$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa File: 3507b290-125c-3f58-85ba-ed6602ee5ef5.roa (raw, json) Hash identifier: 5+8UNAGpqYy2quEm7V5jQ1c+PBAJx92zcVQfZhiLbPw= Subject key identifier: ED:0E:E5:39:F6:85:58:25:EF:20:9B:40:B0:84:8C:69:09:18:76:68 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA911247AE35E1C7041260 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:91:12:47:ae:35:e1:c7:04:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ce310e4c-a496-462f-b877-5225af98e28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:9d:4b:7b:b3:b1:97:26:a7:73:5e:f7:d0: 31:de:01:4d:49:91:03:98:47:86:36:15:53:7e:02: 7d:da:2f:c2:f8:bb:dd:23:41:6c:cf:f9:92:8d:54: 8c:b3:e7:a6:b6:81:ce:be:b8:5d:e2:73:2b:b2:5b: 82:e3:db:0f:bd:4b:8a:fa:5b:22:0f:bf:07:3f:cd: 94:52:e0:aa:1b:3a:20:3c:7f:08:0f:73:29:f6:eb: c6:ff:9e:93:e0:42:c6:47:de:d0:32:0a:c2:ac:fe: 47:b7:0b:48:35:45:1c:cd:2a:d9:4f:26:1a:68:b6: 71:cd:a6:e6:7a:bc:53:e0:04:7e:27:42:ec:95:df: 30:21:42:3e:d0:ec:a4:9f:18:cb:85:58:92:28:34: b7:8a:c2:59:57:89:b2:59:93:28:d6:97:db:1b:6a: 19:02:8f:c9:a3:b6:da:fb:0c:ee:eb:50:f9:6c:f9: d0:2f:50:fd:4a:c8:fb:14:96:f3:71:55:66:30:3b: 49:4d:0b:7a:4d:d9:00:c9:d8:f8:ef:d0:d6:73:e4: 8c:fc:91:ff:4b:8e:ac:9f:a3:c9:38:80:12:70:4f: ec:19:10:51:78:00:3b:fb:79:09:10:66:d1:91:a2: 4b:96:c5:48:1c:27:79:a4:6b:3b:5c:f3:c7:00:7d: ea:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0E:E5:39:F6:85:58:25:EF:20:9B:40:B0:84:8C:69:09:18:76:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:70:7b:ae:70:7a:72:49:11:29:c6:f0:31:d1:c8:d3:c7:8a: 04:71:7a:20:cc:0f:ce:f3:19:c8:b8:8c:f2:ab:f3:a4:95:c4: 4e:e9:bb:6b:06:52:89:5f:c4:84:75:2d:44:dd:8e:e2:94:0c: 10:09:e0:f2:81:70:36:3c:be:ef:5d:13:62:fa:ab:1f:66:b8: 18:49:fa:17:9f:f0:ba:92:c6:93:07:34:06:a0:a9:97:b5:0e: 16:7c:b2:42:f1:c5:11:21:f9:ed:01:15:76:07:42:13:34:0a: 84:2b:a3:e4:32:42:e8:1c:4e:bd:a9:87:73:f6:6c:40:cb:e5: a5:d4:28:ef:8b:78:27:36:4e:7d:f7:39:4a:31:11:78:90:82: 0b:d2:d3:69:0d:e9:66:ee:8a:fe:64:fa:f0:7e:ee:6f:c6:81: 62:b1:1e:73:ea:0d:3d:2d:4d:98:80:b4:cd:4c:0d:77:3e:87: 8e:63:aa:5a:ef:19:30:dc:06:15:1c:03:f4:7e:83:87:70:2e: 31:fe:4d:94:12:d8:e9:09:b4:51:b2:3e:a4:13:ce:70:3c:f8: 48:18:2d:d6:84:68:e0:ae:f7:32:73:6b:cb:7b:a0:6a:64:0f: 94:fa:37:e5:39:35:ff:d6:db:3b:b7:8a:03:fd:60:31:93:3a: 63:70:19:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupESR6414ccEEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2UzMTBlNGMtYTQ5Ni00NjJmLWI4NzctNTIyNWFmOThlMjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSCdS3uzsZcmp3Ne99Ax3gFNSZEDmEeGNhVT fgJ92i/C+LvdI0Fsz/mSjVSMs+emtoHOvrhd4nMrsluC49sPvUuK+lsiD78HP82U UuCqGzogPH8ID3Mp9uvG/56T4ELGR97QMgrCrP5HtwtINUUczSrZTyYaaLZxzabm erxT4AR+J0Lsld8wIUI+0OyknxjLhViSKDS3isJZV4myWZMo1pfbG2oZAo/Jo7ba +wzu61D5bPnQL1D9Ssj7FJbzcVVmMDtJTQt6TdkAydj479DWc+SM/JH/S46sn6PJ OIAScE/sGRBReAA7+3kJEGbRkaJLlsVIHCd5pGs7XPPHAH3qswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0O5Tn2hVgl7yCbQLCEjGkJGHZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzUwN2IyOTAtMTI1Yy0z ZjU4LTg1YmEtZWQ2NjAyZWU1ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVwe65wenJJESnG8DHRyNPHigRxeiDMD87zGci4jPKr86SVxE7pu2sG UolfxIR1LUTdjuKUDBAJ4PKBcDY8vu9dE2L6qx9muBhJ+hef8LqSxpMHNAagqZe1 DhZ8skLxxREh+e0BFXYHQhM0CoQro+QyQugcTr2ph3P2bEDL5aXUKO+LeCc2Tn33 OUoxEXiQggvS02kN6Wbuiv5k+vB+7m/GgWKxHnPqDT0tTZiAtM1MDXc+h45jqlrv GTDcBhUcA/R+g4dwLjH+TZQS2OkJtFGyPqQTznA8+EgYLdaEaOCu9zJza8t7oGpk D5T6N+U5Nf/W2zu3igP9YDGTOmNwGX4= -----END CERTIFICATE-----Generated at Mon Apr 28 15:43:44 2025 by rpki-client