$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa File: 32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa (raw, json) Hash identifier: Kaos3XZlk3F6y8mcGSod5CVzANGaFMMM7JjjD6LrGXs= Subject key identifier: 48:14:93:08:F3:9D:F6:E0:33:D2:FF:7F:CA:B9:87:8C:53:7F:E5:88 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B567D8B39CE48242100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:56:7d:8b:39:ce:48:24:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d36b7429-3cec-4b8a-952c-bc60449dcebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:b1:47:bd:82:03:a1:be:9f:55:b7:5e:aa: 8c:21:fd:29:d8:1f:fb:fc:76:22:47:41:8d:00:4f: b2:66:52:dc:4f:ad:52:08:e3:97:12:bc:16:da:48: 28:4e:2a:95:ae:52:c7:03:0f:33:46:22:77:e3:53: 86:cf:c3:79:af:23:2a:79:d2:d9:95:4b:13:ad:dc: bc:84:c3:72:5f:03:d1:f1:0c:0b:c5:23:24:6a:79: a6:3d:f6:de:9a:40:7e:c8:df:eb:6b:90:6f:12:17: fc:30:d0:22:c9:23:ef:58:83:06:5b:75:a7:05:ba: 9a:d7:4e:e7:5c:9e:b5:33:49:97:2c:27:f9:99:46: 8e:23:89:1a:7c:aa:13:17:d4:97:4f:d3:dd:b1:5f: 01:c3:1a:04:41:0f:4c:60:48:4e:44:7f:88:12:04: 35:cc:cd:97:99:b4:9e:a1:6e:83:f9:b7:61:67:79: eb:c9:f5:5c:b9:0d:2c:49:34:79:e5:a0:50:99:d8: 88:fa:af:e0:20:f6:92:89:31:7a:ff:33:25:52:e4: 64:9d:7e:c9:b6:1b:3a:c2:e2:46:56:60:a4:a7:b7: ab:09:48:75:b9:e7:2a:b9:c5:94:64:a7:f3:01:dc: fa:3f:b7:db:5f:b5:f4:f3:c2:6b:3e:e2:6a:c2:1f: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:14:93:08:F3:9D:F6:E0:33:D2:FF:7F:CA:B9:87:8C:53:7F:E5:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:75:a4:aa:9d:c1:5e:6e:d7:83:15:cb:86:a4:bb:0c:df:b1: 5b:3b:48:34:aa:9f:6d:c8:96:58:c8:da:7c:18:61:9e:ce:a4: 46:79:90:9c:03:94:38:7a:47:97:38:89:b1:ba:e2:3e:42:4b: dd:43:fd:e1:4b:fb:c9:4d:ee:85:09:98:f9:14:e1:cd:43:89: 78:4d:c2:00:9d:51:44:3c:f7:b9:26:69:56:3f:5a:93:6e:3f: 67:38:2a:31:af:98:71:76:fa:d4:56:54:17:09:56:18:34:85: df:39:cc:d4:44:9b:e5:b1:63:2c:35:b7:15:92:ff:7b:93:ff: d9:cb:20:22:96:a6:17:7e:2f:6d:83:d6:b5:48:51:0a:f3:4c: 08:28:d8:57:7e:a9:e1:a5:03:21:0a:c7:ac:56:f6:69:93:c6: a0:34:1f:64:7d:cf:32:fd:cf:58:19:37:1a:08:96:d5:8d:89: 77:3f:8b:cc:d7:6c:98:18:51:65:45:43:79:0c:3a:c3:14:ae: c3:7b:77:ef:89:7c:7c:0f:a7:31:98:c2:1b:c4:84:c7:e2:a6: e7:32:36:40:f0:8a:22:f5:20:3c:fe:b1:72:d3:92:58:81:3e: fa:56:de:47:e2:65:e1:c6:be:f4:01:b9:59:cc:36:80:c2:6b: 4a:4e:ea:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuztWfYs5zkgkIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDM2Yjc0MjktM2NlYy00YjhhLTk1MmMtYmM2MDQ0OWRjZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAexR72CA6G+n1W3XqqMIf0p2B/7/HYiR0GN AE+yZlLcT61SCOOXErwW2kgoTiqVrlLHAw8zRiJ341OGz8N5ryMqedLZlUsTrdy8 hMNyXwPR8QwLxSMkanmmPfbemkB+yN/ra5BvEhf8MNAiySPvWIMGW3WnBbqa107n XJ61M0mXLCf5mUaOI4kafKoTF9SXT9PdsV8BwxoEQQ9MYEhORH+IEgQ1zM2XmbSe oW6D+bdhZ3nryfVcuQ0sSTR55aBQmdiI+q/gIPaSiTF6/zMlUuRknX7Jths6wuJG VmCkp7erCUh1uecqucWUZKfzAdz6P7fbX7X088JrPuJqwh//ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgUkwjznfbgM9L/f8q5h4xTf+WIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIzMzVlY2QtZWQzNC0z YWFlLTllMjYtZjM1ZDRkMjIwMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH51pKqdwV5u14MVy4akuwzfsVs7SDSqn23IlljI2nwYYZ7OpEZ5kJwD lDh6R5c4ibG64j5CS91D/eFL+8lN7oUJmPkU4c1DiXhNwgCdUUQ897kmaVY/WpNu P2c4KjGvmHF2+tRWVBcJVhg0hd85zNREm+WxYyw1txWS/3uT/9nLICKWphd+L22D 1rVIUQrzTAgo2Fd+qeGlAyEKx6xW9mmTxqA0H2R9zzL9z1gZNxoIltWNiXc/i8zX bJgYUWVFQ3kMOsMUrsN7d++JfHwPpzGYwhvEhMfipucyNkDwiiL1IDz+sXLTkliB PvpW3kfiZeHGvvQBuVnMNoDCa0pO6l8= -----END CERTIFICATE-----Generated at Sun May 11 01:08:41 2025 by rpki-client