$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9f11f1c0-2c7b-384f-83d8-b62a93212b99.roa File: 9f11f1c0-2c7b-384f-83d8-b62a93212b99.roa (raw, json) Hash identifier: n9tG0ztq/VOyPcDYIG9qmd4m2uoHG5xfLizv4Rb6HL8= Subject key identifier: 45:29:EC:46:DA:47:62:76:B9:A3:FB:F0:46:AA:03:B1:BD:54:6E:CC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA995B85A24206C4C9CD40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9f11f1c0-2c7b-384f-83d8-b62a93212b99.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:99:5b:85:a2:42:06:c4:c9:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=18712a9b-91b5-415b-984a-c6b16d58e8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:d3:56:07:bd:88:b3:17:18:d2:0e:25:81: 00:e9:e7:3e:3b:0f:24:18:c7:57:76:61:8f:50:bb: 66:f3:f4:c2:f5:78:30:fa:e4:8c:c1:74:14:a9:39: 88:f6:13:57:76:86:d3:91:cc:31:cf:ba:d1:f2:99: fd:67:23:a0:0b:e7:6e:b5:fd:fe:bc:e8:c7:ab:64: 5d:0b:7e:51:ac:78:ed:ff:af:79:3f:71:18:0d:57: 4d:f5:25:1d:b9:38:1e:2b:c2:1f:54:01:4d:1f:95: e7:3e:4d:c8:04:19:0f:ae:90:83:70:3e:c8:ae:7c: 59:9e:a3:8e:00:04:7f:3b:44:37:97:ae:10:f7:e3: 7d:db:63:ad:a9:50:1e:ad:b3:dd:8e:1e:14:c5:34: f9:26:61:03:39:46:a1:58:84:2f:fb:4f:8c:bc:e2: bf:cb:39:85:96:0b:f1:a5:9a:12:13:03:72:57:ce: 4b:32:3f:fc:54:2c:55:ef:42:03:f6:cb:b1:c2:31: b1:ea:4a:5a:29:82:b4:f4:bb:4a:8d:5b:80:65:a8: 8c:3f:21:cd:51:b6:c7:27:a1:9e:69:05:41:e0:07: 12:3e:63:11:82:88:0b:19:9a:de:85:ec:4a:b4:a1: 40:00:f7:c6:30:1a:fa:40:43:23:bd:ba:75:12:e9: ee:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:29:EC:46:DA:47:62:76:B9:A3:FB:F0:46:AA:03:B1:BD:54:6E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9f11f1c0-2c7b-384f-83d8-b62a93212b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:70:2c:e9:17:34:44:96:a8:ca:a0:ae:07:2a:b0:9d:6f:b3: 85:fd:0e:48:69:ce:13:b4:7f:10:92:3c:98:45:0d:d9:95:d0: c7:74:1d:fb:74:99:fe:3e:52:23:00:05:5f:01:83:68:ab:0a: 7a:c6:09:05:ac:ba:5b:7d:da:dc:d2:7f:39:e0:1a:f0:7a:e7: 4e:5a:9a:3e:ef:5a:1a:de:e7:2a:67:27:42:19:39:0f:a0:d0: 82:3d:9b:1b:00:0d:c3:5f:63:43:23:24:1b:0d:79:9b:84:2a: b9:68:be:6e:fa:b0:56:56:cc:45:e9:2c:ea:51:50:de:9f:86: a7:dc:e7:d2:f7:28:16:6a:f5:39:c7:9d:da:6f:c7:48:a8:b5: 49:cf:c2:0d:ca:5c:bb:c9:6d:42:0b:ef:51:e2:39:41:f4:cd: 25:00:41:22:1e:c7:dd:5a:3c:07:ac:f7:98:73:1d:4a:43:ef: d0:b6:60:f8:fd:86:e5:b1:fd:5f:b4:dc:82:f0:fb:74:7c:0e: 3f:36:a0:bb:be:88:7a:75:cb:b7:58:ad:1d:d7:cc:fd:f9:b3: 17:0a:a4:98:e6:b9:28:86:20:32:28:52:fe:aa:fd:ec:cb:18: c8:6c:cc:eb:b3:5a:6d:06:ef:2a:52:62:6b:70:8f:18:fd:04: c4:ba:84:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuplbhaJCBsTJzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTg3MTJhOWItOTFiNS00MTViLTk4NGEtYzZiMTZkNThlOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkTTVge9iLMXGNIOJYEA6ec+Ow8kGMdXdmGP ULtm8/TC9Xgw+uSMwXQUqTmI9hNXdobTkcwxz7rR8pn9ZyOgC+dutf3+vOjHq2Rd C35RrHjt/695P3EYDVdN9SUduTgeK8IfVAFNH5XnPk3IBBkPrpCDcD7IrnxZnqOO AAR/O0Q3l64Q9+N922OtqVAerbPdjh4UxTT5JmEDOUahWIQv+0+MvOK/yzmFlgvx pZoSEwNyV85LMj/8VCxV70ID9suxwjGx6kpaKYK09LtKjVuAZaiMPyHNUbbHJ6Ge aQVB4AcSPmMRgogLGZrehexKtKFAAPfGMBr6QEMjvbp1EunuRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUp7EbaR2J2uaP78EaqA7G9VG7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWYxMWYxYzAtMmM3Yi0z ODRmLTgzZDgtYjYyYTkzMjEyYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhwLOkXNESWqMqgrgcqsJ1vs4X9DkhpzhO0fxCSPJhFDdmV0Md0Hft0 mf4+UiMABV8Bg2irCnrGCQWsult92tzSfzngGvB6505amj7vWhre5ypnJ0IZOQ+g 0II9mxsADcNfY0MjJBsNeZuEKrlovm76sFZWzEXpLOpRUN6fhqfc59L3KBZq9TnH ndpvx0iotUnPwg3KXLvJbUIL71HiOUH0zSUAQSIex91aPAes95hzHUpD79C2YPj9 huWx/V+03ILw+3R8Dj82oLu+iHp1y7dYrR3XzP35sxcKpJjmuSiGIDIoUv6q/ezL GMhszOuzWm0G7ypSYmtwjxj9BMS6hEE= -----END CERTIFICATE-----Generated at Tue May 6 18:58:03 2025 by rpki-client