$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b64c4cce-0873-3d84-9626-d6081975cd31.roa File: b64c4cce-0873-3d84-9626-d6081975cd31.roa (raw, json) Hash identifier: kgeRj9Xt3XrJtHiirtvk5xMClAgDikeQH3fT+Lp5DJA= Subject key identifier: 1F:C9:3A:FA:B0:91:FD:43:7A:02:6E:EE:F7:C3:27:BB:BD:D0:DF:41 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB3ACBB95092B7C7FD3480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b64c4cce-0873-3d84-9626-d6081975cd31.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:3a:cb:b9:50:92:b7:c7:fd:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0a6bad3b-8aa5-48cd-92aa-b2f28d1c5ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:c3:ab:25:a5:fd:2c:f9:d2:1b:42:65:53: 28:52:7c:34:18:8c:3a:e9:b1:ae:f3:5f:9a:6d:8f: 39:fa:2e:7d:6d:36:88:35:04:70:e2:e5:b7:0a:80: e7:85:63:3a:67:0a:18:c6:f9:55:90:6d:95:7b:5e: 3f:d3:ee:07:38:bf:2f:4f:35:a0:6a:32:e1:73:0f: 70:36:d0:75:69:05:b8:fb:4d:10:cb:1b:e9:68:5e: 94:3b:28:c9:3a:cd:47:ff:46:a9:ab:3d:70:65:d1: 3e:b8:e5:60:31:3e:b4:20:cd:cd:69:e1:68:55:ef: 26:52:72:a1:4d:45:c9:53:c1:7c:ac:49:54:84:55: 20:94:4d:f7:c1:fd:b7:53:71:3f:e8:f5:27:19:8f: b9:aa:1d:fb:28:55:2c:77:1f:1e:51:41:e3:48:74: 1e:5d:a2:ee:0d:4b:18:7f:51:ab:d9:c5:63:a6:86: 77:ae:17:bf:0a:b1:61:53:e0:d5:1c:4a:fe:24:9b: c5:5f:a8:06:6a:29:21:93:2b:d3:be:27:2e:53:a4: d6:f8:af:d8:82:cd:ca:95:28:47:c5:9e:18:b9:b6: c3:25:ec:d1:54:92:17:8c:40:58:4d:5a:a3:42:ac: 09:08:87:4c:02:db:20:9e:5a:fe:0a:55:70:8c:2c: 88:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C9:3A:FA:B0:91:FD:43:7A:02:6E:EE:F7:C3:27:BB:BD:D0:DF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b64c4cce-0873-3d84-9626-d6081975cd31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ed:5c:18:fe:15:d2:a3:05:1f:0a:55:34:5e:d5:68:2b:b7: d3:10:fd:79:c0:0b:fa:cd:83:84:91:72:8b:8f:c6:4f:f8:6c: 7a:78:2e:b0:72:e6:5c:fb:4b:08:21:51:65:86:cf:80:21:f5: 09:b7:5d:ee:ef:f0:75:dc:c8:86:dc:ff:e5:ba:76:72:44:15: e4:50:36:50:50:5e:15:5c:27:0b:25:bc:3b:7d:85:35:cc:98: 74:0f:02:ff:42:70:be:d9:4d:47:a9:59:8a:ba:e6:05:d9:94: 2f:00:8f:4e:2e:a5:82:d9:b0:aa:c1:4d:92:50:95:72:fc:fe: ad:85:f2:1b:23:1e:fd:ab:4b:29:26:57:2a:07:c4:49:3c:9a: 86:c7:ff:4f:a0:f8:1f:8d:39:07:b8:d4:b0:de:86:00:98:d7: 33:ee:69:80:c9:26:f6:6c:ae:87:59:a8:27:19:f2:7f:43:34: 1a:5d:77:7d:6c:b5:1d:aa:b1:df:7c:cf:0f:28:fc:76:bf:d5: 8d:73:cb:2b:c0:80:70:18:47:09:e6:7e:d4:db:86:d1:89:05: f3:ff:99:db:3b:24:7d:52:ae:92:26:ea:1c:53:4d:ac:20:30: 52:a0:bb:83:48:18:5b:9f:b6:fe:20:70:fa:a6:14:e4:b6:d4: f7:2c:9c:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzrLuVCSt8f9NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGE2YmFkM2ItOGFhNS00OGNkLTkyYWEtYjJmMjhkMWM1ZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hfDqyWl/Sz50htCZVMoUnw0GIw66bGu81+a bY85+i59bTaINQRw4uW3CoDnhWM6ZwoYxvlVkG2Ve14/0+4HOL8vTzWgajLhcw9w NtB1aQW4+00QyxvpaF6UOyjJOs1H/0apqz1wZdE+uOVgMT60IM3NaeFoVe8mUnKh TUXJU8F8rElUhFUglE33wf23U3E/6PUnGY+5qh37KFUsdx8eUUHjSHQeXaLuDUsY f1Gr2cVjpoZ3rhe/CrFhU+DVHEr+JJvFX6gGaikhkyvTvicuU6TW+K/Ygs3KlShH xZ4YubbDJezRVJIXjEBYTVqjQqwJCIdMAtsgnlr+ClVwjCyIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/JOvqwkf1DegJu7vfDJ7u90N9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjY0YzRjY2UtMDg3My0z ZDg0LTk2MjYtZDYwODE5NzVjZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHtXBj+FdKjBR8KVTRe1Wgrt9MQ/XnAC/rNg4SRcouPxk/4bHp4LrBy 5lz7SwghUWWGz4Ah9Qm3Xe7v8HXcyIbc/+W6dnJEFeRQNlBQXhVcJwslvDt9hTXM mHQPAv9CcL7ZTUepWYq65gXZlC8Aj04upYLZsKrBTZJQlXL8/q2F8hsjHv2rSykm VyoHxEk8mobH/0+g+B+NOQe41LDehgCY1zPuaYDJJvZsrodZqCcZ8n9DNBpdd31s tR2qsd98zw8o/Ha/1Y1zyyvAgHAYRwnmftTbhtGJBfP/mds7JH1SrpIm6hxTTawg MFKgu4NIGFuftv4gcPqmFOS21PcsnNo= -----END CERTIFICATE-----Generated at Sat Jun 7 04:48:00 2025 by rpki-client