$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa File: d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa (raw, json) Hash identifier: i+3rNg7FH0+mcdHaHOPTH1Yw2BnXoFEFdM6TmW0FH4A= Subject key identifier: B7:0A:E8:89:B1:F0:5C:BF:E8:C1:C9:4E:46:D9:5E:AD:11:79:47:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB38CF38C08981BEE2FA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:38:cf:38:c0:89:81:be:e2:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d57d326c-b9ea-4903-bc19-8069c71d776c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:df:ad:5c:1c:a6:8c:6b:3e:e2:34:43:e7: e4:e6:ed:84:87:65:a2:6c:5a:2c:34:8a:43:de:0f: ce:06:56:0a:d9:b0:ae:33:0c:f6:31:0d:e2:98:83: 65:5d:f6:cb:2f:44:e8:09:4e:3c:4c:92:94:5c:dd: 9b:62:61:bb:21:82:50:5f:bb:09:6d:e7:65:ee:01: 4f:3e:f3:29:2a:46:00:d2:df:17:c8:6d:89:7b:43: e7:56:2b:0a:2a:54:b6:57:78:3e:17:5e:05:c8:d6: a8:b0:e3:4d:1a:6d:42:d6:c8:bd:1f:c0:ce:ac:60: 27:d0:b4:e6:b1:2a:7f:59:fa:e4:26:87:c2:aa:12: 54:9a:d4:4f:65:43:64:6f:b8:45:fb:d3:fe:f2:2f: 02:0d:e3:09:5f:c1:19:d8:a9:a1:e0:cc:b6:e4:07: 57:d3:2d:87:8b:7d:aa:af:1a:7d:3d:66:79:d4:23: 70:9f:5b:19:08:7c:85:71:1a:f4:15:be:fd:cc:8e: 35:35:c3:7e:2a:87:b1:39:58:12:ac:f1:2c:97:8f: f6:b1:02:23:eb:d8:be:55:f0:f1:5f:a8:5f:68:80: e3:79:94:f5:2b:32:1a:34:34:95:48:49:a7:8d:48: 9a:c8:51:80:d4:59:82:20:4a:40:5e:55:1b:c7:bf: b6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0A:E8:89:B1:F0:5C:BF:E8:C1:C9:4E:46:D9:5E:AD:11:79:47:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:79:13:b4:c6:1e:59:63:a4:00:b5:94:60:c7:70:eb:1e:40: 3e:b7:01:c8:f0:00:97:ad:f2:4a:45:7c:eb:7c:d9:d9:10:9c: a6:c9:28:f8:5e:84:fa:b0:77:f2:ce:38:2a:f2:44:42:b7:6a: 84:6e:07:a1:42:33:cf:e5:ba:91:b1:da:4c:ee:c9:70:02:18: 72:87:ac:11:a2:d2:28:67:aa:06:26:41:ff:8e:86:11:61:8d: 67:15:b2:bb:42:60:d1:5e:7b:76:aa:dc:e9:34:b2:ce:04:97: 7e:82:bf:fd:c5:95:6e:85:07:01:a5:72:38:22:5d:d1:2f:92: 66:a8:fa:f7:38:7b:77:6a:cc:2a:46:30:17:1c:a8:0e:72:29: 0d:88:f1:e0:ae:ed:55:51:60:e8:49:f1:83:48:51:bc:89:d2: 7d:9e:a8:5d:40:8b:2f:94:7c:1a:dc:6e:9f:12:95:f9:d2:08: d7:b2:d3:94:df:a4:af:e5:7f:23:07:c6:7d:72:47:88:f3:9b: a4:e3:4b:f6:e7:ea:ff:86:ee:49:78:8d:7e:49:df:68:8e:4d: 98:27:55:22:3c:24:74:2c:d2:17:a9:b1:f9:ab:fb:67:30:e6: fc:16:7e:07:c7:59:17:ad:68:f3:01:29:da:28:b7:64:03:61: 38:38:cf:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzjPOMCJgb7i+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDU3ZDMyNmMtYjllYS00OTAzLWJjMTktODA2OWM3MWQ3NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgjfrVwcpoxrPuI0Q+fk5u2Eh2WibFosNIpD 3g/OBlYK2bCuMwz2MQ3imINlXfbLL0ToCU48TJKUXN2bYmG7IYJQX7sJbedl7gFP PvMpKkYA0t8XyG2Je0PnVisKKlS2V3g+F14FyNaosONNGm1C1si9H8DOrGAn0LTm sSp/WfrkJofCqhJUmtRPZUNkb7hF+9P+8i8CDeMJX8EZ2Kmh4My25AdX0y2Hi32q rxp9PWZ51CNwn1sZCHyFcRr0Fb79zI41NcN+KoexOVgSrPEsl4/2sQIj69i+VfDx X6hfaIDjeZT1KzIaNDSVSEmnjUiayFGA1FmCIEpAXlUbx7+2hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcK6Imx8Fy/6MHJTkbZXq0ReUeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDJlNGMwMGYtMTA5Mi0z YzJlLWE4ZjUtYWJlM2U5NDQzOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF15E7TGHlljpAC1lGDHcOseQD63AcjwAJet8kpFfOt82dkQnKbJKPhe hPqwd/LOOCryREK3aoRuB6FCM8/lupGx2kzuyXACGHKHrBGi0ihnqgYmQf+OhhFh jWcVsrtCYNFee3aq3Ok0ss4El36Cv/3FlW6FBwGlcjgiXdEvkmao+vc4e3dqzCpG MBccqA5yKQ2I8eCu7VVRYOhJ8YNIUbyJ0n2eqF1Aiy+UfBrcbp8SlfnSCNey05Tf pK/lfyMHxn1yR4jzm6TjS/bn6v+G7kl4jX5J32iOTZgnVSI8JHQs0hepsfmr+2cw 5vwWfgfHWRetaPMBKdoot2QDYTg4z5w= -----END CERTIFICATE-----Generated at Wed May 7 03:43:29 2025 by rpki-client