$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd31febc-cbf6-38fe-a27c-0b46f50c5b1f.roa File: cd31febc-cbf6-38fe-a27c-0b46f50c5b1f.roa (raw, json) Hash identifier: rjqwlwolyPLSUpbVZXOndnsaBrL49TSfgmXP8aTabr8= Subject key identifier: 39:DE:D2:2E:BC:C4:0F:7C:12:4A:13:BE:51:05:B7:40:28:2C:9B:16 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB38FEEABACA0F601015C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd31febc-cbf6-38fe-a27c-0b46f50c5b1f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:38:fe:ea:ba:ca:0f:60:10:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e07aaf2a-6998-4c38-a985-88d9d37a3e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:b5:68:67:dd:9a:a3:89:f7:ce:d5:5d:0c: ae:99:e1:12:53:11:9a:62:29:22:70:57:7e:29:a2: 20:a4:64:0e:e4:6a:b4:79:72:4a:51:75:eb:46:93: e1:60:49:92:43:4f:03:f7:d2:6f:43:c4:b6:67:0a: 58:e0:9c:ca:ea:26:5e:cc:25:3f:7c:cb:37:d4:b8: 4c:51:d8:8d:3d:b1:7f:ba:69:bb:88:df:82:2e:23: c3:40:57:39:08:03:c5:da:51:ad:e3:98:c5:0b:b8: f2:8c:26:77:f0:5a:ad:cd:0a:38:6d:5d:18:24:22: 10:69:66:43:fe:24:60:4a:8c:87:72:38:c6:2d:51: 2a:3d:38:e2:18:11:a9:65:0b:a0:e2:75:3b:d8:86: 16:52:23:e4:ca:b8:f0:3e:4a:16:e3:75:7d:96:be: 4a:e5:2a:c4:84:e0:3f:ad:7a:41:7e:ef:30:ce:ec: ba:1c:9e:4a:a5:86:34:5d:27:82:06:0f:39:8d:b8: ab:fb:89:02:ce:05:2f:a3:26:17:23:62:ba:3e:51: 8b:9c:d5:8a:7b:45:f0:79:09:73:63:a9:cd:7f:20: a0:ea:c6:45:d9:f3:4e:50:ef:f8:16:f0:3a:a7:59: a5:23:51:c9:25:46:67:49:6a:4b:03:46:4d:0e:4a: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DE:D2:2E:BC:C4:0F:7C:12:4A:13:BE:51:05:B7:40:28:2C:9B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd31febc-cbf6-38fe-a27c-0b46f50c5b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d7:68:1e:22:98:69:62:f9:dc:6e:a9:57:c5:38:47:62:2a: 11:6e:0f:b8:90:ae:c8:0e:7c:41:89:31:38:80:51:43:47:e9: 22:ea:dd:89:18:ed:85:e7:00:bf:9b:09:d0:c4:6c:3b:cb:65: ae:f9:6b:61:76:56:10:a8:58:91:23:5b:53:f1:d4:fb:5d:45: 18:2b:f0:4c:44:ea:e2:09:5b:c9:bb:77:68:87:5e:4b:37:28: 32:5c:8c:79:c8:25:27:27:43:44:37:2f:42:62:ba:f6:26:39: be:45:28:09:70:97:da:e2:02:a6:aa:e9:73:97:ed:e7:fb:05: 75:97:5d:2c:12:14:58:22:04:df:22:de:aa:35:42:9b:17:1a: ca:f8:e6:01:8f:02:7d:7a:b0:6a:18:d1:7b:80:a6:d7:c9:1c: 0b:2e:1e:c4:50:01:4c:06:f6:b3:0c:01:93:e5:10:00:67:0a: 6c:f4:39:40:72:be:94:fe:bb:05:e1:fa:8e:7d:aa:67:d8:a3: 51:99:bb:b7:62:b9:a1:fa:d8:25:0c:4f:01:04:70:b9:6c:6e: d2:56:bd:80:02:5d:a6:4f:d4:4d:0a:06:05:4f:81:79:35:73: f0:70:3c:b7:45:2c:a1:48:7b:9f:d5:6a:36:03:ff:31:a9:3d: 00:9b:af:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzj+6rrKD2AQFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTA3YWFmMmEtNjk5OC00YzM4LWE5ODUtODhkOWQzN2EzZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSm1aGfdmqOJ987VXQyumeESUxGaYikicFd+ KaIgpGQO5Gq0eXJKUXXrRpPhYEmSQ08D99JvQ8S2ZwpY4JzK6iZezCU/fMs31LhM UdiNPbF/umm7iN+CLiPDQFc5CAPF2lGt45jFC7jyjCZ38FqtzQo4bV0YJCIQaWZD /iRgSoyHcjjGLVEqPTjiGBGpZQug4nU72IYWUiPkyrjwPkoW43V9lr5K5SrEhOA/ rXpBfu8wzuy6HJ5KpYY0XSeCBg85jbir+4kCzgUvoyYXI2K6PlGLnNWKe0XweQlz Y6nNfyCg6sZF2fNOUO/4FvA6p1mlI1HJJUZnSWpLA0ZNDkpnYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDne0i68xA98EkoTvlEFt0AoLJsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2QzMWZlYmMtY2JmNi0z OGZlLWEyN2MtMGI0NmY1MGM1YjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrXaB4imGli+dxuqVfFOEdiKhFuD7iQrsgOfEGJMTiAUUNH6SLq3YkY 7YXnAL+bCdDEbDvLZa75a2F2VhCoWJEjW1Px1PtdRRgr8ExE6uIJW8m7d2iHXks3 KDJcjHnIJScnQ0Q3L0JiuvYmOb5FKAlwl9riAqaq6XOX7ef7BXWXXSwSFFgiBN8i 3qo1QpsXGsr45gGPAn16sGoY0XuAptfJHAsuHsRQAUwG9rMMAZPlEABnCmz0OUBy vpT+uwXh+o59qmfYo1GZu7diuaH62CUMTwEEcLlsbtJWvYACXaZP1E0KBgVPgXk1 c/BwPLdFLKFIe5/VajYD/zGpPQCbr/w= -----END CERTIFICATE-----Generated at Tue May 6 19:53:24 2025 by rpki-client