$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/767325d8-0651-3a4a-9c01-3c9451c12937.roa File: 767325d8-0651-3a4a-9c01-3c9451c12937.roa (raw, json) Hash identifier: g5Hb9qh2b6xSGWer4ZuhTBOs51EodH8hiCm0EXkCwKk= Subject key identifier: 17:C7:FA:96:EC:0B:D7:7D:1F:37:F4:BB:EB:AE:5B:F9:08:7C:73:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA95CD5ED99A3FC7534580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/767325d8-0651-3a4a-9c01-3c9451c12937.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:95:cd:5e:d9:9a:3f:c7:53:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=171a9f42-3fbf-4424-a82e-e320159289ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:51:c7:b4:d6:0d:de:69:e5:3b:e4:9e:5d: 69:9e:26:b0:77:38:e6:49:cc:d8:36:59:97:57:29: 66:69:09:05:b6:d7:e8:32:9c:76:5d:59:3c:b9:49: 9e:12:f2:7a:41:99:cb:d6:cf:09:83:d6:aa:f4:79: 6a:4c:68:28:71:e6:18:d2:18:5f:07:76:d4:8f:1d: 95:96:56:93:84:85:e4:fb:7f:0c:d6:0a:97:a8:70: 26:d2:a1:84:cb:ff:60:c1:35:f0:20:af:3f:6a:3a: d3:49:a4:48:e9:cc:04:35:79:c0:6f:11:8f:29:00: df:89:f9:01:78:72:fe:2d:75:43:b9:af:2a:32:6c: e2:c8:57:34:56:9f:30:46:6c:22:50:e6:5f:01:ec: 21:42:fe:e7:04:10:c8:6f:7d:34:2b:28:7e:a8:a4: c5:2b:ab:68:50:5f:99:f5:20:10:6b:ef:3c:11:47: 2d:b3:2f:ce:a4:36:e1:16:62:94:f6:b4:50:1c:89: 17:df:d1:a1:69:0b:c6:bc:0e:74:78:27:56:48:d8: c1:e6:f5:a6:88:0a:2f:5d:79:25:f6:b8:04:67:db: 28:4b:62:7c:dc:21:83:43:ec:45:61:1c:d0:ad:49: c9:1a:fe:76:5f:c9:a7:a6:0d:32:18:2a:0f:55:64: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C7:FA:96:EC:0B:D7:7D:1F:37:F4:BB:EB:AE:5B:F9:08:7C:73:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/767325d8-0651-3a4a-9c01-3c9451c12937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e0:a9:7e:ce:67:68:ab:b7:59:ab:93:ae:64:76:3c:31:9c: 66:07:03:df:81:aa:30:ef:2a:f5:2c:4e:30:00:8a:63:22:aa: bc:5a:f3:8b:53:e6:72:fe:60:bd:61:0f:40:88:b2:07:70:6d: e4:da:c1:71:6f:3e:47:c7:f2:fb:fc:ce:f7:b6:2f:f4:c9:56: 92:2c:f0:44:bb:7b:7c:9c:29:7d:77:72:e1:7e:cf:2b:c9:6f: da:0b:1b:9d:b4:a7:19:0a:cf:39:ea:56:90:51:51:2e:7c:d9: 56:93:0d:b6:be:b8:de:68:8a:e3:91:2d:c9:72:88:15:bf:01: 77:b6:d2:c9:95:fd:9e:dc:5d:e0:15:5b:2d:fa:55:cb:92:31: cc:b6:7a:8e:7d:3c:57:cc:02:36:d7:df:44:0f:34:d3:72:91: da:4d:62:93:36:06:ca:24:57:a0:26:72:c1:8a:1a:53:f1:a8: dd:76:05:d1:d0:ce:b0:1a:98:fc:4a:22:11:dd:d6:97:21:ce: 9c:a3:1a:e0:fc:fa:57:00:0d:03:c0:1c:90:ab:74:97:36:8b: 71:9c:b4:33:12:35:de:21:6c:85:42:1e:47:72:8c:83:57:ac: 4c:77:37:b3:5c:1d:68:31:5f:8d:4a:e4:63:64:58:4c:2c:6f: 04:4e:10:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupXNXtmaP8dTRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTcxYTlmNDItM2ZiZi00NDI0LWE4MmUtZTMyMDE1OTI4OWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqJRx7TWDd5p5Tvknl1pniawdzjmSczYNlmX VylmaQkFttfoMpx2XVk8uUmeEvJ6QZnL1s8Jg9aq9HlqTGgoceYY0hhfB3bUjx2V llaThIXk+38M1gqXqHAm0qGEy/9gwTXwIK8/ajrTSaRI6cwENXnAbxGPKQDfifkB eHL+LXVDua8qMmziyFc0Vp8wRmwiUOZfAewhQv7nBBDIb300Kyh+qKTFK6toUF+Z 9SAQa+88EUctsy/OpDbhFmKU9rRQHIkX39GhaQvGvA50eCdWSNjB5vWmiAovXXkl 9rgEZ9soS2J83CGDQ+xFYRzQrUnJGv52X8mnpg0yGCoPVWQtWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfH+pbsC9d9Hzf0u+uuW/kIfHP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzY3MzI1ZDgtMDY1MS0z YTRhLTljMDEtM2M5NDUxYzEyOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbgqX7OZ2irt1mrk65kdjwxnGYHA9+BqjDvKvUsTjAAimMiqrxa84tT 5nL+YL1hD0CIsgdwbeTawXFvPkfH8vv8zve2L/TJVpIs8ES7e3ycKX13cuF+zyvJ b9oLG520pxkKzznqVpBRUS582VaTDba+uN5oiuORLclyiBW/AXe20smV/Z7cXeAV Wy36VcuSMcy2eo59PFfMAjbX30QPNNNykdpNYpM2BsokV6AmcsGKGlPxqN12BdHQ zrAamPxKIhHd1pchzpyjGuD8+lcADQPAHJCrdJc2i3GctDMSNd4hbIVCHkdyjINX rEx3N7NcHWgxX41K5GNkWEwsbwROECM= -----END CERTIFICATE-----Generated at Sun May 11 04:33:48 2025 by rpki-client