$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ea1895-da0b-3db1-9734-0ba63257dfa5.roa File: 27ea1895-da0b-3db1-9734-0ba63257dfa5.roa (raw, json) Hash identifier: /RE8n2YMChnsn3jEA0Fx59dKBwlNR0mJP+X0MEDT0sc= Subject key identifier: B5:97:47:1E:C2:7B:4B:08:68:26:F3:6A:E9:DE:69:3D:C2:F7:5F:9C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB375CEFCECF6898E5EC40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ea1895-da0b-3db1-9734-0ba63257dfa5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:37:5c:ef:ce:cf:68:98:e5:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=41808a46-68f5-4bf2-aab7-3c9d27a6cd71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:02:80:50:6b:c6:f7:68:c2:0c:42:a4:37: b4:0c:0b:5d:48:af:66:2d:0f:36:56:50:a4:06:64: 7b:08:97:04:7f:e5:68:71:1d:56:72:94:b6:b9:66: 11:3e:d4:49:bd:ca:cb:a2:01:03:e3:60:59:81:2d: 4d:4b:df:3d:d8:b0:22:7e:03:0a:b7:37:36:ac:2d: a4:7b:fb:f2:6a:61:9c:3a:85:56:f8:ee:dc:db:d7: d8:30:65:98:bd:58:39:3b:aa:45:e4:a8:b1:17:94: 55:e6:8d:53:20:46:f7:80:b0:4c:46:07:38:8c:01: a0:be:33:4d:e8:86:77:88:04:71:fb:17:34:e2:5b: b6:5b:58:8e:53:b9:19:37:fa:2c:cb:c7:42:02:b7: f0:4b:a8:65:8a:13:93:b8:23:90:3f:1a:6b:78:56: dd:b6:db:17:a2:34:69:09:41:58:61:df:9f:12:17: a9:16:9d:7c:d5:14:ab:66:bc:a4:ab:49:a1:a6:76: 82:3e:0f:b7:4c:b7:91:90:dd:12:a5:e9:af:e1:4e: 93:cc:c5:2a:8a:39:12:07:50:63:ce:cf:35:83:60: 03:fc:af:a3:a9:21:a3:12:fd:60:4a:56:7e:b5:43: b9:d6:b7:d2:3f:6b:64:4c:09:b1:df:f6:ce:38:5d: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:97:47:1E:C2:7B:4B:08:68:26:F3:6A:E9:DE:69:3D:C2:F7:5F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27ea1895-da0b-3db1-9734-0ba63257dfa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:83:12:db:d2:42:c4:bc:97:5e:8a:c4:12:ae:39:ed:29:ed: 51:f4:32:c0:d3:f7:be:fb:63:40:c3:4a:d6:72:c2:ba:54:f5: ad:16:c1:29:64:e7:2a:04:63:fe:89:93:e2:a1:07:8c:0e:e8: d2:f7:27:b9:15:8f:79:3f:cf:d1:26:a0:15:f7:10:a2:3b:ca: 1c:19:5c:7c:da:05:8c:18:ce:13:0e:35:8a:98:e5:cb:ca:bb: 78:9e:f5:39:d2:8a:d4:2c:a6:f9:42:8a:12:b2:e3:c4:d0:02: 0c:bd:d3:8c:71:a3:dd:2f:c3:2c:a1:96:f1:6d:9c:40:d4:9c: 1b:2d:f4:2e:62:8e:83:a7:4a:a7:19:4c:9b:0a:6b:54:b1:91: 18:ef:1b:3a:a4:68:6a:9a:2b:29:ad:e5:d6:ab:b8:36:12:f9: 82:33:2f:98:60:79:cd:c5:75:f3:50:b0:2c:e8:50:b2:8f:ee: 74:11:40:b3:a9:19:eb:4b:0d:b4:14:6f:7a:94:9d:db:5e:6b: 81:07:77:57:86:6f:93:88:ad:0e:cc:5c:df:d8:df:37:d9:6c: 91:20:d9:22:0e:4b:a8:96:ac:ba:bd:c9:be:a4:2f:9f:d9:f9: 71:6a:1b:06:52:e2:df:82:5b:88:11:97:87:a6:8d:0c:bd:96: 5c:f1:46:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzdc787PaJjl7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDE4MDhhNDYtNjhmNS00YmYyLWFhYjctM2M5ZDI3YTZjZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS4CgFBrxvdowgxCpDe0DAtdSK9mLQ82VlCk BmR7CJcEf+VocR1WcpS2uWYRPtRJvcrLogED42BZgS1NS9892LAifgMKtzc2rC2k e/vyamGcOoVW+O7c29fYMGWYvVg5O6pF5KixF5RV5o1TIEb3gLBMRgc4jAGgvjNN 6IZ3iARx+xc04lu2W1iOU7kZN/osy8dCArfwS6hlihOTuCOQPxpreFbdttsXojRp CUFYYd+fEhepFp181RSrZrykq0mhpnaCPg+3TLeRkN0Spemv4U6TzMUqijkSB1Bj zs81g2AD/K+jqSGjEv1gSlZ+tUO51rfSP2tkTAmx3/bOOF0GmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWXRx7Ce0sIaCbzauneaT3C91+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjdlYTE4OTUtZGEwYi0z ZGIxLTk3MzQtMGJhNjMyNTdkZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuDEtvSQsS8l16KxBKuOe0p7VH0MsDT9777Y0DDStZywrpU9a0WwSlk 5yoEY/6Jk+KhB4wO6NL3J7kVj3k/z9EmoBX3EKI7yhwZXHzaBYwYzhMONYqY5cvK u3ie9TnSitQspvlCihKy48TQAgy904xxo90vwyyhlvFtnEDUnBst9C5ijoOnSqcZ TJsKa1SxkRjvGzqkaGqaKymt5daruDYS+YIzL5hgec3FdfNQsCzoULKP7nQRQLOp GetLDbQUb3qUndtea4EHd1eGb5OIrQ7MXN/Y3zfZbJEg2SIOS6iWrLq9yb6kL5/Z +XFqGwZS4t+CW4gRl4emjQy9llzxRjU= -----END CERTIFICATE-----Generated at Sun May 11 15:56:44 2025 by rpki-client