$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa File: 33d98de7-82e5-3294-87bd-da0c96c9fa35.roa (raw, json) Hash identifier: sO2sfURweM0jf2Pz+FzwOGX0ASRsG3PwPJzl3F5nbPE= Subject key identifier: AD:44:84:2F:8A:9B:1A:D1:93:91:00:E3:AA:7F:AF:39:2E:02:B1:54 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9788CF5F7335FDF2B680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.243.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:97:88:cf:5f:73:35:fd:f2:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f315db2e-3f6d-46d2-b870-f542d86b44c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:96:46:72:39:95:38:36:85:a4:b1:28:a7:65: b5:5d:fc:01:ac:98:cf:1b:71:e4:6e:de:16:fa:40: 97:72:db:6c:76:9e:03:0b:66:48:d7:41:da:04:50: 85:58:bb:01:f5:18:79:76:6b:cb:d2:e1:7b:54:23: a8:ba:f4:ef:3d:c6:7b:10:b3:c3:4d:62:3e:a1:62: df:cd:c1:05:cc:98:14:c8:67:d6:bd:c2:3e:9e:76: 2c:10:78:33:31:3b:45:b7:07:5d:db:fe:fd:76:71: 9d:6f:2e:b8:89:a8:55:89:cb:62:f1:af:9a:3c:2b: 85:88:1f:82:78:d9:3a:3f:97:d7:0f:f1:20:15:9b: c6:62:74:25:fe:17:83:7d:82:3d:1a:39:de:c3:2d: 94:70:60:67:42:7d:3d:ac:ee:7d:48:36:58:ef:bf: 42:53:7c:c5:0f:81:71:d1:76:f4:a9:29:fe:d7:30: 13:bd:0d:3a:51:71:d0:bc:61:01:f8:8c:38:e1:b4: 5c:1d:56:45:81:4f:cc:6d:ae:b3:cf:03:89:bc:34: e6:45:5c:69:fc:df:14:43:51:76:34:14:a5:a0:05: b6:d4:75:14:05:5c:64:bf:73:04:7e:37:00:0b:2c: 36:b5:59:a9:fa:47:8d:8d:eb:50:6f:62:29:b2:ed: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:44:84:2F:8A:9B:1A:D1:93:91:00:E3:AA:7F:AF:39:2E:02:B1:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:40:e3:de:f2:b3:90:66:c0:00:1e:fa:73:51:aa:d8:bd:94: 40:e5:ca:8f:87:66:84:97:cd:a6:b7:c9:94:8f:16:2a:f9:03: ad:d5:a7:d7:81:61:f1:05:65:e9:5f:d9:a3:91:d4:28:34:f0: 4b:2e:3d:f7:48:c5:ce:5b:83:ef:c9:13:dc:a4:17:bf:9d:89: 1b:4f:3e:56:8f:d1:20:ab:41:34:e9:0b:17:c5:31:7e:a5:66: 5a:78:31:50:dd:cb:ae:da:c4:85:31:5a:c6:6f:37:69:1b:a5: 94:ff:b5:17:d1:41:52:bf:1a:f0:9d:ab:b5:89:67:10:ef:e0: 4d:80:03:fe:57:48:61:a7:9f:e2:ac:09:b9:90:d5:04:48:10: bb:a6:19:c8:fa:4d:bc:08:17:96:1e:cf:18:08:24:99:71:ce: 18:7f:be:dd:2d:6f:09:f8:d4:4a:6f:6a:81:c3:cc:24:c8:f3: e3:16:cd:23:b6:65:d5:57:4c:5d:f9:57:0c:de:54:ab:65:3e: c8:6b:f5:0d:a0:e4:d5:bf:e6:27:39:c3:e4:11:ac:75:8d:a4: ae:5e:83:67:f6:7f:8e:14:50:35:89:b8:68:d2:40:a5:8a:ab: 52:9b:5e:31:9b:a2:ac:c5:66:e0:10:de:3d:82:24:c9:11:08: e7:8e:42:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupeIz19zNf3ytoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjMxNWRiMmUtM2Y2ZC00NmQyLWI4NzAtZjU0MmQ4NmI0NGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35ZGcjmVODaFpLEop2W1XfwBrJjPG3Hkbt4W +kCXcttsdp4DC2ZI10HaBFCFWLsB9Rh5dmvL0uF7VCOouvTvPcZ7ELPDTWI+oWLf zcEFzJgUyGfWvcI+nnYsEHgzMTtFtwdd2/79dnGdby64iahVicti8a+aPCuFiB+C eNk6P5fXD/EgFZvGYnQl/heDfYI9Gjnewy2UcGBnQn09rO59SDZY779CU3zFD4Fx 0Xb0qSn+1zATvQ06UXHQvGEB+Iw44bRcHVZFgU/Mba6zzwOJvDTmRVxp/N8UQ1F2 NBSloAW21HUUBVxkv3MEfjcACyw2tVmp+keNjetQb2Ipsu393wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1EhC+KmxrRk5EA46p/rzkuArFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNkOThkZTctODJlNS0z Mjk0LTg3YmQtZGEwYzk2YzlmYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPODMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtA497ys5BmwAAe+nNRqti9lEDlyo+HZoSXzaa3yZSPFir5A63Vp9eB YfEFZelf2aOR1Cg08EsuPfdIxc5bg+/JE9ykF7+diRtPPlaP0SCrQTTpCxfFMX6l Zlp4MVDdy67axIUxWsZvN2kbpZT/tRfRQVK/GvCdq7WJZxDv4E2AA/5XSGGnn+Ks CbmQ1QRIELumGcj6TbwIF5YezxgIJJlxzhh/vt0tbwn41EpvaoHDzCTI8+MWzSO2 ZdVXTF35VwzeVKtlPshr9Q2g5NW/5ic5w+QRrHWNpK5eg2f2f44UUDWJuGjSQKWK q1KbXjGboqzFZuAQ3j2CJMkRCOeOQmE= -----END CERTIFICATE-----Generated at Mon Apr 28 01:25:12 2025 by rpki-client