$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/808b4569-30df-38ab-b1f3-078d1385dc99.roa File: 808b4569-30df-38ab-b1f3-078d1385dc99.roa (raw, json) Hash identifier: FSxmHrZ+5MzdWJwpXND5xcN3lRKCJ+n5ZU8Y3WuAaVw= Subject key identifier: CD:CC:A2:F0:CA:06:D8:A6:1A:38:79:CE:FF:9B:89:84:4C:DE:0C:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB34D97BD4FE60AA76EF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/808b4569-30df-38ab-b1f3-078d1385dc99.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:34:d9:7b:d4:fe:60:aa:76:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4bd48003-4913-408e-ae4c-1f0556e40fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:73:c1:95:0d:a8:84:4e:54:1d:ec:35:36:2e: a2:9b:de:f1:9c:5b:11:e1:1e:32:9e:e2:a9:af:79: ac:e0:69:d6:c2:27:b2:19:d1:cb:0f:46:16:e7:75: b2:61:4f:ae:91:bb:89:75:53:08:ef:29:d8:50:73: 7c:bc:c0:87:d4:57:48:36:6e:8c:56:73:55:4c:e8: 4d:85:5b:18:25:88:1f:eb:2c:ba:f2:16:05:7b:ec: da:e0:d6:88:85:bb:a8:7a:aa:4a:24:be:b3:46:0c: ce:08:c3:13:a2:cb:be:85:f6:fa:b7:03:a4:a9:46: 36:f5:bf:c3:a0:b4:e0:4e:0c:db:2a:8b:61:d4:8c: 9d:66:46:13:cb:cd:02:e8:b7:4b:10:34:09:ce:4f: 8f:bc:15:2a:8d:75:5d:87:c5:ba:e1:4c:d2:98:d9: 5a:e4:c3:37:2e:e9:4c:ed:cb:99:e7:76:73:b0:14: 2f:9d:40:c6:de:06:6b:6a:ce:6a:c7:71:fc:b5:e6: 19:c9:db:6a:8d:65:55:02:7d:03:49:c0:91:1c:41: 48:48:22:bc:de:9c:cb:f9:aa:a4:7a:f1:ff:90:ca: c7:b7:ea:1a:4f:8a:e5:8b:e3:7a:ae:f6:9f:11:86: 03:df:3a:d9:de:03:30:4f:bc:d1:99:11:ee:67:28: e3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CC:A2:F0:CA:06:D8:A6:1A:38:79:CE:FF:9B:89:84:4C:DE:0C:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/808b4569-30df-38ab-b1f3-078d1385dc99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:4c:57:e6:e1:af:f7:50:ce:4a:8a:ef:fe:38:a6:1f:3e:1a: 83:6f:73:c1:16:3e:0e:6c:92:85:58:82:65:83:1c:58:0a:1c: eb:3b:58:5a:34:6b:5f:ef:ae:d7:e3:68:88:2b:15:d1:33:1c: 85:60:bc:00:2c:1d:f8:94:ad:68:76:34:91:9d:e7:ab:71:d1: bf:d8:1e:9b:83:16:e1:eb:4a:99:42:75:b8:98:97:43:96:3c: 89:f6:2e:63:d6:43:44:b3:7e:7f:e1:35:5c:1a:76:97:fe:f2: cf:96:53:1f:45:e6:d7:47:b0:85:96:f3:74:49:bc:0f:47:12: a8:cd:69:54:6e:4e:4f:ce:81:0d:3f:97:06:97:ab:5b:27:1d: ba:8a:ef:d1:54:1d:5e:95:14:ee:f9:c3:df:ef:94:52:51:9a: 1d:9c:d9:bd:c5:02:12:3c:49:27:12:95:e8:fc:9a:d1:b3:69: 24:95:46:3e:54:cf:85:1c:ee:31:17:49:6f:c0:2a:28:7b:cf: f9:16:84:48:06:ed:c0:c4:ed:9c:51:49:4c:da:fa:81:23:b8: e6:5e:3c:e9:cd:71:69:f0:3c:a2:d4:8c:27:ed:cc:bd:01:e0: 58:63:47:62:71:d5:63:74:92:05:9f:a1:ea:6c:22:fc:40:b1: cf:91:cd:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzTZe9T+YKp27wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGJkNDgwMDMtNDkxMy00MDhlLWFlNGMtMWYwNTU2ZTQwZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXPBlQ2ohE5UHew1Ni6im97xnFsR4R4ynuKp r3ms4GnWwieyGdHLD0YW53WyYU+ukbuJdVMI7ynYUHN8vMCH1FdINm6MVnNVTOhN hVsYJYgf6yy68hYFe+za4NaIhbuoeqpKJL6zRgzOCMMTosu+hfb6twOkqUY29b/D oLTgTgzbKoth1IydZkYTy80C6LdLEDQJzk+PvBUqjXVdh8W64UzSmNla5MM3LulM 7cuZ53ZzsBQvnUDG3gZras5qx3H8teYZydtqjWVVAn0DScCRHEFISCK83pzL+aqk evH/kMrHt+oaT4rli+N6rvafEYYD3zrZ3gMwT7zRmRHuZyjjpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3MovDKBtimGjh5zv+biYRM3gyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODA4YjQ1NjktMzBkZi0z OGFiLWIxZjMtMDc4ZDEzODVkYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZMV+bhr/dQzkqK7/44ph8+GoNvc8EWPg5skoVYgmWDHFgKHOs7WFo0 a1/vrtfjaIgrFdEzHIVgvAAsHfiUrWh2NJGd56tx0b/YHpuDFuHrSplCdbiYl0OW PIn2LmPWQ0Szfn/hNVwadpf+8s+WUx9F5tdHsIWW83RJvA9HEqjNaVRuTk/OgQ0/ lwaXq1snHbqK79FUHV6VFO75w9/vlFJRmh2c2b3FAhI8SScSlej8mtGzaSSVRj5U z4Uc7jEXSW/AKih7z/kWhEgG7cDE7ZxRSUza+oEjuOZePOnNcWnwPKLUjCftzL0B 4FhjR2Jx1WN0kgWfoepsIvxAsc+Rzdk= -----END CERTIFICATE-----Generated at Sat May 10 19:28:36 2025 by rpki-client