$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1c1631b-1feb-3f25-bead-362c09d48689.roa File: e1c1631b-1feb-3f25-bead-362c09d48689.roa (raw, json) Hash identifier: tAV20rfvz3NVGjhikMjp22fUXYbEUbSr5r/2EgEW+1Y= Subject key identifier: 8C:52:73:70:04:1F:69:0D:86:FF:2B:3B:F0:0A:24:DD:7F:39:53:C0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA96463C9B9ABBBEEF8A40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1c1631b-1feb-3f25-bead-362c09d48689.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:96:46:3c:9b:9a:bb:be:ef:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2cd8c5f0-7b4d-4e06-adbc-c88d0af6b427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:83:c1:33:95:17:fb:ba:ff:1a:25:0b:e1: 49:38:78:ca:bf:2c:59:be:99:8e:d8:93:19:e5:6f: 99:c5:5f:42:22:65:87:9f:ba:b7:6c:ac:bd:5e:7e: 7f:c8:a2:64:63:6d:10:3d:2c:03:38:60:ab:a6:48: 97:6b:01:80:09:36:66:97:4c:d4:61:1b:71:3a:1e: 39:bb:94:bd:94:c7:19:1f:e0:d8:ff:35:11:9f:9d: 37:f6:94:f4:55:92:f3:6a:7a:67:f7:a2:71:79:c1: df:c2:81:01:3f:df:5e:86:8e:7a:70:5e:4e:14:a5: b9:70:3d:9b:ac:5e:13:d9:8c:78:92:f6:d7:63:c3: 66:a1:53:b3:55:d7:59:53:4a:90:bc:e0:e3:48:aa: eb:b5:ad:9c:d9:02:ee:6b:8a:d3:85:37:1e:d1:d2: 6e:3f:83:9e:0c:a6:0f:1b:41:ae:7d:f9:64:1f:fb: 2b:dd:90:9a:1f:e2:2e:c7:9d:39:8b:bf:a2:8d:50: 3b:d7:17:db:21:6b:a4:24:49:e6:2d:81:dd:4d:71: f9:c5:c0:c1:d1:ce:02:48:ee:9e:c9:ef:71:d0:0d: cd:41:da:05:cf:c9:a8:81:14:aa:9b:dd:11:c1:a4: b1:25:bb:d6:d2:50:e1:69:79:c9:70:c6:c3:59:14: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:52:73:70:04:1F:69:0D:86:FF:2B:3B:F0:0A:24:DD:7F:39:53:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e1c1631b-1feb-3f25-bead-362c09d48689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:93:18:37:cf:dc:6b:a8:c7:0c:65:fb:0a:d1:d0:0a:43:60: bb:03:06:7a:c1:71:e2:40:20:76:a4:7d:1c:cb:75:df:81:2b: 9d:a7:0d:bc:51:0d:58:46:3c:5e:5e:1f:a6:92:98:35:c4:7e: 4b:a9:e0:74:e9:4e:95:d3:af:fb:50:6b:d3:65:b8:e3:3f:ea: 0e:7e:f7:fe:ec:f5:e9:00:ef:a4:81:e4:0e:06:36:1c:e4:25: bf:ae:90:95:bf:4f:6a:79:f1:d1:93:ad:3c:8b:11:59:12:a5: 08:fc:ec:f8:6a:9f:c3:07:00:6f:e8:8e:6d:ba:c0:28:e4:c9: 2a:ad:52:ba:73:2b:f6:6b:ca:5b:f9:b5:0b:7b:aa:d1:47:c8: a6:01:e4:ff:1d:b6:31:16:76:09:19:51:f0:f4:a7:a1:14:e1: df:a8:0e:83:13:d9:71:cd:44:ff:53:a4:f4:b2:74:aa:5a:02: e4:26:e2:53:81:5b:90:92:f4:a7:9f:49:3b:75:50:44:88:a0: cc:c8:f5:85:fe:ac:c6:69:fb:9d:a3:cc:d2:d9:3b:90:74:1f: b7:44:c6:51:08:2d:f6:27:0a:c0:e9:b2:87:12:93:9d:56:95: d3:8e:e5:ba:55:7b:c1:12:1f:c9:31:66:f0:de:42:c9:69:bc: ad:87:16:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupZGPJuau77vikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmNkOGM1ZjAtN2I0ZC00ZTA2LWFkYmMtYzg4ZDBhZjZiNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFmDwTOVF/u6/xolC+FJOHjKvyxZvpmO2JMZ 5W+ZxV9CImWHn7q3bKy9Xn5/yKJkY20QPSwDOGCrpkiXawGACTZml0zUYRtxOh45 u5S9lMcZH+DY/zURn5039pT0VZLzanpn96JxecHfwoEBP99eho56cF5OFKW5cD2b rF4T2Yx4kvbXY8NmoVOzVddZU0qQvODjSKrrta2c2QLua4rThTce0dJuP4OeDKYP G0GufflkH/sr3ZCaH+Iux505i7+ijVA71xfbIWukJEnmLYHdTXH5xcDB0c4CSO6e ye9x0A3NQdoFz8mogRSqm90RwaSxJbvW0lDhaXnJcMbDWRSgbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxSc3AEH2kNhv8rO/AKJN1/OVPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTFjMTYzMWItMWZlYi0z ZjI1LWJlYWQtMzYyYzA5ZDQ4Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiTGDfP3Guoxwxl+wrR0ApDYLsDBnrBceJAIHakfRzLdd+BK52nDbxR DVhGPF5eH6aSmDXEfkup4HTpTpXTr/tQa9NluOM/6g5+9/7s9ekA76SB5A4GNhzk Jb+ukJW/T2p58dGTrTyLEVkSpQj87Phqn8MHAG/ojm26wCjkySqtUrpzK/Zrylv5 tQt7qtFHyKYB5P8dtjEWdgkZUfD0p6EU4d+oDoMT2XHNRP9TpPSydKpaAuQm4lOB W5CS9KefSTt1UESIoMzI9YX+rMZp+52jzNLZO5B0H7dExlEILfYnCsDpsocSk51W ldOO5bpVe8ESH8kxZvDeQslpvK2HFmc= -----END CERTIFICATE-----Generated at Sun May 11 04:31:09 2025 by rpki-client