$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b031134-5143-3b3c-bca5-08d5fc1aac45.roa File: 8b031134-5143-3b3c-bca5-08d5fc1aac45.roa (raw, json) Hash identifier: gQQJwULaaQGQ7P6eeIKq3vF+JzB3GIcVJFunq1DQ6rk= Subject key identifier: F2:36:D8:5E:71:C1:29:A6:FA:D3:DB:CC:16:8C:B6:C0:64:AE:09:FB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3AE271384407327171E8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b031134-5143-3b3c-bca5-08d5fc1aac45.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3a:e2:71:38:44:07:32:71:71:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=de4ceddd-c4fe-4551-aba2-32fd07ae98d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:65:80:08:77:eb:a6:a7:7e:5b:ba:47:2a: 3e:60:2b:22:86:3f:49:c7:51:a1:9d:41:b8:87:8e: 5c:ed:de:05:9f:a6:7e:a4:42:77:33:d6:d1:25:2f: 95:13:a5:df:99:2b:b4:8a:6c:8a:9e:db:0c:ff:53: b1:91:60:23:1c:35:d7:e1:ee:2f:77:71:94:9a:c1: 04:45:e9:fe:45:47:44:a1:5d:a1:96:c9:5a:0d:3e: 1f:7c:c9:64:1a:2d:a1:6c:fa:b4:64:15:a1:46:ec: f8:9c:89:a4:2b:02:88:7c:f6:2a:0b:84:a6:05:e9: 03:47:b0:bb:b1:b6:86:de:68:f7:51:98:d1:af:24: 2a:67:18:28:ae:50:63:b2:f6:7d:45:7e:5d:c3:5c: fb:4d:2b:39:6f:48:2d:c0:4c:a1:9a:27:79:d7:78: 5e:04:f1:0f:b6:81:e2:3f:f8:35:08:a5:a1:4b:ff: ca:e5:26:60:07:ad:e8:c8:cc:8e:12:7f:3d:4a:75: 32:8b:e0:f9:3b:92:84:c4:93:44:cc:61:88:b0:75: fe:44:71:4e:4a:c7:93:f6:7b:5d:d9:f9:27:81:85: 06:7f:9b:dc:06:3c:37:7e:98:a0:27:8a:63:d8:21: 74:47:d0:55:1a:54:c6:ed:76:70:8a:29:25:2e:7e: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:36:D8:5E:71:C1:29:A6:FA:D3:DB:CC:16:8C:B6:C0:64:AE:09:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8b031134-5143-3b3c-bca5-08d5fc1aac45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:19:3d:b2:01:2b:e7:b3:a8:d7:ea:e4:6b:6f:8a:f4:be:6a: 0d:57:c9:1f:e4:eb:22:27:83:85:45:fd:83:af:0c:16:df:14: ca:fc:9b:0f:97:58:60:3a:9b:1f:f0:4a:cd:31:a5:41:0b:c1: bf:46:ad:d4:3d:82:b7:f4:fc:d4:c8:52:24:d6:f0:af:35:1c: 9e:a8:3a:06:bc:fe:29:c7:eb:64:99:34:db:bf:0e:a5:1d:2c: 5b:0a:10:5e:f2:3a:35:02:09:f6:42:f0:00:02:77:80:38:36: d0:5b:bf:86:a6:a6:9d:7d:59:6a:c5:4f:12:f1:87:02:0d:74: 39:44:e2:24:16:62:63:f6:5f:9f:26:e9:99:77:5e:a1:32:71: b9:73:08:35:c8:53:14:31:59:4d:7e:fe:20:2f:74:c9:69:10: 86:49:f0:f4:20:76:ed:ec:98:82:29:c5:40:5c:20:bc:85:ae: 95:da:33:7f:ed:ba:7b:01:e8:1d:a8:75:de:d5:27:17:d3:ff: e8:3c:e2:36:e7:5c:ff:7a:dc:a7:7f:53:22:33:f5:a6:79:ec: d3:5d:eb:f7:46:5c:5b:65:0e:a1:b5:68:5a:0c:3d:63:08:37: 30:3e:cf:32:ae:7a:58:0c:fe:24:a1:db:6a:bd:4f:26:d2:27: 79:3f:39:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzricThEBzJxcegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZGU0Y2VkZGQtYzRmZS00NTUxLWFiYTItMzJmZDA3YWU5OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhttlgAh366anflu6Ryo+YCsihj9Jx1GhnUG4 h45c7d4Fn6Z+pEJ3M9bRJS+VE6XfmSu0imyKntsM/1OxkWAjHDXX4e4vd3GUmsEE Ren+RUdEoV2hlslaDT4ffMlkGi2hbPq0ZBWhRuz4nImkKwKIfPYqC4SmBekDR7C7 sbaG3mj3UZjRryQqZxgorlBjsvZ9RX5dw1z7TSs5b0gtwEyhmid513heBPEPtoHi P/g1CKWhS//K5SZgB63oyMyOEn89SnUyi+D5O5KExJNEzGGIsHX+RHFOSseT9ntd 2fkngYUGf5vcBjw3fpigJ4pj2CF0R9BVGlTG7XZwiiklLn5ChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI22F5xwSmm+tPbzBaMtsBkrgn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGIwMzExMzQtNTE0My0z YjNjLWJjYTUtMDhkNWZjMWFhYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkZPbIBK+ezqNfq5GtvivS+ag1XyR/k6yIng4VF/YOvDBbfFMr8mw+X WGA6mx/wSs0xpUELwb9GrdQ9grf0/NTIUiTW8K81HJ6oOga8/inH62SZNNu/DqUd LFsKEF7yOjUCCfZC8AACd4A4NtBbv4ampp19WWrFTxLxhwINdDlE4iQWYmP2X58m 6Zl3XqEycblzCDXIUxQxWU1+/iAvdMlpEIZJ8PQgdu3smIIpxUBcILyFrpXaM3/t unsB6B2odd7VJxfT/+g84jbnXP963Kd/UyIz9aZ57NNd6/dGXFtlDqG1aFoMPWMI NzA+zzKuelgM/iSh22q9TybSJ3k/OVA= -----END CERTIFICATE-----Generated at Sat May 10 06:26:08 2025 by rpki-client