$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a957273-5d8a-3852-b333-64fd74db36a9.roa File: 7a957273-5d8a-3852-b333-64fd74db36a9.roa (raw, json) Hash identifier: 5O29fhu+0IBheYrNftOGys6L/ruVXtBgNPC3c2Ov1aA= Subject key identifier: 96:87:FC:37:90:9A:2A:A1:A4:55:B3:6F:37:38:19:B8:1F:F7:A9:4E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA98386C554941DFD66B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a957273-5d8a-3852-b333-64fd74db36a9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:98:38:6c:55:49:41:df:d6:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3e844d78-9c17-4e6a-9be5-7d08960a1aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:ba:51:2c:94:2c:38:2c:68:45:e4:b3:cf: 27:f3:d6:ce:31:38:c7:c4:f3:0c:5e:41:54:56:42: 12:3a:5f:dc:53:33:f4:7b:9f:5d:22:35:21:8c:2d: 39:6b:1d:13:c7:e2:d0:5e:2d:24:c2:7e:f3:2b:dd: 32:e2:e5:dc:18:01:9e:ba:d5:88:35:48:6f:ab:51: 4f:36:32:2c:be:af:5c:8a:38:1d:d3:7c:b9:19:b9: 9a:b7:29:6f:84:5b:bd:1d:37:dd:18:2c:b0:9f:c8: 2f:f9:b9:2d:67:75:9e:67:10:28:ed:56:e5:02:86: c9:4f:5b:4c:ec:06:f6:f7:2f:50:ea:cd:5c:36:11: ed:bf:f9:75:6e:ce:bf:24:eb:ca:57:50:a1:aa:97: cf:59:fe:17:0b:d7:24:71:27:85:49:45:3d:e5:cf: c2:ad:7b:78:22:23:67:ef:55:67:51:ea:78:73:76: 61:c9:55:4a:85:f1:78:f4:ef:bc:7a:e5:e6:6f:ec: 2f:d9:69:75:39:73:b7:c2:77:d2:21:15:f4:8b:9d: e8:0d:eb:b6:38:dc:bd:8f:4a:be:45:4d:ab:3d:0a: ef:5b:05:1f:47:39:e1:dc:77:b8:e3:5a:f4:0a:5a: 06:bb:c9:ac:6b:f1:bd:28:c6:ec:a7:27:c2:35:ca: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:87:FC:37:90:9A:2A:A1:A4:55:B3:6F:37:38:19:B8:1F:F7:A9:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a957273-5d8a-3852-b333-64fd74db36a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:ba:79:1f:09:f9:ab:f3:51:88:63:73:14:1f:cb:5b:0d:b4: fc:11:65:1b:90:c7:14:b7:22:09:9a:06:73:a6:3d:b9:2a:78: c7:e4:7b:22:5b:26:cb:56:aa:0d:a6:cd:f3:2a:97:30:d3:60: 92:c6:0a:00:3e:63:74:b9:43:2f:c6:6f:52:3c:26:ea:29:e2: 1b:0f:f4:ba:26:58:82:87:68:1e:4c:ca:7a:b4:94:a1:96:8b: 8b:09:51:be:3f:eb:5b:5e:df:1f:9f:36:63:bc:35:9a:00:48: e0:d0:39:f4:52:1c:6a:10:da:50:73:a8:b5:6d:e4:88:36:79: a8:ed:e4:39:a7:71:55:6b:f3:2c:c4:42:bb:a9:f9:00:ef:a8: 3e:d5:0d:01:28:79:b3:d6:be:10:7f:8e:8c:16:dd:e6:97:3b: ef:ac:f9:b5:71:64:8b:c7:9a:72:44:8d:1c:e0:46:d3:06:0c: 5e:b9:d9:c4:be:52:9e:e2:ba:c3:08:20:bb:1d:68:06:3e:7d: fc:e2:cf:db:9a:5e:bd:dd:87:68:24:39:a1:7c:ed:4a:ee:91: 26:c2:b9:4d:6c:f9:5c:22:45:33:5f:ce:b9:1b:67:cb:59:0a: 7e:a2:b5:95:d4:bf:bf:0c:00:04:35:6e:17:fc:f4:c6:ee:96: 7c:f7:46:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupg4bFVJQd/Wa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2U4NDRkNzgtOWMxNy00ZTZhLTliZTUtN2QwODk2MGExYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwy6USyULDgsaEXks88n89bOMTjHxPMMXkFU VkISOl/cUzP0e59dIjUhjC05ax0Tx+LQXi0kwn7zK90y4uXcGAGeutWINUhvq1FP NjIsvq9cijgd03y5GbmatylvhFu9HTfdGCywn8gv+bktZ3WeZxAo7VblAobJT1tM 7Ab29y9Q6s1cNhHtv/l1bs6/JOvKV1ChqpfPWf4XC9ckcSeFSUU95c/CrXt4IiNn 71VnUep4c3ZhyVVKhfF49O+8euXmb+wv2Wl1OXO3wnfSIRX0i53oDeu2ONy9j0q+ RU2rPQrvWwUfRznh3He441r0CloGu8msa/G9KMbspyfCNcpkrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaH/DeQmiqhpFWzbzc4Gbgf96lOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2E5NTcyNzMtNWQ4YS0z ODUyLWIzMzMtNjRmZDc0ZGIzNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMW6eR8J+avzUYhjcxQfy1sNtPwRZRuQxxS3IgmaBnOmPbkqeMfkeyJb JstWqg2mzfMqlzDTYJLGCgA+Y3S5Qy/Gb1I8Juop4hsP9LomWIKHaB5Mynq0lKGW i4sJUb4/61te3x+fNmO8NZoASODQOfRSHGoQ2lBzqLVt5Ig2eajt5DmncVVr8yzE Qrup+QDvqD7VDQEoebPWvhB/jowW3eaXO++s+bVxZIvHmnJEjRzgRtMGDF652cS+ Up7iusMIILsdaAY+ffziz9uaXr3dh2gkOaF87UrukSbCuU1s+VwiRTNfzrkbZ8tZ Cn6itZXUv78MAAQ1bhf89Mbulnz3Rgo= -----END CERTIFICATE-----Generated at Wed Jun 11 11:15:10 2025 by rpki-client