$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b01e0694-bde7-3d9d-b8f4-48d1d5aa9945.roa File: b01e0694-bde7-3d9d-b8f4-48d1d5aa9945.roa (raw, json) Hash identifier: LeekhSXE2VFhkalh2XD/utawrOI2Y9nh51qwfMAgKgo= Subject key identifier: 0E:48:18:44:61:41:E7:C0:63:72:74:75:C6:BF:F1:C6:9E:9A:01:4D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA92E9EB2920C7F889B880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b01e0694-bde7-3d9d-b8f4-48d1d5aa9945.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:92:e9:eb:29:20:c7:f8:89:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c69f96cc-45d3-4ab3-a73d-9d76a4551825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a9:06:b2:4c:bc:e5:26:54:4f:44:cf:32:da: 39:37:3d:02:03:fa:5a:7f:01:48:a6:11:69:91:77: 84:70:7e:2a:89:32:32:1d:84:1e:d2:12:ad:1a:78: dd:08:a0:87:3e:23:5a:68:38:c8:8a:01:5e:7b:15: 6c:c1:28:82:ed:1d:84:76:80:1f:c6:c3:75:e1:2c: 2d:dd:6c:3a:c3:7c:6c:b3:d8:3b:b0:b6:1b:bb:da: 61:60:e8:f3:10:f0:0a:85:90:b8:92:89:88:43:35: 29:22:24:de:01:5a:42:89:04:1a:c3:b9:06:d6:dd: 56:5b:b5:e4:c0:13:39:71:0a:24:4c:e3:85:b0:3b: b7:c4:5b:39:0a:e1:76:5b:6f:2f:bf:11:5d:05:e4: e7:8d:7e:d9:8e:53:49:70:2f:08:9d:42:0f:39:19: 70:f3:60:6d:bc:34:44:30:d8:88:9a:a0:ff:87:d8: 71:19:74:90:f9:3a:11:c3:b8:b3:07:04:68:1f:09: d5:eb:1c:f9:23:ef:09:1b:41:1f:04:a1:f3:de:e9: 7e:51:28:c3:bc:17:5b:cc:9e:7b:db:6e:5c:b5:1c: 07:85:59:85:e0:ca:86:c5:5e:3d:1b:7f:ff:97:17: 37:e3:6f:0e:18:13:36:fb:46:b8:fe:fe:d2:7c:ec: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:48:18:44:61:41:E7:C0:63:72:74:75:C6:BF:F1:C6:9E:9A:01:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b01e0694-bde7-3d9d-b8f4-48d1d5aa9945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:72:a9:53:64:51:6b:1e:1b:e2:2f:29:1a:a1:7f:0d:2c:07: 9a:ea:16:44:25:3e:f5:d8:f9:b9:6e:e9:bf:3e:78:1c:2d:6b: 6a:4c:49:d8:db:44:89:94:f9:e4:4f:66:ef:d2:92:fc:05:bb: 2c:9b:bd:0a:03:f0:ab:14:91:69:77:6c:8c:62:99:ab:74:27: 92:2e:71:12:76:39:59:48:30:3a:51:cb:ec:63:db:fc:ed:b6: a2:07:7f:8a:c1:7d:0f:12:d2:fb:1b:3b:5b:00:2a:3d:a4:87: eb:20:cb:01:a3:2c:03:ff:de:c4:90:b5:f1:e0:5b:de:81:15: 3a:a4:71:35:c0:c9:84:3b:90:30:10:f1:d5:d3:d4:51:80:f5: fd:e2:b8:7c:cc:0a:5b:3a:df:54:3d:81:2f:12:a0:75:d4:fc: de:9f:7d:8e:81:45:87:db:20:a4:d4:cc:40:14:a2:ca:d4:5d: 26:2b:e9:cc:71:2c:ff:80:b3:d8:58:8b:93:0a:b6:e4:ef:3d: e6:0f:6f:10:56:a4:a4:06:49:f1:17:c6:15:d8:e3:8e:70:5f: 9c:dc:2d:3a:67:b6:79:9e:99:fc:79:e3:e3:26:0a:31:e7:24: b8:2e:a5:a5:1d:39:36:db:0b:59:83:e4:78:d2:33:2a:f6:62: f3:69:77:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupLp6ykgx/iJuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzY5Zjk2Y2MtNDVkMy00YWIzLWE3M2QtOWQ3NmE0NTUxODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qkGsky85SZUT0TPMto5Nz0CA/pafwFIphFp kXeEcH4qiTIyHYQe0hKtGnjdCKCHPiNaaDjIigFeexVswSiC7R2EdoAfxsN14Swt 3Ww6w3xss9g7sLYbu9phYOjzEPAKhZC4komIQzUpIiTeAVpCiQQaw7kG1t1WW7Xk wBM5cQokTOOFsDu3xFs5CuF2W28vvxFdBeTnjX7ZjlNJcC8InUIPORlw82BtvDRE MNiImqD/h9hxGXSQ+ToRw7izBwRoHwnV6xz5I+8JG0EfBKHz3ul+USjDvBdbzJ57 225ctRwHhVmF4MqGxV49G3//lxc3428OGBM2+0a4/v7SfOwc7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5IGERhQefAY3J0dca/8caemgFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjAxZTA2OTQtYmRlNy0z ZDlkLWI4ZjQtNDhkMWQ1YWE5OTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRyqVNkUWseG+IvKRqhfw0sB5rqFkQlPvXY+blu6b8+eBwta2pMSdjb RImU+eRPZu/SkvwFuyybvQoD8KsUkWl3bIximat0J5IucRJ2OVlIMDpRy+xj2/zt tqIHf4rBfQ8S0vsbO1sAKj2kh+sgywGjLAP/3sSQtfHgW96BFTqkcTXAyYQ7kDAQ 8dXT1FGA9f3iuHzMCls631Q9gS8SoHXU/N6ffY6BRYfbIKTUzEAUosrUXSYr6cxx LP+As9hYi5MKtuTvPeYPbxBWpKQGSfEXxhXY445wX5zcLTpntnmemfx54+MmCjHn JLgupaUdOTbbC1mD5HjSMyr2YvNpd3Q= -----END CERTIFICATE-----Generated at Sat Jun 7 23:22:28 2025 by rpki-client