$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fa093cd-4f88-3ca8-bed1-9450d9b05bd3.roa File: 4fa093cd-4f88-3ca8-bed1-9450d9b05bd3.roa (raw, json) Hash identifier: I+at0/4piJowfgcVx12aX2qxtEEKXraxAovpA6KQh4Y= Subject key identifier: 4A:FD:F0:B0:24:E0:3A:01:D0:25:5C:9E:E9:A9:11:3C:DB:AA:53:4B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3399A70A21C3A231F480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fa093cd-4f88-3ca8-bed1-9450d9b05bd3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:33:99:a7:0a:21:c3:a2:31:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a3c2e9dc-ff7f-4c5a-9fa4-7b070a3ff20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:5f:a9:ff:01:56:32:f1:f4:42:4f:5c:95: 5c:d3:90:3c:2c:34:5e:95:62:4d:ef:9e:15:a4:5a: af:ab:8b:6e:33:63:77:6f:69:56:66:7e:63:05:90: 33:f6:bd:86:a1:2e:b0:68:da:0a:9b:8f:68:22:67: 31:b6:a2:ba:b2:6f:24:07:9e:13:0b:a7:a0:27:c5: 21:f8:93:54:11:61:1a:2d:13:f6:aa:94:c7:18:e3: 22:3c:37:26:a5:51:24:27:d5:3e:a1:8a:1e:d4:1c: 88:72:b9:4d:22:c8:10:b1:b7:c7:2b:57:4a:df:a3: 2a:34:a3:54:b9:90:11:30:1f:ec:87:cd:98:a7:75: 89:86:f6:ba:f2:52:a8:c3:ff:b3:13:a6:06:3a:4e: a8:d5:e4:9d:ce:d9:03:4a:93:7d:1c:a2:72:a9:87: 80:53:f1:32:db:4e:1d:ab:b9:e3:fc:f3:5d:5e:a9: 22:a6:cb:5a:fe:e9:e8:2e:3d:d0:b1:fe:43:a5:ca: 01:cf:d3:07:fc:61:f0:40:d4:71:cb:d6:bb:b8:3e: 3c:18:e0:62:d2:ec:a3:50:17:e1:34:83:fe:d8:0b: c6:57:e3:64:37:e3:2b:24:e5:7b:73:a3:28:44:a4: c7:d9:8f:b4:aa:f8:fe:cf:65:1c:5d:53:93:c8:a2: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FD:F0:B0:24:E0:3A:01:D0:25:5C:9E:E9:A9:11:3C:DB:AA:53:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4fa093cd-4f88-3ca8-bed1-9450d9b05bd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7b:b2:7a:38:df:8c:34:4c:c0:be:07:8a:47:4c:58:84:48: fd:03:3a:6d:af:14:7f:ae:fb:6d:3f:13:b5:2e:b7:65:76:0b: 7c:4d:08:a4:8c:9b:d2:13:35:5a:b1:b0:5e:33:66:0f:05:2d: a2:9a:dc:b0:e2:a0:18:b2:db:f7:ee:22:f2:fa:c7:17:fd:10: 71:94:c3:02:87:f0:a5:78:e5:7d:e4:f3:37:7b:be:2d:47:63: f6:bf:42:3e:2f:da:7b:66:8b:f9:34:46:fe:01:00:37:20:24: 2e:5a:b3:88:cd:0c:ef:8e:fe:69:25:fb:3d:ea:9a:30:1c:2b: 89:b4:f4:b6:6f:67:31:36:76:75:94:9b:e5:88:2c:37:98:8a: e5:e0:31:e7:28:ee:5c:61:6b:55:f1:fd:18:6a:b8:29:15:34: 30:09:ee:dd:ec:0d:d4:77:31:87:7e:41:9c:ca:97:f1:fa:5d: bd:e3:a9:be:85:3d:fc:a1:78:90:75:76:c0:38:29:4a:b1:e1: b2:f4:9d:e8:31:1c:a0:2c:23:6e:33:0b:aa:c6:f9:90:3d:8f: 45:34:3c:5d:95:db:db:da:2c:01:48:ef:3b:02:77:f6:bf:00: ae:92:ac:e9:d4:f0:ef:b2:d8:3c:99:0c:64:98:42:46:ac:df: 6a:3c:86:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzOZpwohw6Ix9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTNjMmU5ZGMtZmY3Zi00YzVhLTlmYTQtN2IwNzBhM2ZmMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOFfqf8BVjLx9EJPXJVc05A8LDRelWJN754V pFqvq4tuM2N3b2lWZn5jBZAz9r2GoS6waNoKm49oImcxtqK6sm8kB54TC6egJ8Uh +JNUEWEaLRP2qpTHGOMiPDcmpVEkJ9U+oYoe1ByIcrlNIsgQsbfHK1dK36MqNKNU uZARMB/sh82Yp3WJhva68lKow/+zE6YGOk6o1eSdztkDSpN9HKJyqYeAU/Ey204d q7nj/PNdXqkipsta/unoLj3Qsf5DpcoBz9MH/GHwQNRxy9a7uD48GOBi0uyjUBfh NIP+2AvGV+NkN+MrJOV7c6MoRKTH2Y+0qvj+z2UcXVOTyKK1MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr98LAk4DoB0CVcnumpETzbqlNLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGZhMDkzY2QtNGY4OC0z Y2E4LWJlZDEtOTQ1MGQ5YjA1YmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd7sno434w0TMC+B4pHTFiESP0DOm2vFH+u+20/E7Uut2V2C3xNCKSM m9ITNVqxsF4zZg8FLaKa3LDioBiy2/fuIvL6xxf9EHGUwwKH8KV45X3k8zd7vi1H Y/a/Qj4v2ntmi/k0Rv4BADcgJC5as4jNDO+O/mkl+z3qmjAcK4m09LZvZzE2dnWU m+WILDeYiuXgMeco7lxha1Xx/RhquCkVNDAJ7t3sDdR3MYd+QZzKl/H6Xb3jqb6F PfyheJB1dsA4KUqx4bL0negxHKAsI24zC6rG+ZA9j0U0PF2V29vaLAFI7zsCd/a/ AK6SrOnU8O+y2DyZDGSYQkas32o8hs8= -----END CERTIFICATE-----Generated at Sun May 11 09:07:44 2025 by rpki-client