$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa File: c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa (raw, json) Hash identifier: G0jW94Xpno11v++BujmTaI1eL6GjxXwxKYIRlvnAZDg= Subject key identifier: 46:D8:99:E6:59:A8:BC:C9:24:5D:44:02:53:52:76:A8:67:78:E1:F5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB37518C92BFA6CBAF3750 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:37:51:8c:92:bf:a6:cb:af:37:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5b7985e6-36c1-4ccc-8aa6-60e42570eb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a5:9e:52:bb:0d:6d:14:12:0b:bb:95:4f:3e: 51:be:84:ea:6e:ed:20:a1:1b:b0:10:e9:e5:f0:5e: 91:dd:49:73:6a:fc:ec:78:15:45:11:e1:57:0a:e8: 9f:9c:a2:ce:06:2a:35:09:bf:9e:23:d2:42:66:1a: 34:a6:d5:60:02:d1:11:e2:70:dc:40:ce:31:a4:11: 0a:e0:73:61:ce:eb:d1:f9:7b:d2:ed:6e:9a:a7:f0: 64:46:fa:06:f4:3a:79:e4:59:86:02:ae:df:8b:ff: f6:be:82:bc:93:45:0a:a6:a4:8f:58:c1:77:c2:29: 4f:9f:19:67:1b:6d:7e:93:b8:38:5d:23:b9:bb:84: 74:d8:89:fd:ae:ee:9c:b3:2a:26:06:cb:60:d5:22: 54:7f:91:d1:01:ab:0b:e7:10:d0:a4:49:87:e1:85: fd:d4:ae:75:0b:36:8e:be:de:b2:34:90:63:95:9d: 9d:d1:39:33:97:21:a3:e3:29:f2:18:eb:4f:30:45: 21:46:e3:d6:8d:5c:10:1c:b5:72:e5:60:ed:d1:4f: bd:40:fc:42:32:18:15:81:db:b9:5a:86:fa:50:62: 0b:59:f1:03:4d:71:be:ba:d7:d5:ec:4b:be:17:65: b4:3c:d8:18:4b:01:be:c1:fc:cb:8d:f4:4c:5f:9f: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D8:99:E6:59:A8:BC:C9:24:5D:44:02:53:52:76:A8:67:78:E1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:33:99:c1:58:78:72:1a:f2:cb:ce:30:65:2e:26:49:aa:e4: ce:a0:59:f8:3e:fb:8c:f4:c8:7e:46:61:08:46:01:7e:2b:9f: 92:72:82:d9:96:2b:67:a3:c2:d4:d5:66:6f:c7:cb:ff:a1:46: 5f:21:26:a0:2a:1b:d8:d2:f6:52:81:25:24:92:bc:fd:1d:25: 92:38:bf:80:89:3f:42:b1:bc:df:2f:03:dd:98:79:22:88:d2: e2:93:96:06:3b:f8:67:94:5b:cf:8d:11:6e:18:d7:5f:c8:bc: 39:b5:3e:fe:fd:10:c9:0e:66:fc:f9:d8:25:3d:4e:28:be:36: 62:aa:1f:90:88:71:5c:47:af:12:cc:79:1b:dd:60:64:1e:12: ff:9f:1c:59:77:a2:b1:8e:c3:6c:db:b8:e3:fb:75:52:b8:d6: f0:ea:ac:b5:6c:fb:18:b6:09:7e:63:6d:90:7f:58:b0:f6:9f: c1:15:b1:51:7d:e6:cc:53:5d:49:cb:ad:79:9a:21:26:e9:28: a1:59:7b:50:8f:0c:f9:e2:f3:82:72:09:44:79:16:03:06:31: 61:4c:97:20:7b:83:df:91:2f:2b:63:0d:43:ab:1d:d5:69:01: af:1f:e3:c5:f8:82:35:ac:93:c0:e3:ff:05:7a:0e:7f:8c:9b: f3:9b:2e:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzdRjJK/psuvN1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWI3OTg1ZTYtMzZjMS00Y2NjLThhYTYtNjBlNDI1NzBlYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaWeUrsNbRQSC7uVTz5RvoTqbu0goRuwEOnl 8F6R3UlzavzseBVFEeFXCuifnKLOBio1Cb+eI9JCZho0ptVgAtER4nDcQM4xpBEK 4HNhzuvR+XvS7W6ap/BkRvoG9Dp55FmGAq7fi//2voK8k0UKpqSPWMF3wilPnxln G21+k7g4XSO5u4R02In9ru6csyomBstg1SJUf5HRAasL5xDQpEmH4YX91K51CzaO vt6yNJBjlZ2d0TkzlyGj4ynyGOtPMEUhRuPWjVwQHLVy5WDt0U+9QPxCMhgVgdu5 Wob6UGILWfEDTXG+utfV7Eu+F2W0PNgYSwG+wfzLjfRMX5+MyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbYmeZZqLzJJF1EAlNSdqhneOH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzJmNWYzYmItZmEwMC0z MTUxLTg3MDctMWQ3ZDgzNTY2NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4zmcFYeHIa8svOMGUuJkmq5M6gWfg++4z0yH5GYQhGAX4rn5JygtmW K2ejwtTVZm/Hy/+hRl8hJqAqG9jS9lKBJSSSvP0dJZI4v4CJP0KxvN8vA92YeSKI 0uKTlgY7+GeUW8+NEW4Y11/IvDm1Pv79EMkOZvz52CU9Tii+NmKqH5CIcVxHrxLM eRvdYGQeEv+fHFl3orGOw2zbuOP7dVK41vDqrLVs+xi2CX5jbZB/WLD2n8EVsVF9 5sxTXUnLrXmaISbpKKFZe1CPDPni84JyCUR5FgMGMWFMlyB7g9+RLytjDUOrHdVp Aa8f48X4gjWsk8Dj/wV6Dn+Mm/ObLko= -----END CERTIFICATE-----Generated at Sat May 10 22:19:00 2025 by rpki-client