$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2839660-32a5-30af-b1b2-9642c96b9559.roa File: e2839660-32a5-30af-b1b2-9642c96b9559.roa (raw, json) Hash identifier: Jk4JSc0S6UQmLHuBNS0DhofeCNOZUB7vN85o+asF9vk= Subject key identifier: C8:A0:A6:4E:0D:D0:F5:E2:08:4D:3F:33:FF:B7:CD:F3:D7:3F:FA:46 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB35643B30FBD5E09D2268 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2839660-32a5-30af-b1b2-9642c96b9559.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:35:64:3b:30:fb:d5:e0:9d:22:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3c3fcefd-f2fa-4cac-8d3c-6b786c9a634d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:48:ad:25:1a:3c:0f:f7:9c:00:1a:c7:6c:79: 4b:d9:12:03:af:40:18:8a:42:67:1b:de:0a:ef:b6: 8c:e1:0a:f3:4f:da:f3:ec:fc:b8:3b:65:66:9a:4b: a2:c6:71:00:c0:3c:56:83:44:9d:ea:a6:01:d1:b4: 22:0e:ea:d0:d9:a6:87:2f:48:57:85:33:27:dd:6c: e0:02:8c:a2:56:cf:92:73:e6:58:78:d9:f9:09:8c: eb:00:9c:db:74:3e:1e:7c:f8:27:cf:01:f9:53:f6: 6e:ac:32:4f:f6:be:ee:72:f7:f5:fd:71:c2:40:ec: c3:cb:1d:37:9f:17:1a:a1:d9:16:0a:6f:65:ab:74: 30:75:3b:9e:da:ff:5a:76:21:49:90:99:f7:ab:2e: bf:05:bd:81:fa:9b:d2:4c:2a:a9:3c:a5:5d:9a:00: f9:d8:39:6d:43:cf:07:15:fb:78:b7:6d:50:a7:f2: 76:4f:df:d5:fa:d4:37:e0:83:b0:24:cf:85:4e:b3: 6a:fe:4d:24:20:41:c4:4f:c5:e9:2d:68:ae:2c:39: 6e:f8:ae:12:31:40:18:c2:8d:d8:95:14:0d:c2:3f: 68:1e:dd:07:b4:c9:f0:dd:7d:b0:fd:2f:b1:24:bc: e3:79:0c:37:2e:2c:96:5e:c7:0a:08:fa:d4:b2:e3: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:A6:4E:0D:D0:F5:E2:08:4D:3F:33:FF:B7:CD:F3:D7:3F:FA:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2839660-32a5-30af-b1b2-9642c96b9559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d5:2e:74:ab:56:fc:1c:40:6b:19:c5:78:66:c1:35:f3:1a: a1:c4:a9:8d:04:8e:ad:64:31:b9:0c:ff:d4:eb:e6:d2:ed:7c: 20:b1:ad:c6:1c:8e:7b:5d:77:2d:fa:30:99:c6:73:1b:6b:25: e6:44:dc:06:26:84:65:87:0e:1f:0d:63:85:95:39:7f:84:c2: 63:4d:70:95:48:56:9f:a1:e9:da:5a:99:ec:9a:8d:bc:4a:e9: e4:d6:73:57:29:4d:5f:1d:49:12:53:10:fa:ff:63:0c:f6:df: 4b:3a:49:f4:90:99:6a:40:a8:30:c1:f6:61:51:7e:e4:98:f3: 48:08:7a:8f:22:ab:27:29:3c:34:ed:e7:82:45:f8:d3:3f:bb: 3e:74:d7:e8:e4:8d:bf:bc:ae:e4:f8:ec:5a:1f:8a:d6:79:66: 0e:4b:c0:a5:62:f4:ff:59:30:2a:32:ec:7b:40:90:b0:48:e1: 57:4c:b4:ba:9a:87:d3:4e:8b:e7:fb:5d:79:a6:c2:64:9a:02: 98:6f:e5:47:cc:1a:87:79:b0:02:52:98:15:dd:2e:d0:14:be: a6:af:34:ba:7f:39:b0:a1:8e:fd:9a:f8:e4:af:50:21:41:2b: 75:35:10:d6:b9:d5:92:1d:69:1f:d8:41:c2:de:61:06:89:f8: 22:12:b7:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzVkOzD71eCdImgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2MzZmNlZmQtZjJmYS00Y2FjLThkM2MtNmI3ODZjOWE2MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUitJRo8D/ecABrHbHlL2RIDr0AYikJnG94K 77aM4QrzT9rz7Py4O2VmmkuixnEAwDxWg0Sd6qYB0bQiDurQ2aaHL0hXhTMn3Wzg AoyiVs+Sc+ZYeNn5CYzrAJzbdD4efPgnzwH5U/ZurDJP9r7ucvf1/XHCQOzDyx03 nxcaodkWCm9lq3QwdTue2v9adiFJkJn3qy6/Bb2B+pvSTCqpPKVdmgD52DltQ88H Fft4t21Qp/J2T9/V+tQ34IOwJM+FTrNq/k0kIEHET8XpLWiuLDlu+K4SMUAYwo3Y lRQNwj9oHt0HtMnw3X2w/S+xJLzjeQw3LiyWXscKCPrUsuN9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMigpk4N0PXiCE0/M/+3zfPXP/pGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTI4Mzk2NjAtMzJhNS0z MGFmLWIxYjItOTY0MmM5NmI5NTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLVLnSrVvwcQGsZxXhmwTXzGqHEqY0Ejq1kMbkM/9Tr5tLtfCCxrcYc jntddy36MJnGcxtrJeZE3AYmhGWHDh8NY4WVOX+EwmNNcJVIVp+h6dpameyajbxK 6eTWc1cpTV8dSRJTEPr/Ywz230s6SfSQmWpAqDDB9mFRfuSY80gIeo8iqycpPDTt 54JF+NM/uz501+jkjb+8ruT47FofitZ5Zg5LwKVi9P9ZMCoy7HtAkLBI4VdMtLqa h9NOi+f7XXmmwmSaAphv5UfMGod5sAJSmBXdLtAUvqavNLp/ObChjv2a+OSvUCFB K3U1ENa51ZIdaR/YQcLeYQaJ+CISt60= -----END CERTIFICATE-----Generated at Sun May 11 04:31:16 2025 by rpki-client