$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfad4fef-ffb2-34d7-ba27-e233e0425b90.roa File: bfad4fef-ffb2-34d7-ba27-e233e0425b90.roa (raw, json) Hash identifier: iuldfnbCV4nnQg1hjP7m8xb/m6Kf2xAimKy0ziVyWHs= Subject key identifier: 79:D8:43:68:7A:67:58:78:8C:CC:6E:48:CD:03:6A:CC:9E:EC:58:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA992CE94FABDE73610900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfad4fef-ffb2-34d7-ba27-e233e0425b90.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:99:2c:e9:4f:ab:de:73:61:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d7183563-cf5d-43b0-bfa9-83322ce8b043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:a0:bc:0e:4a:01:bd:62:e6:be:3b:22:ef: 94:1e:ac:a7:27:9f:72:99:01:fd:71:55:7d:13:b3: eb:2a:64:f0:65:37:e3:e7:e4:09:2d:70:b6:68:99: f6:f9:a5:50:ba:a6:55:a5:d5:59:33:99:03:e5:67: a3:f1:42:b8:49:66:14:65:f3:75:71:c6:0d:c8:de: 8d:e7:91:09:30:16:c7:46:23:7a:53:74:fa:5d:bb: e5:4e:c5:73:97:d9:53:16:d2:93:e9:30:2d:0f:18: e5:8a:58:3b:49:52:b2:88:b7:4c:95:b1:08:35:f2: be:59:7f:34:f5:55:d7:6c:ee:c3:65:d5:3b:61:79: 2a:17:7a:fa:39:46:4a:d9:d2:a7:4e:05:13:12:68: e2:26:2d:55:cb:28:e9:9c:24:bf:61:2f:91:41:4c: d4:33:82:47:32:b8:22:78:b0:94:89:30:bf:8d:a1: a4:7e:0d:54:bc:48:d5:e3:7a:3b:46:1a:08:54:fd: 19:f7:34:95:bc:f3:4d:fa:6e:7f:5d:0f:52:a9:f3: 13:a7:ef:04:48:3d:6a:4b:10:e4:99:a6:d9:99:c1: 0b:13:ae:e9:7f:c8:78:17:6c:40:ce:85:ae:07:6e: 02:a8:63:ef:9f:83:86:8c:6f:49:31:25:cc:99:7b: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D8:43:68:7A:67:58:78:8C:CC:6E:48:CD:03:6A:CC:9E:EC:58:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfad4fef-ffb2-34d7-ba27-e233e0425b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ea:04:ce:e7:62:72:e6:4d:52:87:dd:85:d5:1d:78:09:79: 58:99:f5:6b:a0:99:1d:ae:ea:74:1a:8a:38:87:b5:d9:9f:15: 52:53:e5:b6:dd:60:4b:3c:ff:61:ac:24:6e:42:32:69:3d:e1: 87:88:2b:bf:f5:bd:ee:33:79:0e:12:9c:22:be:8b:e0:96:5e: 74:ee:7d:01:fc:ec:db:df:6a:69:7f:f9:76:b5:be:6b:81:23: 2e:45:df:ce:fd:bb:9b:00:87:05:7a:bd:ee:54:31:4d:f2:99: 6b:a9:0f:49:7e:32:6c:ea:47:b7:a7:c9:10:b8:b7:75:5f:56: ad:ba:07:4d:67:92:ad:5e:62:8f:9f:d6:34:77:96:6e:37:b6: a5:c7:d9:ad:3c:0f:01:27:74:24:87:3a:74:e6:e9:25:a7:7a: 60:ba:e5:22:9b:27:31:02:41:73:1a:6b:9c:8b:d5:88:f3:47: 75:a6:19:56:6a:88:6b:1f:ef:fc:b0:13:21:fd:2a:c6:30:8b: d4:dd:5d:9b:7b:b0:96:86:fb:9f:53:93:80:a0:1d:00:4d:b5: 11:03:c7:b8:bf:a1:ea:d5:89:dd:6b:56:45:f1:21:a6:a8:54: c0:0d:dd:6d:d7:cb:d0:84:29:b1:b9:ea:a4:74:33:47:9e:a4: 5f:43:1a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupks6U+r3nNhCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDcxODM1NjMtY2Y1ZC00M2IwLWJmYTktODMzMjJjZThiMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjegvA5KAb1i5r47Iu+UHqynJ59ymQH9cVV9 E7PrKmTwZTfj5+QJLXC2aJn2+aVQuqZVpdVZM5kD5Wej8UK4SWYUZfN1ccYNyN6N 55EJMBbHRiN6U3T6XbvlTsVzl9lTFtKT6TAtDxjlilg7SVKyiLdMlbEINfK+WX80 9VXXbO7DZdU7YXkqF3r6OUZK2dKnTgUTEmjiJi1VyyjpnCS/YS+RQUzUM4JHMrgi eLCUiTC/jaGkfg1UvEjV43o7RhoIVP0Z9zSVvPNN+m5/XQ9SqfMTp+8ESD1qSxDk mabZmcELE67pf8h4F2xAzoWuB24CqGPvn4OGjG9JMSXMmXuZ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnYQ2h6Z1h4jMxuSM0Dasye7Fh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmZhZDRmZWYtZmZiMi0z NGQ3LWJhMjctZTIzM2UwNDI1YjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3qBM7nYnLmTVKH3YXVHXgJeViZ9WugmR2u6nQaijiHtdmfFVJT5bbd YEs8/2GsJG5CMmk94YeIK7/1ve4zeQ4SnCK+i+CWXnTufQH87Nvfaml/+Xa1vmuB Iy5F3879u5sAhwV6ve5UMU3ymWupD0l+MmzqR7enyRC4t3VfVq26B01nkq1eYo+f 1jR3lm43tqXH2a08DwEndCSHOnTm6SWnemC65SKbJzECQXMaa5yL1YjzR3WmGVZq iGsf7/ywEyH9KsYwi9TdXZt7sJaG+59Tk4CgHQBNtREDx7i/oerVid1rVkXxIaao VMAN3W3Xy9CEKbG56qR0M0eepF9DGok= -----END CERTIFICATE-----Generated at Thu May 8 10:23:40 2025 by rpki-client