$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f6d0099-3db6-33ac-b713-a7f0bbe220a1.roa File: 8f6d0099-3db6-33ac-b713-a7f0bbe220a1.roa (raw, json) Hash identifier: +yfm9Uxk1Qw6OlH8FHwrgWYwVExSBIYcEynUJkkVorI= Subject key identifier: E8:96:4C:9F:65:5E:FE:19:5B:8B:16:BC:59:86:5B:C7:F5:76:FD:58 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA93528BB9EF18A2E323C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f6d0099-3db6-33ac-b713-a7f0bbe220a1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:93:52:8b:b9:ef:18:a2:e3:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=83453490-d1d3-4bee-8138-33723e10252a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:a2:2f:66:87:31:14:bf:a3:5b:1f:78:ef: 6e:0c:a0:31:5e:40:4f:ea:6d:d8:ce:0a:7e:60:b1: d8:ca:11:1d:f6:49:ef:5c:58:07:c2:26:69:58:c5: be:f9:95:a1:ba:cf:31:44:db:71:0b:b1:07:d7:e3: f3:df:d0:1e:a1:ad:8c:a6:29:e9:13:9a:25:12:f0: 69:3d:58:ee:77:ea:c9:28:76:42:5a:92:31:8c:1e: 2c:38:2b:20:e9:d9:c0:f9:cc:77:95:f8:fb:1a:69: 71:fd:34:e7:a4:d3:c8:33:27:d8:ee:1f:66:5d:fc: 26:51:a1:ce:53:1b:ae:3e:0f:71:cb:7a:b7:f6:3a: eb:35:11:a1:de:ed:c0:e4:0e:30:b2:d4:59:b9:6e: 4b:49:d0:bc:7b:55:a1:00:71:27:2b:37:cb:46:4c: d9:19:52:7f:ee:18:67:e8:45:c5:57:ca:5c:36:a4: b2:3e:1e:43:73:4c:5d:b9:bb:b2:d8:19:14:3f:cc: 16:a0:2b:f1:ed:c1:43:a1:5f:5d:cc:75:1a:ed:c4: 5e:a5:8a:94:4d:93:d5:74:72:70:68:1c:ad:bb:7e: a6:bf:25:52:ca:e5:eb:a9:7a:ce:28:b0:5b:f9:31: 49:81:5c:50:5f:9f:59:75:d7:be:61:94:d3:46:c1: 16:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:96:4C:9F:65:5E:FE:19:5B:8B:16:BC:59:86:5B:C7:F5:76:FD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f6d0099-3db6-33ac-b713-a7f0bbe220a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:bc:65:5a:2b:e8:2b:36:4a:7e:e4:b4:4b:b6:12:bd:cd:02: cb:b8:37:4c:f4:c7:7f:37:ba:16:52:2a:e2:40:07:6a:2e:03: f9:e9:a2:93:a4:06:b7:d1:a4:32:52:ce:d4:1a:90:a8:7c:6b: b1:bb:6b:16:51:97:14:ba:22:e3:11:d8:71:c8:68:71:d9:34: 37:68:44:03:69:18:17:6b:54:3e:36:2a:5a:22:4b:47:7b:6c: 2e:0b:21:f2:94:a1:04:af:b6:80:7f:cf:a1:ca:b4:bc:73:ab: 41:1d:58:a1:b0:60:33:f6:e1:a1:db:ff:2a:d5:a6:97:56:ce: 13:ab:3f:2e:0b:b2:6f:ae:30:b1:f5:3a:c0:8a:24:b7:6a:c4: 21:d4:20:c0:bd:14:d0:19:d3:78:62:0c:54:1d:52:4f:bb:68: 90:7b:24:e9:e9:ca:3a:d7:cd:64:69:db:0f:8e:20:84:51:66: a7:71:d0:cc:e9:42:f7:10:f3:f4:ee:22:c4:35:0b:90:61:b7: ea:fb:58:4e:ef:64:46:af:a6:e0:8b:8a:4b:ba:8e:b0:e0:f8: 8b:fd:4e:9c:14:60:a3:73:5c:a9:f8:f8:95:f9:d4:b1:25:69: 97:23:b0:30:cd:bc:9d:8b:6b:0b:3a:36:47:2a:65:b4:dc:59: 0d:68:54:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupNSi7nvGKLjI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODM0NTM0OTAtZDFkMy00YmVlLTgxMzgtMzM3MjNlMTAyNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ2iL2aHMRS/o1sfeO9uDKAxXkBP6m3Yzgp+ YLHYyhEd9knvXFgHwiZpWMW++ZWhus8xRNtxC7EH1+Pz39Aeoa2MpinpE5olEvBp PVjud+rJKHZCWpIxjB4sOCsg6dnA+cx3lfj7Gmlx/TTnpNPIMyfY7h9mXfwmUaHO UxuuPg9xy3q39jrrNRGh3u3A5A4wstRZuW5LSdC8e1WhAHEnKzfLRkzZGVJ/7hhn 6EXFV8pcNqSyPh5Dc0xdubuy2BkUP8wWoCvx7cFDoV9dzHUa7cRepYqUTZPVdHJw aBytu36mvyVSyuXrqXrOKLBb+TFJgVxQX59Zdde+YZTTRsEWaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiWTJ9lXv4ZW4sWvFmGW8f1dv1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGY2ZDAwOTktM2RiNi0z M2FjLWI3MTMtYTdmMGJiZTIyMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKi8ZVor6Cs2Sn7ktEu2Er3NAsu4N0z0x383uhZSKuJAB2ouA/npopOk BrfRpDJSztQakKh8a7G7axZRlxS6IuMR2HHIaHHZNDdoRANpGBdrVD42KloiS0d7 bC4LIfKUoQSvtoB/z6HKtLxzq0EdWKGwYDP24aHb/yrVppdWzhOrPy4Lsm+uMLH1 OsCKJLdqxCHUIMC9FNAZ03hiDFQdUk+7aJB7JOnpyjrXzWRp2w+OIIRRZqdx0Mzp QvcQ8/TuIsQ1C5Bht+r7WE7vZEavpuCLiku6jrDg+Iv9TpwUYKNzXKn4+JX51LEl aZcjsDDNvJ2Laws6NkcqZbTcWQ1oVFE= -----END CERTIFICATE-----Generated at Sat May 10 16:44:51 2025 by rpki-client