$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa File: aa91c442-72a9-312f-ad60-6db30d5d9223.roa (raw, json) Hash identifier: pRZHoty7M5GGU5dTAk73pYHEqEn/VbcCKPdANhI0nAM= Subject key identifier: 91:F7:C7:89:5A:16:88:DB:9B:D1:72:C5:00:02:5D:2A:C2:F4:E0:81 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA914062668BB4D1321300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:91:40:62:66:8b:b4:d1:32:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d432fe42-5c2c-4f79-8569-c929fa96e307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e8:c1:cf:c9:04:91:53:d2:9c:76:0f:bd:40: fc:0f:03:3c:2e:25:91:cf:ca:37:94:e5:49:a5:c9: 36:eb:ad:0c:76:b6:03:72:6d:cd:e9:72:b9:9b:19: ca:2d:11:55:50:1c:33:22:fe:9b:0b:fe:33:55:71: d3:8c:c0:c2:b3:07:72:1f:27:79:a4:2f:61:0c:64: 73:6c:86:92:c4:ce:bd:7f:d9:f2:62:a7:ab:61:ef: 73:e4:ef:e4:9c:03:a3:57:2a:56:5e:8e:11:dc:75: 7a:e6:c8:b4:51:e7:08:99:d9:08:12:3d:f1:a1:07: 9f:56:b0:da:14:9f:3a:34:0c:10:1b:c3:69:0a:5d: a4:5e:cd:a0:e5:cd:19:fb:6c:80:11:8d:4b:fb:de: 5f:26:bc:85:d6:68:91:26:d6:9b:9b:c4:3f:29:bf: 18:a1:9e:f5:62:24:59:39:fc:27:52:03:c1:18:9d: 7a:e2:1e:75:9f:a7:01:3b:70:bb:42:18:ce:62:d0: d6:1b:a2:3b:5e:c0:eb:ec:3f:dd:54:0d:99:81:1e: 94:8d:98:b3:26:f1:be:36:65:81:71:79:ce:ed:e9: 44:a3:8f:ea:e2:ea:fc:2b:3c:b2:d8:8c:4c:2c:5c: 88:2e:05:0b:c8:de:3e:9f:32:e7:1c:74:f3:42:d5: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F7:C7:89:5A:16:88:DB:9B:D1:72:C5:00:02:5D:2A:C2:F4:E0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:62:28:21:11:15:c5:50:5d:28:2d:94:69:a5:ed:6e:d0:04: 49:e5:0b:36:73:c9:8c:76:88:0e:57:ea:69:52:b0:1e:d7:77: 22:a2:80:02:f3:4c:a9:40:0f:6c:cd:35:bc:a4:aa:8c:db:d1: 4f:4d:e8:19:fb:79:83:d0:ad:91:63:58:e9:82:24:c0:5b:08: 86:4f:69:9a:59:d9:5b:88:27:db:49:e4:93:0d:b6:24:79:77: 58:79:3a:4a:b2:ea:fd:a3:f4:d7:0c:5b:18:e3:67:71:a5:b5: a5:4a:64:65:81:11:2d:47:76:5a:f3:be:91:8a:bf:87:2c:1b: 3c:f0:e1:40:bb:81:83:ba:84:f2:72:d2:fa:74:24:e3:80:2b: 15:58:f1:81:d6:c4:28:2a:41:c6:7d:97:b0:1b:e4:de:57:03: 54:4a:72:dd:d0:25:a5:05:9c:de:58:f9:f4:fd:9d:a3:99:9a: ff:55:67:60:bf:b9:b7:d6:b8:a1:84:dd:5e:32:6f:c2:f3:4d: 94:4a:78:74:ff:3f:ca:c1:00:21:ea:da:5c:01:42:7f:2f:55: f2:6f:7d:1c:19:e3:c9:4c:fa:af:e4:6f:0a:bc:2b:89:cf:86: 53:45:5b:03:a9:50:98:25:54:f7:d0:85:ae:c0:28:db:25:e0: bc:91:8e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupFAYmaLtNEyEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDQzMmZlNDItNWMyYy00Zjc5LTg1NjktYzkyOWZhOTZlMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+jBz8kEkVPSnHYPvUD8DwM8LiWRz8o3lOVJ pck2660MdrYDcm3N6XK5mxnKLRFVUBwzIv6bC/4zVXHTjMDCswdyHyd5pC9hDGRz bIaSxM69f9nyYqerYe9z5O/knAOjVypWXo4R3HV65si0UecImdkIEj3xoQefVrDa FJ86NAwQG8NpCl2kXs2g5c0Z+2yAEY1L+95fJryF1miRJtabm8Q/Kb8YoZ71YiRZ OfwnUgPBGJ164h51n6cBO3C7QhjOYtDWG6I7XsDr7D/dVA2ZgR6UjZizJvG+NmWB cXnO7elEo4/q4ur8Kzyy2IxMLFyILgULyN4+nzLnHHTzQtXhPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJH3x4laFojbm9FyxQACXSrC9OCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE5MWM0NDItNzJhOS0z MTJmLWFkNjAtNmRiMzBkNWQ5MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtiKCERFcVQXSgtlGml7W7QBEnlCzZzyYx2iA5X6mlSsB7XdyKigALz TKlAD2zNNbykqozb0U9N6Bn7eYPQrZFjWOmCJMBbCIZPaZpZ2VuIJ9tJ5JMNtiR5 d1h5Okqy6v2j9NcMWxjjZ3GltaVKZGWBES1HdlrzvpGKv4csGzzw4UC7gYO6hPJy 0vp0JOOAKxVY8YHWxCgqQcZ9l7Ab5N5XA1RKct3QJaUFnN5Y+fT9naOZmv9VZ2C/ ubfWuKGE3V4yb8LzTZRKeHT/P8rBACHq2lwBQn8vVfJvfRwZ48lM+q/kbwq8K4nP hlNFWwOpUJglVPfQha7AKNsl4LyRjrs= -----END CERTIFICATE-----Generated at Thu May 8 12:16:07 2025 by rpki-client