta0YtLUWVCK7P3w7c74+8R90jnz1YPSws4cXKPKcxAfSDVGHoOFMOfQBO2o5dx RCC/tzNOfFxhWz3UATUR/hKvYk33oE9wkZi6fgbiTzprd98z/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEoB5wpnMQqMcwrU5UQ9XK2lfERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM4ZjY3YTQtNTBmNi0z NzVhLThiZGMtNjQ4YzIwYTg1NzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMe4tzkG4XDUazLdVT8g8/jETff4IuUVzF8FdscPz/9tG4IlEjmum6d0 vv7Z04Mlu3DiNlbwoIXCES1e9eww5tc6KpU5kjvMY92J5pY+jxJRXgAeX6LQ/f55 rA99Wcac8oJlXJvS+ONpcff3isd5+oBnWdHnE3vk7hbyxBf5P74CdsqsXL3FAVFc n/MJWfueH4/W9zDOZpmVI38XG/ovnCWL05SaYUPYwV7GIT37VOtft/qLB+mnlsY4 qkhP/xdfjcmODidU/PfpNwt6kWscBxDquu1PqJwB2qhkWy5k4C2458Q6oNUaZXkf hy+BPTja3aUFFt7zx76qJMT/sPQbIXY= -----END CERTIFICATE-----Generated at Thu May 8 04:53:31 2025 by rpki-client