$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5df3a7fd-61a7-3250-8c36-0f4508465895.roa File: 5df3a7fd-61a7-3250-8c36-0f4508465895.roa (raw, json) Hash identifier: 80r2P4fBDWct678VIbYr9HfGJMwUzcOgqJei+45DV0M= Subject key identifier: 40:50:9E:06:FD:AA:DB:39:C9:B4:FC:51:32:BA:47:AB:92:3D:04:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B87D0C1C184C5613900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5df3a7fd-61a7-3250-8c36-0f4508465895.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:87:d0:c1:c1:84:c5:61:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=dd0a8304-59ed-4cf5-9dcd-c96d9a73c066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:e0:f3:c2:ff:a0:79:9f:c3:bc:41:42:6e: 4a:97:14:97:01:22:a7:7b:4d:7e:66:1a:56:fa:db: cc:50:08:9a:b0:ab:e6:20:56:78:64:1f:a5:61:f6: 1e:1f:77:e6:4a:72:db:c0:47:fc:cb:f1:91:09:95: f9:ca:f2:c8:f2:c7:1b:ed:26:96:2e:ea:95:85:72: 70:0c:a7:dd:d6:e6:f3:27:24:32:c5:9d:8d:88:3b: fd:b1:d1:f2:0b:96:bf:b3:f5:40:be:c8:39:7a:68: 36:b6:b7:04:9b:0f:61:ab:08:ea:b3:1c:9d:45:c4: 28:fe:0d:3c:d6:8d:84:50:c1:37:f1:3a:e1:54:11: 71:2c:9c:c9:0d:a5:96:ef:f8:a6:33:0f:27:f8:79: 2a:35:56:bd:ec:30:19:49:69:17:cd:69:c8:53:55: 67:3c:81:e3:b9:98:b9:69:5e:bd:9b:29:3a:ac:01: b8:4c:8f:ae:a9:8f:7d:65:95:0f:91:d2:64:bd:a7: 17:8b:4f:6a:15:16:f8:db:9b:33:bd:93:f2:ae:cf: 98:65:ce:10:40:6b:0d:88:d1:77:c3:cc:06:c6:6e: 22:ee:57:28:4e:01:77:7e:bf:e9:d8:1c:03:2f:b4: e8:c3:a1:2f:1f:99:d8:d5:51:21:47:e2:0f:46:62: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:50:9E:06:FD:AA:DB:39:C9:B4:FC:51:32:BA:47:AB:92:3D:04:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5df3a7fd-61a7-3250-8c36-0f4508465895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:0e:5f:b3:22:88:cb:04:b8:c5:9f:be:2c:82:e2:17:5b:05: 29:5e:fb:62:c0:f0:73:43:b9:5f:49:bc:d5:47:ff:60:9b:08: 1a:63:91:ca:d8:e7:fc:be:f2:37:e9:3f:c6:c9:69:75:14:4e: 30:c0:55:07:12:14:e6:8e:8a:07:3d:41:ce:4e:e9:e2:e4:97: ca:c1:d9:eb:38:59:03:64:e7:be:62:c8:bb:60:0c:da:31:4d: e6:c4:d1:77:a5:75:79:0a:19:15:18:fb:18:70:1b:5b:4e:47: 99:6d:53:86:96:7d:d1:c9:a1:a4:59:31:6a:61:be:61:cf:42: a6:8b:10:20:d4:44:81:92:14:2b:8d:c0:e6:e9:3e:89:fa:6e: b4:18:3e:d3:93:f7:29:8c:18:58:e3:28:37:cf:1c:2d:cc:f0: 81:0a:04:b6:bb:5d:de:00:7b:75:06:9c:f1:32:b1:01:d9:14: b4:28:13:8e:e4:64:e5:90:00:47:72:25:01:dc:fc:9d:0c:57: b3:7e:cc:9d:e5:ff:a4:dd:67:e4:40:90:39:25:d2:c5:76:01: 2a:53:05:93:9b:8f:6b:06:0f:89:33:9a:02:0f:02:b4:e0:03: f6:e0:ad:d7:b6:d1:44:68:28:a0:d8:3b:c3:d9:3e:7e:c7:38: ce:3f:9c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzuH0MHBhMVhOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGQwYTgzMDQtNTllZC00Y2Y1LTlkY2QtYzk2ZDlhNzNjMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYPg88L/oHmfw7xBQm5KlxSXASKne01+ZhpW +tvMUAiasKvmIFZ4ZB+lYfYeH3fmSnLbwEf8y/GRCZX5yvLI8scb7SaWLuqVhXJw DKfd1ubzJyQyxZ2NiDv9sdHyC5a/s/VAvsg5emg2trcEmw9hqwjqsxydRcQo/g08 1o2EUME38TrhVBFxLJzJDaWW7/imMw8n+HkqNVa97DAZSWkXzWnIU1VnPIHjuZi5 aV69myk6rAG4TI+uqY99ZZUPkdJkvacXi09qFRb425szvZPyrs+YZc4QQGsNiNF3 w8wGxm4i7lcoTgF3fr/p2BwDL7Tow6EvH5nY1VEhR+IPRmJ/FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBQngb9qts5ybT8UTK6R6uSPQRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWRmM2E3ZmQtNjFhNy0z MjUwLThjMzYtMGY0NTA4NDY1ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMOX7MiiMsEuMWfviyC4hdbBSle+2LA8HNDuV9JvNVH/2CbCBpjkcrY 5/y+8jfpP8bJaXUUTjDAVQcSFOaOigc9Qc5O6eLkl8rB2es4WQNk575iyLtgDNox TebE0XeldXkKGRUY+xhwG1tOR5ltU4aWfdHJoaRZMWphvmHPQqaLECDURIGSFCuN wObpPon6brQYPtOT9ymMGFjjKDfPHC3M8IEKBLa7Xd4Ae3UGnPEysQHZFLQoE47k ZOWQAEdyJQHc/J0MV7N+zJ3l/6TdZ+RAkDkl0sV2ASpTBZObj2sGD4kzmgIPArTg A/bgrde20URoKKDYO8PZPn7HOM4/nOs= -----END CERTIFICATE-----Generated at Sun May 11 04:40:11 2025 by rpki-client