$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284ff20b-9b60-357c-9299-01e652bbeb85.roa File: 284ff20b-9b60-357c-9299-01e652bbeb85.roa (raw, json) Hash identifier: iumDzB4hC5MF9aSe10GcUDov+tQ0XyScnePkroAqdDg= Subject key identifier: 41:AB:4D:B3:27:8D:2B:0B:81:95:02:D5:91:BF:4F:B2:21:1E:5B:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA90CCEDCE30B1716F0B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284ff20b-9b60-357c-9299-01e652bbeb85.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:90:cc:ed:ce:30:b1:71:6f:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5a502421-1caf-4cb2-ba37-9ee042ea42b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f1:18:d2:53:12:28:da:fc:f5:68:9f:1b:e1: 2b:be:42:22:cb:84:0d:97:a3:80:29:c2:60:76:cf: 12:37:f2:62:8a:03:7b:17:9d:94:c7:48:58:c1:b3: 0e:52:8c:20:ea:96:b2:47:76:22:6a:f8:4c:ee:6f: 08:9a:7d:97:6f:2e:21:a5:f6:a3:ec:01:8a:55:99: ae:43:01:44:03:59:02:8e:18:a1:e6:71:dc:d4:d0: ab:36:68:a2:69:41:0f:9d:00:fd:d6:49:7e:fd:1b: 81:36:5d:6d:27:4f:93:83:81:a3:51:d7:20:d5:6e: da:ef:2b:d5:eb:5f:06:75:37:e3:af:83:e7:9f:86: b5:d1:1a:38:18:41:5f:bc:bf:97:36:e7:0c:ea:c6: c9:35:30:9a:16:61:9b:b7:d5:98:1b:0a:13:28:9c: 35:f6:9d:92:93:ef:2b:6d:92:ab:fb:ff:ef:92:86: 52:28:a6:58:04:fa:5c:21:75:5a:23:30:1e:06:f1: 10:c3:ee:08:04:1f:5f:72:a7:1f:11:de:6d:dd:f3: 1a:8a:74:7d:e5:1e:05:f0:86:12:d8:fd:09:40:85: 46:f5:bf:7f:d7:fc:d0:07:0c:6a:25:f9:ab:58:2b: 23:32:08:89:d4:7a:81:77:36:f6:f1:b0:a1:83:d8: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AB:4D:B3:27:8D:2B:0B:81:95:02:D5:91:BF:4F:B2:21:1E:5B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/284ff20b-9b60-357c-9299-01e652bbeb85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d9:6f:f2:c3:cf:1e:99:0b:9d:b5:a2:a5:fe:8d:cb:b7:d2: 70:54:e3:8c:c8:e0:bb:0d:6c:2d:b3:6d:0f:34:6e:b4:19:09: ae:d6:61:44:89:01:04:a0:dd:d4:d5:03:f7:ec:1b:de:f2:04: d2:87:71:5b:ae:01:19:10:a1:7c:f7:d4:99:eb:05:58:cb:84: 98:29:6a:68:5a:84:51:df:85:aa:e5:9a:fb:db:33:a1:ea:64: f9:f7:46:6f:8f:71:99:5e:bd:7f:17:d3:17:c3:8b:d4:6d:d8: d0:89:72:cb:b0:a2:42:1a:02:86:24:41:74:e4:30:a6:34:05: 5b:f6:a0:d5:f6:83:c5:b0:f7:87:18:5f:f9:68:22:1b:06:33: 45:16:a4:2f:5e:7b:d2:bd:60:44:48:9b:c7:54:ca:67:33:39: 38:db:0c:af:d8:29:57:33:f3:b5:bb:de:93:58:d2:22:74:73: 47:2e:42:a1:e7:e9:18:a2:35:fb:54:fc:cd:77:48:eb:70:13: 82:a1:3d:8e:07:b7:3d:ec:a0:e6:ad:f8:21:46:02:70:68:71: 73:5e:00:0f:06:97:a3:7b:6d:b9:af:7f:1a:10:ee:8a:d7:11: 77:58:b0:2b:1f:38:a9:28:22:c6:6e:95:f3:5d:b3:83:9a:9a: 2d:34:46:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupDM7c4wsXFvC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWE1MDI0MjEtMWNhZi00Y2IyLWJhMzctOWVlMDQyZWE0MmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/EY0lMSKNr89WifG+ErvkIiy4QNl6OAKcJg ds8SN/JiigN7F52Ux0hYwbMOUowg6payR3YiavhM7m8Imn2Xby4hpfaj7AGKVZmu QwFEA1kCjhih5nHc1NCrNmiiaUEPnQD91kl+/RuBNl1tJ0+Tg4GjUdcg1W7a7yvV 618GdTfjr4Pnn4a10Ro4GEFfvL+XNucM6sbJNTCaFmGbt9WYGwoTKJw19p2Sk+8r bZKr+//vkoZSKKZYBPpcIXVaIzAeBvEQw+4IBB9fcqcfEd5t3fMainR95R4F8IYS 2P0JQIVG9b9/1/zQBwxqJfmrWCsjMgiJ1HqBdzb28bChg9gX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGrTbMnjSsLgZUC1ZG/T7IhHltuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjg0ZmYyMGItOWI2MC0z NTdjLTkyOTktMDFlNjUyYmJlYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPZb/LDzx6ZC521oqX+jcu30nBU44zI4LsNbC2zbQ80brQZCa7WYUSJ AQSg3dTVA/fsG97yBNKHcVuuARkQoXz31JnrBVjLhJgpamhahFHfharlmvvbM6Hq ZPn3Rm+PcZlevX8X0xfDi9Rt2NCJcsuwokIaAoYkQXTkMKY0BVv2oNX2g8Ww94cY X/loIhsGM0UWpC9ee9K9YERIm8dUymczOTjbDK/YKVcz87W73pNY0iJ0c0cuQqHn 6RiiNftU/M13SOtwE4KhPY4Htz3soOat+CFGAnBocXNeAA8Gl6N7bbmvfxoQ7orX EXdYsCsfOKkoIsZulfNds4Oami00RqY= -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:29 2025 by rpki-client