$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f721ba0-f768-3403-b218-d38f9d4979c6.roa File: 3f721ba0-f768-3403-b218-d38f9d4979c6.roa (raw, json) Hash identifier: 8+w1Og9vJSrXK9ytJOJpbZ2d8ULBKrQPkvrSYilKaGg= Subject key identifier: B7:D1:FE:9F:A3:EB:45:97:3C:D9:35:C2:0D:B9:D7:E9:3A:09:4D:F2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB33391EA67A9F7FE277B4 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f721ba0-f768-3403-b218-d38f9d4979c6.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:33:39:1e:a6:7a:9f:7f:e2:77:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=082ebbde-6104-4308-aded-f69340ead78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:fb:f6:e1:6b:be:ed:28:6c:bf:06:08:4b: 02:47:c5:b1:2e:68:11:6b:5e:99:b7:f3:a0:5a:f0: 96:d2:69:93:69:4e:cf:05:e2:aa:41:5e:1e:48:34: be:7c:1a:38:7a:7f:b6:1d:e9:f5:3f:29:06:c2:0a: bc:9b:76:fb:f6:23:f6:1c:d0:5d:41:a0:ce:bd:cb: d7:ac:e4:90:0f:f2:7f:0d:4a:7a:48:e9:ca:61:e5: f6:e2:f4:9c:05:94:5f:55:ed:3a:f9:f0:54:60:e2: ee:80:b6:1c:de:5f:5c:eb:08:ed:a5:1d:60:09:9c: 22:7b:b9:2f:72:5f:a1:59:43:bb:cf:b5:6a:1f:9c: d0:5b:c9:21:be:80:3a:a0:5d:fb:34:48:1a:dd:6d: 8f:df:40:da:2c:cf:7b:a7:5e:b7:bb:7e:01:91:bd: c2:71:c7:ca:cf:eb:9b:92:74:1e:79:2e:0c:6a:ef: d7:42:80:44:99:f8:71:76:41:fc:05:f4:14:c7:a9: 67:86:6e:c1:dc:5d:ae:98:1c:9d:40:5d:3b:90:87: 56:d2:09:ac:33:d0:57:c4:20:6a:67:6c:d8:4d:3d: dc:c4:38:5b:6d:32:af:49:05:09:88:b0:a6:b6:73: e5:3a:3b:0f:7b:44:0e:19:61:dc:5f:bb:ae:82:70: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D1:FE:9F:A3:EB:45:97:3C:D9:35:C2:0D:B9:D7:E9:3A:09:4D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f721ba0-f768-3403-b218-d38f9d4979c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b3:9a:f5:87:c2:1e:f5:29:e9:d7:ee:75:7c:8d:e5:57:8c: 11:cd:5e:78:7b:e4:4d:19:d6:13:55:fb:75:99:df:c2:90:78: d7:37:77:0b:d9:ba:15:48:29:c8:94:e9:39:17:e5:cc:8f:c5: b3:06:16:82:7c:4f:c0:27:aa:e1:ae:9a:02:1f:60:a8:e6:06: 76:4b:7b:08:d9:56:c9:09:67:5f:38:15:53:c6:62:98:42:a5: 57:6f:8b:72:16:1e:80:15:69:5c:86:7e:4f:8e:1c:5b:9e:3a: 65:ca:0a:34:bf:ff:da:3a:50:ae:86:62:da:29:31:e3:8b:cb: e1:e1:90:00:7d:16:59:64:fe:52:78:2f:6a:5b:48:16:eb:1e: 4e:b7:d4:3d:5b:d9:cb:11:5b:71:9b:0c:0b:8d:13:62:d4:0a: 03:40:66:6a:43:eb:02:db:d9:c4:cc:e6:54:17:50:e8:fb:8f: ed:d5:c8:43:d8:f6:d5:0d:cd:d3:93:3d:b4:e7:63:e6:46:d0: eb:fc:81:09:2b:49:84:42:9f:ab:52:5c:1c:6c:85:0b:28:c6: ed:27:2c:56:28:85:83:54:1a:b2:e0:88:2f:36:4e:69:87:bc: 02:59:e3:ca:29:2c:97:09:93:41:6a:8f:8f:66:6a:35:73:ea: e0:9a:28:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzM5HqZ6n3/id7QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDgyZWJiZGUtNjEwNC00MzA4LWFkZWQtZjY5MzQwZWFkNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2/79uFrvu0obL8GCEsCR8WxLmgRa16Zt/Og WvCW0mmTaU7PBeKqQV4eSDS+fBo4en+2Hen1PykGwgq8m3b79iP2HNBdQaDOvcvX rOSQD/J/DUp6SOnKYeX24vScBZRfVe06+fBUYOLugLYc3l9c6wjtpR1gCZwie7kv cl+hWUO7z7VqH5zQW8khvoA6oF37NEga3W2P30DaLM97p163u34Bkb3CccfKz+ub knQeeS4Mau/XQoBEmfhxdkH8BfQUx6lnhm7B3F2umBydQF07kIdW0gmsM9BXxCBq Z2zYTT3cxDhbbTKvSQUJiLCmtnPlOjsPe0QOGWHcX7uugnAMWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfR/p+j60WXPNk1wg251+k6CU3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Y3MjFiYTAtZjc2OC0z NDAzLWIyMTgtZDM4ZjlkNDk3OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKzmvWHwh71KenX7nV8jeVXjBHNXnh75E0Z1hNV+3WZ38KQeNc3dwvZ uhVIKciU6TkX5cyPxbMGFoJ8T8AnquGumgIfYKjmBnZLewjZVskJZ184FVPGYphC pVdvi3IWHoAVaVyGfk+OHFueOmXKCjS//9o6UK6GYtopMeOLy+HhkAB9Fllk/lJ4 L2pbSBbrHk631D1b2csRW3GbDAuNE2LUCgNAZmpD6wLb2cTM5lQXUOj7j+3VyEPY 9tUNzdOTPbTnY+ZG0Ov8gQkrSYRCn6tSXBxshQsoxu0nLFYohYNUGrLgiC82TmmH vAJZ48opLJcJk0Fqj49majVz6uCaKHU= -----END CERTIFICATE-----Generated at Sun Apr 27 01:57:43 2025 by rpki-client