$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa File: 4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa (raw, json) Hash identifier: VLHeFENBhdflEFXAYmGMr4vadiq3Xk4pYbh0Hp0Zp/A= Subject key identifier: 88:01:54:11:39:02:34:8D:66:04:1C:CE:22:6D:09:9F:B3:67:79:AE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E0E4E0A49C65784C70E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e0:e4:e0:a4:9c:65:78:4c:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=baf357c6-b7c8-44a9-b296-9b4f6639438d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:d5:55:28:70:18:bc:bd:53:0d:8b:61:d0: d3:77:ea:cc:8a:d1:18:33:c6:2e:c3:74:bd:cd:92: 23:19:2c:e2:dd:b1:77:8e:53:f6:6d:0a:ce:70:4a: 60:92:d2:59:94:33:11:9d:ac:fd:2e:71:12:55:0d: a3:e5:3d:bb:90:a9:de:26:2a:78:06:11:b2:6b:94: a6:32:e8:67:43:19:f4:c5:f8:a0:3f:c2:f3:24:bb: c1:f0:a3:2d:d6:8b:85:e4:d3:1f:30:91:29:b1:53: 22:b4:dc:5c:41:69:68:a7:9f:5a:c1:95:ab:c8:b5: b7:f5:f3:3e:c4:72:2b:e3:43:ea:be:57:ed:8f:10: 6f:3f:46:ba:d1:73:d7:cf:59:a3:c6:8e:4f:6e:55: 07:a1:21:9e:c3:7b:6f:02:38:8c:5a:33:b4:5b:e5: 6e:66:28:ee:6c:d3:ef:b2:89:fe:ee:35:ba:e6:91: 35:a9:ee:e9:dc:ac:7f:0c:a1:ed:46:ed:43:8d:a3: c8:43:4b:c8:5a:06:4d:08:fb:a5:4c:17:28:b2:ad: 7d:ef:66:26:ce:0b:3c:55:ad:e1:f7:86:c6:75:90: 1f:89:b2:35:69:ba:ff:66:18:c6:06:10:88:bb:64: 61:de:35:cf:c9:38:c7:10:46:64:49:cb:c9:6e:bf: 61:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:01:54:11:39:02:34:8D:66:04:1C:CE:22:6D:09:9F:B3:67:79:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b0:e0:43:c5:5d:d9:9a:97:66:53:fb:a4:46:2c:ae:0d:2f: 98:45:4d:5e:a7:44:d1:51:03:e6:b4:24:06:eb:65:de:3f:4c: 36:60:48:5f:fa:d3:54:a3:be:b9:68:19:3d:96:5d:6e:f6:02: dd:0e:61:63:3d:a4:35:18:17:9d:74:7e:c4:3d:8d:03:12:19: c0:b9:8e:de:a4:3e:ae:99:03:f4:d1:1d:c8:c1:d4:43:1c:37: d1:cd:9f:75:e7:bd:bd:c6:ae:a5:48:d9:12:9e:5d:60:5e:23: d5:c1:4c:cf:54:23:0c:57:a1:bd:51:3f:0c:a8:68:f4:9a:48: 35:bc:bc:d2:35:c0:0f:20:47:b2:ff:0a:18:3a:0b:c1:80:bb: 0f:da:f0:39:51:39:ce:88:f0:b4:e1:17:c0:eb:76:46:44:df: f4:fd:27:7b:38:23:c3:18:d2:d3:80:80:f6:42:94:fd:06:58: 6c:b1:5e:49:76:18:8b:9d:a9:a0:3d:a6:a3:ec:ad:86:24:6f: e8:84:02:64:bd:fe:78:6c:5d:8b:fb:e7:0b:4a:b8:b6:a2:03: a1:fa:b8:86:cd:28:cc:b6:72:1b:df:cf:6a:65:08:99:80:ce: 69:19:c1:63:d4:72:31:72:ef:24:16:99:65:85:95:b5:16:15: 50:9f:fb:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeDk4KScZXhMcOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmFmMzU3YzYtYjdjOC00NGE5LWIyOTYtOWI0ZjY2Mzk0MzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrTVVShwGLy9Uw2LYdDTd+rMitEYM8Yuw3S9 zZIjGSzi3bF3jlP2bQrOcEpgktJZlDMRnaz9LnESVQ2j5T27kKneJip4BhGya5Sm MuhnQxn0xfigP8LzJLvB8KMt1ouF5NMfMJEpsVMitNxcQWlop59awZWryLW39fM+ xHIr40PqvlftjxBvP0a60XPXz1mjxo5PblUHoSGew3tvAjiMWjO0W+VuZijubNPv son+7jW65pE1qe7p3Kx/DKHtRu1DjaPIQ0vIWgZNCPulTBcosq1972Ymzgs8Va3h 94bGdZAfibI1abr/ZhjGBhCIu2Rh3jXPyTjHEEZkScvJbr9hHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgBVBE5AjSNZgQcziJtCZ+zZ3muMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDQ5MmFiMGEtOWM3OC0z ZGJlLTg1ZWQtZGI5ODFjYTJlNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWw4EPFXdmal2ZT+6RGLK4NL5hFTV6nRNFRA+a0JAbrZd4/TDZgSF/6 01SjvrloGT2WXW72At0OYWM9pDUYF510fsQ9jQMSGcC5jt6kPq6ZA/TRHcjB1EMc N9HNn3Xnvb3GrqVI2RKeXWBeI9XBTM9UIwxXob1RPwyoaPSaSDW8vNI1wA8gR7L/ Chg6C8GAuw/a8DlROc6I8LThF8DrdkZE3/T9J3s4I8MY0tOAgPZClP0GWGyxXkl2 GIudqaA9pqPsrYYkb+iEAmS9/nhsXYv75wtKuLaiA6H6uIbNKMy2chvfz2plCJmA zmkZwWPUcjFy7yQWmWWFlbUWFVCf+90= -----END CERTIFICATE-----Generated at Fri Apr 11 23:44:13 2025 by rpki-client