$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa File: 0248a708-1e5d-3bac-8f01-bf8e608bb045.roa (raw, json) Hash identifier: ncNFGFhLgZZny6nkzgCfTrg9F4KX4cd7gzC9nibLRCI= Subject key identifier: 37:9F:BF:8D:4D:7E:D6:B0:22:44:7D:4D:A0:BA:8F:33:21:A7:FE:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA97A128D547B576BBF238 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:97:a1:28:d5:47:b5:76:bb:f2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f63b731f-81a2-48a6-9a3f-4468fbb62b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:14:2b:b0:68:74:16:5f:5b:5c:37:c2:03: 16:54:a2:ea:a2:cd:ce:ad:0e:39:3b:2f:4a:93:6f: 84:4c:43:7f:f1:3d:16:6a:19:60:82:df:2e:cf:99: a1:1e:92:2b:17:48:94:1f:e0:3b:39:c8:93:33:b2: 5b:a1:d1:9d:59:17:ac:b1:db:d1:e8:de:8b:49:95: 75:f5:85:2f:44:de:58:4c:28:f0:40:1f:c7:6a:22: 7a:1b:9a:c1:d9:43:ef:b4:97:6c:1e:cf:43:e8:fc: be:a5:4b:ad:14:17:53:34:80:c7:f1:cc:83:fc:d7: ed:5e:7f:6d:7b:ba:f8:63:98:04:d6:23:96:2a:6c: 04:a5:86:61:5c:2b:fb:05:73:14:6a:77:63:97:c0: d8:90:a0:95:1a:ba:ac:cb:f8:2a:f8:99:3a:ce:3f: 0c:12:4e:af:60:08:ac:76:c4:28:72:24:33:de:8c: 95:fc:0c:24:2a:58:4d:aa:ac:f0:22:b3:dd:f8:84: 29:52:8e:60:d4:d9:a3:0a:59:87:f9:b9:fc:57:7d: 59:c6:38:c2:85:7b:1b:09:46:6c:98:87:c5:7f:45: 07:ab:e7:d8:a2:09:e8:8e:1c:12:23:76:06:11:f7: 30:5d:82:ba:55:c8:c5:63:d7:04:5d:20:ac:5f:ef: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9F:BF:8D:4D:7E:D6:B0:22:44:7D:4D:A0:BA:8F:33:21:A7:FE:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5e:bc:25:b8:41:c4:00:54:b7:58:02:d5:e2:54:10:93:0a: 7c:26:46:cc:17:6b:8f:43:3d:20:47:f3:52:e4:aa:c1:03:4a: f1:ba:3c:79:48:42:ba:2e:01:3d:ec:a9:9a:e1:90:3d:92:7e: 3b:0c:0a:b4:f3:63:ae:d6:c6:72:09:4a:47:e8:df:c9:db:22: eb:b4:34:7d:dc:93:67:2e:b9:f5:d2:40:d8:d5:af:4e:e5:5a: fd:55:76:3f:cc:cb:00:81:55:f4:69:fd:f3:c8:41:3c:91:35: a0:e7:c0:1c:07:68:5e:3b:a8:a3:36:8f:f9:ad:8e:50:4f:bc: 4a:a7:8f:9b:ff:5c:c6:65:72:28:15:a2:ce:a4:a9:d1:3f:99: 47:17:a3:73:5e:1e:3e:1c:9d:02:96:46:67:05:78:eb:1e:40: 73:04:d9:89:24:57:d0:40:c7:ba:b9:3e:04:5d:dd:48:fe:59: 7f:80:af:23:12:f8:57:24:e2:7a:2c:3e:d5:a3:47:ca:bd:d5: a6:f0:33:1e:9e:d7:20:0c:5a:28:c4:e9:37:c9:a2:6e:8d:c2: 72:76:1c:d3:b0:2b:40:d3:01:ec:cc:75:3b:60:e2:d3:3c:50: 8d:33:15:8f:a4:4a:87:c6:2f:d6:85:11:a0:92:b4:9d:7b:85: 2d:e1:5e:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupehKNVHtXa78jgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjYzYjczMWYtODFhMi00OGE2LTlhM2YtNDQ2OGZiYjYyYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQoUK7BodBZfW1w3wgMWVKLqos3OrQ45Oy9K k2+ETEN/8T0Wahlggt8uz5mhHpIrF0iUH+A7OciTM7JbodGdWRessdvR6N6LSZV1 9YUvRN5YTCjwQB/HaiJ6G5rB2UPvtJdsHs9D6Py+pUutFBdTNIDH8cyD/NftXn9t e7r4Y5gE1iOWKmwEpYZhXCv7BXMUandjl8DYkKCVGrqsy/gq+Jk6zj8MEk6vYAis dsQociQz3oyV/AwkKlhNqqzwIrPd+IQpUo5g1NmjClmH+bn8V31ZxjjChXsbCUZs mIfFf0UHq+fYognojhwSI3YGEfcwXYK6VcjFY9cEXSCsX++azQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDefv41NftawIkR9TaC6jzMhp/4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDI0OGE3MDgtMWU1ZC0z YmFjLThmMDEtYmY4ZTYwOGJiMDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExevCW4QcQAVLdYAtXiVBCTCnwmRswXa49DPSBH81LkqsEDSvG6PHlI QrouAT3sqZrhkD2SfjsMCrTzY67WxnIJSkfo38nbIuu0NH3ck2cuufXSQNjVr07l Wv1Vdj/MywCBVfRp/fPIQTyRNaDnwBwHaF47qKM2j/mtjlBPvEqnj5v/XMZlcigV os6kqdE/mUcXo3NeHj4cnQKWRmcFeOseQHME2YkkV9BAx7q5PgRd3Uj+WX+AryMS +Fck4nosPtWjR8q91abwMx6e1yAMWijE6TfJom6NwnJ2HNOwK0DTAezMdTtg4tM8 UI0zFY+kSofGL9aFEaCStJ17hS3hXls= -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:46 2025 by rpki-client