$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa File: 7e1fc77f-639e-3273-a5fa-899d78297142.roa (raw, json) Hash identifier: dVaQUdjS8lL464xpmxAcW2g6uW7KDyFh3IA66Q772OM= Subject key identifier: A9:8E:67:4F:4F:8D:3A:15:3A:C9:CC:E4:1F:3B:52:C3:59:CB:35:DC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DF1CFF7E91F7A9517380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:df:1c:ff:7e:91:f7:a9:51:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=64605115-4752-4596-8326-aa60bf0b1479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:67:00:02:2d:24:87:42:62:2a:31:39:9b:d3: 68:84:dc:e5:27:ee:26:77:02:1c:e6:b6:56:6e:1a: 4a:b5:9e:27:ad:0e:10:6f:cb:28:ce:81:30:92:f7: f9:27:2d:d8:b3:a4:d5:c9:98:9b:f2:24:86:5a:4d: 62:1d:e8:1c:75:63:66:24:23:b0:88:c4:79:2b:a1: 7a:84:98:08:24:60:17:90:f3:b1:4c:66:65:ee:19: 19:22:a7:ef:29:60:56:6b:a0:c7:96:dd:1c:44:f1: d5:a3:97:01:da:71:dd:2d:d3:4d:ca:2f:1a:50:ee: 6d:db:50:a7:86:d9:08:d2:0c:4c:77:03:96:2b:62: 76:d2:c4:19:7a:6a:aa:4a:fb:b0:bd:73:7f:17:1f: 85:05:ba:d0:03:1b:d3:bc:16:cd:1a:a0:54:c2:77: 31:86:f8:d6:dc:e3:95:cf:1e:fa:3a:c5:43:d5:a7: 91:62:30:1b:b1:19:10:b9:74:93:95:1f:b3:cb:09: 72:0c:ef:65:88:86:0f:25:af:a0:59:1c:b2:66:75: 44:f9:3d:c7:71:a2:a4:8a:be:3c:91:51:6a:b3:27: b6:7a:63:10:2a:0e:a0:16:49:40:5e:98:ea:9b:47: 38:24:3d:ea:0f:17:35:19:3f:f1:be:28:5c:f2:18: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8E:67:4F:4F:8D:3A:15:3A:C9:CC:E4:1F:3B:52:C3:59:CB:35:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e1fc77f-639e-3273-a5fa-899d78297142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4e:a0:d2:ed:0d:40:67:3a:4e:b6:54:2d:d4:62:5a:3b:62: 36:da:82:7f:50:95:8a:fe:9a:74:2b:36:ca:43:a6:7a:a3:2e: e5:5c:8c:e9:ad:8b:f4:fa:99:45:62:20:51:33:69:6d:01:7b: 54:29:56:2c:f7:58:ad:6d:82:20:11:2a:02:70:01:77:69:7e: 69:3e:6d:34:34:9e:0d:e1:aa:5f:ee:e1:6c:81:f1:50:10:0b: 7b:ce:32:1f:6b:db:73:c0:e7:13:1f:d7:3a:f7:35:7b:61:fc: f1:11:c4:6f:c0:de:52:12:2e:92:6e:a3:5b:2e:46:c5:19:63: 60:a1:95:23:a5:f3:d1:80:4d:5d:b2:12:05:9c:f5:81:e8:1d: 45:a4:74:05:f7:5b:70:31:4d:2a:3a:a4:cd:fe:35:d2:13:ab: 37:95:84:83:a5:8b:36:1b:ce:04:a4:8b:96:5c:7e:94:4e:be: 8b:b3:59:d3:51:67:9e:de:31:02:db:1b:cd:da:60:19:9b:44: 66:6d:3e:4a:e3:99:22:de:17:01:80:46:b3:2c:aa:76:0b:11: cc:90:22:08:8c:5c:a9:df:72:93:d9:2d:43:a1:4b:05:f4:9a: 75:36:b0:62:3c:12:f5:60:84:dc:03:ea:8a:a3:6d:43:9b:f0: e2:1c:be:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd8c/36R96lRc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjQ2MDUxMTUtNDc1Mi00NTk2LTgzMjYtYWE2MGJmMGIxNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2cAAi0kh0JiKjE5m9NohNzlJ+4mdwIc5rZW bhpKtZ4nrQ4Qb8sozoEwkvf5Jy3Ys6TVyZib8iSGWk1iHegcdWNmJCOwiMR5K6F6 hJgIJGAXkPOxTGZl7hkZIqfvKWBWa6DHlt0cRPHVo5cB2nHdLdNNyi8aUO5t21Cn htkI0gxMdwOWK2J20sQZemqqSvuwvXN/Fx+FBbrQAxvTvBbNGqBUwncxhvjW3OOV zx76OsVD1aeRYjAbsRkQuXSTlR+zywlyDO9liIYPJa+gWRyyZnVE+T3HcaKkir48 kVFqsye2emMQKg6gFklAXpjqm0c4JD3qDxc1GT/xvihc8hgQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmOZ09PjToVOsnM5B87UsNZyzXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2UxZmM3N2YtNjM5ZS0z MjczLWE1ZmEtODk5ZDc4Mjk3MTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVOoNLtDUBnOk62VC3UYlo7Yjbagn9QlYr+mnQrNspDpnqjLuVcjOmt i/T6mUViIFEzaW0Be1QpViz3WK1tgiARKgJwAXdpfmk+bTQ0ng3hql/u4WyB8VAQ C3vOMh9r23PA5xMf1zr3NXth/PERxG/A3lISLpJuo1suRsUZY2ChlSOl89GATV2y EgWc9YHoHUWkdAX3W3AxTSo6pM3+NdITqzeVhIOlizYbzgSki5ZcfpROvouzWdNR Z57eMQLbG83aYBmbRGZtPkrjmSLeFwGARrMsqnYLEcyQIgiMXKnfcpPZLUOhSwX0 mnU2sGI8EvVghNwD6oqjbUOb8OIcvjc= -----END CERTIFICATE-----Generated at Fri Apr 11 22:45:29 2025 by rpki-client