$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa File: 0b94eb6e-546d-3206-8024-f1e432ee56f0.roa (raw, json) Hash identifier: SwZYZs4LM2w43EvYVV3pfUzy8YGw1Qfhq1f7/n7nNGI= Subject key identifier: 79:0C:00:AE:32:12:56:06:98:67:48:E5:1B:A2:20:E6:0D:A6:8F:F8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DC83D8FE55288ECF1C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:dc:83:d8:fe:55:28:8e:cf:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a7482929-7abf-45fd-94c5-3aac438441a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:22:23:07:ac:bb:d4:f8:83:63:18:cf:b4:80: 6e:e8:a0:48:08:56:50:5e:a7:57:60:2d:c0:10:99: ea:8e:77:77:33:8a:28:76:5c:df:78:67:d4:bd:93: f0:f0:23:23:5f:de:d0:e7:00:fc:ba:f4:e5:62:3c: 56:3c:7e:69:fd:63:97:cb:fa:c7:8b:c6:1a:cf:09: 8c:2e:fd:ee:4b:01:b0:d8:41:68:11:1f:57:df:fb: 7b:a8:92:57:5c:12:d7:91:01:cf:97:03:11:04:93: 24:cc:9e:e3:64:85:52:7d:34:61:79:40:92:1b:55: 28:af:ee:57:72:d3:5a:0f:dd:48:40:cd:ea:8d:9f: 16:86:ec:e7:81:fa:2c:9a:89:27:1e:97:72:5f:3e: d5:31:c8:90:df:40:0b:5c:bf:22:50:03:0b:5a:e9: 2f:44:64:70:2d:ce:ac:15:bf:63:90:5a:1a:d6:c0: 7d:8f:2f:f2:63:72:f1:76:9c:35:31:9a:c8:f7:f7: 85:db:77:25:93:6c:2c:ca:7e:86:6d:91:14:f0:8f: 72:50:32:e1:96:1e:b6:ef:90:0e:26:a2:16:09:16: f8:d3:ea:b6:05:75:e8:2e:11:0f:5f:0f:21:80:00: 4f:c7:9f:0c:ad:fd:b0:66:2e:b5:8a:17:44:4e:31: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0C:00:AE:32:12:56:06:98:67:48:E5:1B:A2:20:E6:0D:A6:8F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:a5:80:38:a0:2f:1c:b5:42:64:e7:fa:8c:4e:0b:b8:3b:51: e7:48:d7:9e:a1:8e:db:1d:b4:b3:bd:de:88:8a:52:99:e1:24: 5f:4d:6a:f4:c8:9d:a5:a2:4b:9a:df:5c:9f:9a:34:4a:73:ef: 3c:fd:4c:f7:3a:23:1e:56:69:f8:fc:d8:13:36:6c:39:5e:26: 7c:58:50:0e:38:ad:54:81:76:82:aa:8b:ca:0e:d4:4c:dd:2b: 9f:33:ac:7c:3b:ae:fc:03:f6:a3:8a:d4:12:60:c9:fa:84:1f: cc:11:cb:90:97:28:e0:ca:f3:ec:41:6f:77:56:fd:3f:bf:26: 38:0c:df:3c:22:21:76:da:7b:7f:af:cc:71:89:80:0a:12:c6: c7:e6:7b:34:2b:58:5b:44:7c:d4:cc:dd:b9:f0:4a:40:9c:82: d4:8b:68:e4:2c:b6:9a:a5:62:bc:fe:00:1c:1a:42:c9:a9:15: 25:79:8a:9c:af:16:ff:c4:b0:01:93:0f:a5:c1:3a:24:05:b6: 32:ba:a3:ff:d5:3f:a4:1a:76:3e:96:6a:1c:52:24:63:31:b5: bd:68:bb:60:f6:e0:86:c4:78:e2:90:03:43:20:58:42:23:6f: ee:7a:b4:e3:29:a5:ae:f8:19:70:74:29:dd:e3:5e:0c:03:b1: 96:23:97:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdyD2P5VKI7PHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTc0ODI5MjktN2FiZi00NWZkLTk0YzUtM2FhYzQzODQ0MWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSIjB6y71PiDYxjPtIBu6KBICFZQXqdXYC3A EJnqjnd3M4oodlzfeGfUvZPw8CMjX97Q5wD8uvTlYjxWPH5p/WOXy/rHi8YazwmM Lv3uSwGw2EFoER9X3/t7qJJXXBLXkQHPlwMRBJMkzJ7jZIVSfTRheUCSG1Uor+5X ctNaD91IQM3qjZ8WhuzngfosmoknHpdyXz7VMciQ30ALXL8iUAMLWukvRGRwLc6s Fb9jkFoa1sB9jy/yY3Lxdpw1MZrI9/eF23clk2wsyn6GbZEU8I9yUDLhlh6275AO JqIWCRb40+q2BXXoLhEPXw8hgABPx58Mrf2wZi61ihdETjGNWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkMAK4yElYGmGdI5RuiIOYNpo/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI5NGViNmUtNTQ2ZC0z MjA2LTgwMjQtZjFlNDMyZWU1NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANSlgDigLxy1QmTn+oxOC7g7UedI156hjtsdtLO93oiKUpnhJF9NavTI naWiS5rfXJ+aNEpz7zz9TPc6Ix5Wafj82BM2bDleJnxYUA44rVSBdoKqi8oO1Ezd K58zrHw7rvwD9qOK1BJgyfqEH8wRy5CXKODK8+xBb3dW/T+/JjgM3zwiIXbae3+v zHGJgAoSxsfmezQrWFtEfNTM3bnwSkCcgtSLaOQstpqlYrz+ABwaQsmpFSV5ipyv Fv/EsAGTD6XBOiQFtjK6o//VP6Qadj6WahxSJGMxtb1ou2D24IbEeOKQA0MgWEIj b+56tOMppa74GXB0Kd3jXgwDsZYjlyI= -----END CERTIFICATE-----Generated at Fri Apr 11 22:31:52 2025 by rpki-client