$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8013cf9e-5867-39f1-921f-f352a9abcde1.roa File: 8013cf9e-5867-39f1-921f-f352a9abcde1.roa (raw, json) Hash identifier: aJDELr3wITcGbXrdyKlbOPPMeecJcOtfqR9YHgahbOg= Subject key identifier: 5F:7E:A5:C3:73:C3:2F:27:BC:AF:DF:7E:08:DB:97:1E:2C:99:79:BA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB37DDFB59F7C4EC0E7A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8013cf9e-5867-39f1-921f-f352a9abcde1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:37:dd:fb:59:f7:c4:ec:0e:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e2b9b973-7069-4120-aabc-e45752b5da9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:80:8e:05:be:76:73:1b:2b:47:d3:cd:e5: b5:3a:e1:83:7b:92:4b:36:b6:87:a4:7a:0b:73:64: f8:f4:37:72:47:94:14:e4:9c:75:bc:66:98:26:90: 37:4b:f5:8c:bd:6f:69:88:2a:c7:75:a5:74:45:86: 23:cd:8e:7d:fb:4d:83:fe:b4:a3:a1:fa:07:85:62: 2f:b2:57:e4:15:42:61:a3:9e:d6:ba:0a:7c:a8:b8: 17:e9:4a:21:08:1c:ed:de:04:f0:32:27:cc:23:6a: 13:24:9a:c9:35:fe:62:42:f8:3c:15:cc:a9:73:38: 77:94:24:ee:66:a7:58:0c:ad:a3:6f:72:c6:14:18: ef:9b:67:13:68:b0:81:81:90:5d:62:60:fb:54:5e: f5:d3:31:10:7a:54:90:08:01:fa:48:9d:1b:01:2b: b6:97:14:27:88:8a:2d:68:0b:f5:80:00:25:b4:b3: 08:e4:dc:bd:e2:60:cf:7a:bc:63:80:3f:1e:14:94: a6:3b:ee:3f:22:1c:bc:0a:4a:ba:14:0e:32:b2:53: 46:53:04:a4:81:07:ef:82:07:ff:f9:fc:da:0c:62: d9:7a:6c:ec:f5:92:be:e8:36:fc:12:26:88:c3:4c: 5a:2f:b8:6e:3f:2f:11:0c:65:9c:5f:bd:09:44:7f: da:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7E:A5:C3:73:C3:2F:27:BC:AF:DF:7E:08:DB:97:1E:2C:99:79:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8013cf9e-5867-39f1-921f-f352a9abcde1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:19:b6:20:46:6a:0d:b9:d2:d0:1a:c1:8c:54:b4:3e:a7:f1: 2b:32:2f:a4:68:f6:3f:88:c6:b3:93:02:a0:13:cd:ae:3b:8e: 0a:dd:09:ff:57:b1:69:f2:ff:05:41:1e:de:18:51:68:41:5a: f1:4c:45:85:11:3c:fc:37:81:fb:ce:4d:6c:8c:92:00:58:83: ab:b6:ae:2d:30:29:01:c8:3b:1c:1e:96:5c:a7:2a:a8:e4:36: e9:79:58:98:80:d4:6a:b6:5d:44:0d:95:15:f4:9b:f9:45:0b: 65:fa:aa:5f:94:e1:ef:70:b0:61:e0:47:3a:4e:14:c8:a4:4b: e3:e3:32:fb:7b:60:1a:b3:d7:95:78:7b:a5:3e:87:5c:a4:39: 00:9c:a8:60:72:8c:83:bf:9f:b5:1d:7b:7c:97:6f:8f:7c:6c: 49:44:a2:7e:32:7d:e8:55:51:4e:6f:58:34:69:58:a2:0d:a2: ae:01:5a:08:6e:9f:9b:45:6e:3a:c7:a5:1b:d1:68:41:07:d5: 85:d5:77:f2:b5:e4:eb:5a:ca:95:c6:ac:c1:ec:64:14:3a:58: 81:2f:72:43:99:e1:1a:59:c7:5e:00:99:3d:fe:b9:7b:41:50: 36:d8:ba:84:09:52:f3:28:1f:25:86:d4:26:b4:c7:96:64:47: 34:f6:ea:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzfd+1n3xOwOeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTJiOWI5NzMtNzA2OS00MTIwLWFhYmMtZTQ1NzUyYjVkYTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp12AjgW+dnMbK0fTzeW1OuGDe5JLNraHpHoL c2T49DdyR5QU5Jx1vGaYJpA3S/WMvW9piCrHdaV0RYYjzY59+02D/rSjofoHhWIv slfkFUJho57Wugp8qLgX6UohCBzt3gTwMifMI2oTJJrJNf5iQvg8Fcypczh3lCTu ZqdYDK2jb3LGFBjvm2cTaLCBgZBdYmD7VF710zEQelSQCAH6SJ0bASu2lxQniIot aAv1gAAltLMI5Ny94mDPerxjgD8eFJSmO+4/Ihy8Ckq6FA4yslNGUwSkgQfvggf/ +fzaDGLZemzs9ZK+6Db8EiaIw0xaL7huPy8RDGWcX70JRH/auwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9+pcNzwy8nvK/ffgjblx4smXm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODAxM2NmOWUtNTg2Ny0z OWYxLTkyMWYtZjM1MmE5YWJjZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMZtiBGag250tAawYxUtD6n8SsyL6Ro9j+IxrOTAqATza47jgrdCf9X sWny/wVBHt4YUWhBWvFMRYURPPw3gfvOTWyMkgBYg6u2ri0wKQHIOxwellynKqjk Nul5WJiA1Gq2XUQNlRX0m/lFC2X6ql+U4e9wsGHgRzpOFMikS+PjMvt7YBqz15V4 e6U+h1ykOQCcqGByjIO/n7Ude3yXb498bElEon4yfehVUU5vWDRpWKINoq4BWghu n5tFbjrHpRvRaEEH1YXVd/K15OtaypXGrMHsZBQ6WIEvckOZ4RpZx14AmT3+uXtB UDbYuoQJUvMoHyWG1Ca0x5ZkRzT26lQ= -----END CERTIFICATE-----Generated at Thu May 8 17:01:13 2025 by rpki-client