$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa File: 3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa (raw, json) Hash identifier: q+4x7s8tVkSf4UvrSeeLj/0BigU2CZJIvaBxMnOmHU4= Subject key identifier: 43:54:FF:D6:D4:32:05:2E:A3:4B:3D:A0:6D:01:D3:AA:37:A4:46:6F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA982C85B8AE734D5BA780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:98:2c:85:b8:ae:73:4d:5b:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=dc7d88f8-49fb-463f-9245-0b1ed6e0395e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:c9:63:96:09:10:0b:9c:e3:d2:ae:ed:fb: b8:e7:22:9b:b6:b9:62:fd:35:79:4c:0d:61:8c:58: 0c:c2:8b:27:6e:26:16:71:5d:a8:ab:f4:79:d7:aa: a3:57:ca:eb:af:bb:6a:fe:0f:7d:f9:c0:22:1d:49: 6a:9f:31:1b:a3:d5:24:13:73:b5:ab:94:f2:35:f3: 03:45:92:f5:99:a6:ea:ef:e7:e4:f1:39:97:8b:c8: cf:d2:95:64:9d:51:dc:e0:db:d1:c5:ce:88:b6:55: ee:0e:ac:5c:09:7d:f5:5a:10:d1:29:1d:19:13:ba: 4c:1e:c3:c7:da:eb:4e:f6:62:42:09:13:06:98:3d: 42:00:9f:3a:58:b2:2e:96:06:62:62:8a:a1:6d:48: 63:56:6f:59:ed:bc:f1:7f:e7:c0:8a:16:c4:54:e8: 22:e3:11:a7:ac:38:fd:2a:ac:9a:22:2e:bc:0a:24: 04:86:df:29:2e:0a:0a:21:2d:bd:27:17:2a:2f:d7: 85:3b:0c:ae:9e:38:3f:05:40:82:4d:34:91:37:65: 2d:f3:6a:6a:fa:7c:2b:61:d2:2c:81:ca:4c:1e:69: 69:8e:32:d1:c8:53:10:52:20:e8:f9:38:41:70:5e: a4:49:12:0f:99:12:58:b9:0f:8e:72:cc:46:fd:36: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:54:FF:D6:D4:32:05:2E:A3:4B:3D:A0:6D:01:D3:AA:37:A4:46:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e1:d8:52:d8:f4:b6:d9:a4:b0:8f:f4:84:49:e1:c2:54:43: 00:ec:97:1c:fa:26:75:4b:40:74:7e:be:17:d6:6f:0b:4c:28: 2d:e6:f2:30:d0:5e:c6:bf:0d:d9:8d:21:a5:b3:d7:8d:56:31: 86:7f:98:8d:58:36:e4:da:0e:20:00:3c:0e:c0:7d:fe:17:7f: 3d:ed:dc:bd:e6:4e:43:f3:22:96:09:8e:31:e1:ee:76:a7:c6: b5:cc:e2:4e:52:4b:dd:d5:e2:d5:9f:fb:0e:ed:f4:37:73:e8: 43:71:fd:ab:14:95:cc:98:b0:ed:74:90:78:54:71:7b:69:34: 19:59:72:f5:d8:bf:5c:0b:cf:e0:49:94:f1:0e:e9:a9:b9:ef: 7c:3d:3e:76:77:ee:89:e3:ef:32:ec:c8:cb:99:81:7a:44:37: e3:64:46:05:0c:85:59:23:11:b1:ad:cf:67:3a:61:ef:e7:52: 4c:cf:5c:f5:36:5f:31:3c:ba:8c:7d:30:b2:5f:99:aa:3a:53: 9e:1b:aa:f0:50:f5:eb:f4:c8:3f:31:78:d2:ed:47:63:4c:04: aa:90:ba:60:2c:4a:06:56:1a:0b:f1:53:81:97:49:54:ea:36: 98:22:84:34:63:96:78:54:da:3f:9c:4c:bb:0d:5e:93:13:d6: 20:52:05:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupgshbiuc01bp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGM3ZDg4ZjgtNDlmYi00NjNmLTkyNDUtMGIxZWQ2ZTAzOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT3JY5YJEAuc49Ku7fu45yKbtrli/TV5TA1h jFgMwosnbiYWcV2oq/R516qjV8rrr7tq/g99+cAiHUlqnzEbo9UkE3O1q5TyNfMD RZL1mabq7+fk8TmXi8jP0pVknVHc4NvRxc6ItlXuDqxcCX31WhDRKR0ZE7pMHsPH 2utO9mJCCRMGmD1CAJ86WLIulgZiYoqhbUhjVm9Z7bzxf+fAihbEVOgi4xGnrDj9 KqyaIi68CiQEht8pLgoKIS29JxcqL9eFOwyunjg/BUCCTTSRN2Ut82pq+nwrYdIs gcpMHmlpjjLRyFMQUiDo+ThBcF6kSRIPmRJYuQ+OcsxG/TYztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENU/9bUMgUuo0s9oG0B06o3pEZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2YzZTBiYmYtNjU4NC0z YTRiLTliNDctOWE0ZGRjMjNiNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXh2FLY9LbZpLCP9IRJ4cJUQwDslxz6JnVLQHR+vhfWbwtMKC3m8jDQ Xsa/DdmNIaWz141WMYZ/mI1YNuTaDiAAPA7Aff4Xfz3t3L3mTkPzIpYJjjHh7nan xrXM4k5SS93V4tWf+w7t9Ddz6ENx/asUlcyYsO10kHhUcXtpNBlZcvXYv1wLz+BJ lPEO6am573w9PnZ37onj7zLsyMuZgXpEN+NkRgUMhVkjEbGtz2c6Ye/nUkzPXPU2 XzE8uox9MLJfmao6U54bqvBQ9ev0yD8xeNLtR2NMBKqQumAsSgZWGgvxU4GXSVTq NpgihDRjlnhU2j+cTLsNXpMT1iBSBf0= -----END CERTIFICATE-----Generated at Thu May 8 03:03:18 2025 by rpki-client