$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa File: a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa (raw, json) Hash identifier: /BzsURAFjepiHYDNgL7PUqY9NbMQHVz2njGl3QixdYo= Subject key identifier: 48:0D:8C:58:BA:A9:12:5A:EE:70:56:2C:94:91:72:34:0D:A4:CA:8A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3B7C73057BB42FCEE500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3b:7c:73:05:7b:b4:2f:ce:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b9ff7440-ebc1-464b-b977-fcb63dc753d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c5:a8:43:be:56:65:81:e7:ce:45:40:9b:b5: ba:f6:58:d7:22:18:09:a7:f5:8d:45:e1:e6:44:92: 4c:1a:fd:b8:35:fa:4c:5d:3b:3a:da:2c:3e:84:16: de:6b:fd:38:e1:70:f5:36:d5:6e:a1:0b:c7:7d:65: ba:38:7a:a7:26:65:b8:5f:41:f9:7d:b1:34:ce:d4: 51:72:82:6c:f9:d9:93:3c:42:c5:83:3f:2d:53:21: ba:ae:5b:34:28:a1:53:82:86:78:81:54:d0:a1:d3: f4:b9:2e:a6:74:52:78:af:93:eb:7e:b0:88:a7:2d: cb:00:4e:9c:07:95:ce:33:ef:0d:e1:cb:44:40:55: 9d:85:bc:c3:3f:26:90:c1:63:5d:55:e3:b0:c8:ba: 7b:21:ea:62:7f:3a:4a:26:dc:c6:89:2b:75:7b:10: 4a:c2:62:31:f2:65:cb:68:f9:86:61:8c:a5:ea:13: 68:6d:49:74:51:5a:6e:30:f9:98:38:1a:3d:a1:47: bb:bc:5f:79:33:57:17:d6:9a:52:c9:e3:66:82:97: d6:89:5a:d5:e3:c9:7a:73:3b:e6:b6:eb:9f:3c:75: 1e:f7:a7:6f:f3:26:5f:f1:a7:06:46:05:c7:10:8a: 83:fe:a2:e5:50:25:8d:d0:c6:21:96:85:ed:20:62: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0D:8C:58:BA:A9:12:5A:EE:70:56:2C:94:91:72:34:0D:A4:CA:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e1:c7:14:29:e1:a3:f5:8d:c6:58:13:56:f4:a1:38:32:8f: 0f:a9:93:bc:4c:79:27:92:d9:43:2e:ce:3d:19:37:a3:2a:fc: 86:99:24:30:0b:29:04:89:64:cb:98:5c:e6:19:9b:53:b3:d9: 38:67:60:a4:ae:de:9a:25:ca:c8:80:b7:ca:70:9d:1b:d8:28: e4:22:d7:91:d4:4d:25:a3:1d:09:13:99:f8:0a:e2:8b:eb:bb: b3:9f:44:87:73:9e:a0:c5:55:b4:33:f5:08:c4:9d:3c:0c:77: 7b:b0:29:99:dc:2a:41:be:4c:4a:c4:7a:d9:c2:16:02:8c:7d: f0:fd:3c:d0:e2:b2:23:3b:e2:37:e4:35:7e:38:e4:82:bf:48: 5c:f7:63:ba:5a:88:7b:11:48:a3:ef:c8:50:de:40:f0:f9:1a: 5d:05:ca:f7:f4:2b:92:a1:80:5f:60:d8:e3:ac:65:7b:f8:50: a4:be:a9:02:5f:9d:a9:6d:35:c1:61:53:de:38:0b:52:42:a2: 93:1b:7c:26:da:13:f8:b9:bc:55:4b:60:18:c5:8a:66:1d:f3: 50:0e:75:46:cf:b5:c4:bf:73:97:9c:c0:d6:58:c6:45:89:73: 8a:59:60:ee:49:7b:98:85:e7:99:07:e9:e4:f4:ad:80:f4:b7: 2f:dd:92:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzt8cwV7tC/O5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjlmZjc0NDAtZWJjMS00NjRiLWI5NzctZmNiNjNkYzc1M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcWoQ75WZYHnzkVAm7W69ljXIhgJp/WNReHm RJJMGv24NfpMXTs62iw+hBbea/044XD1NtVuoQvHfWW6OHqnJmW4X0H5fbE0ztRR coJs+dmTPELFgz8tUyG6rls0KKFTgoZ4gVTQodP0uS6mdFJ4r5PrfrCIpy3LAE6c B5XOM+8N4ctEQFWdhbzDPyaQwWNdVeOwyLp7IepifzpKJtzGiSt1exBKwmIx8mXL aPmGYYyl6hNobUl0UVpuMPmYOBo9oUe7vF95M1cX1ppSyeNmgpfWiVrV48l6czvm tuufPHUe96dv8yZf8acGRgXHEIqD/qLlUCWN0MYhloXtIGLTwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgNjFi6qRJa7nBWLJSRcjQNpMqKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTE3OTNiZmEtOGI3Zi0z MWYzLWIzOTUtMzQyZjY5YmRmYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvhxxQp4aP1jcZYE1b0oTgyjw+pk7xMeSeS2UMuzj0ZN6Mq/IaZJDAL KQSJZMuYXOYZm1Oz2ThnYKSu3polysiAt8pwnRvYKOQi15HUTSWjHQkTmfgK4ovr u7OfRIdznqDFVbQz9QjEnTwMd3uwKZncKkG+TErEetnCFgKMffD9PNDisiM74jfk NX445IK/SFz3Y7paiHsRSKPvyFDeQPD5Gl0Fyvf0K5KhgF9g2OOsZXv4UKS+qQJf naltNcFhU944C1JCopMbfCbaE/i5vFVLYBjFimYd81AOdUbPtcS/c5ecwNZYxkWJ c4pZYO5Je5iF55kH6eT0rYD0ty/dkvI= -----END CERTIFICATE-----Generated at Fri May 9 04:52:29 2025 by rpki-client