$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48750e6c-16c3-399a-9f40-d94bab7450dc.roa File: 48750e6c-16c3-399a-9f40-d94bab7450dc.roa (raw, json) Hash identifier: U6yFWjAPKd/jCKgOo89LnWJFzCuQJRpzbNeAxVrTvlE= Subject key identifier: C5:99:68:77:68:25:FF:2C:2B:EF:C4:30:76:14:62:86:2D:0E:91:14 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA9036BC80EEAED15D7200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48750e6c-16c3-399a-9f40-d94bab7450dc.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:90:36:bc:80:ee:ae:d1:5d:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5168eb63-3277-4820-9307-4df1fc20b72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:30:5b:c4:f1:88:81:6a:fe:80:92:54:69:01: 1a:cf:7f:89:a9:ee:65:57:e0:2f:7d:b3:bf:e7:e9: 70:d3:58:c9:04:f9:11:90:68:bc:a5:f6:b4:0a:2c: 05:60:90:f8:8f:a9:47:28:c5:97:52:68:f7:9e:f7: bd:4d:30:91:59:91:71:7c:77:fb:20:b0:a3:59:51: 0d:5e:5d:3f:bb:f5:2f:85:0a:a8:ea:fb:89:06:6e: 9e:dc:d2:fe:f3:ec:12:65:b0:6a:bf:18:8d:39:5c: cf:75:03:fe:dd:54:aa:d0:55:2d:f7:71:a0:d8:5c: 39:d1:6d:3d:57:8e:76:c8:10:46:38:51:94:0a:0e: 35:b7:40:1d:1a:9c:5d:37:db:d8:c9:9b:14:99:a7: 72:fd:38:b2:1d:df:6c:0d:8a:a9:76:86:68:bc:d6: 1e:81:16:ba:24:e5:9c:09:c2:6e:45:8f:2f:30:13: 0c:ea:17:c7:e3:d9:17:a7:87:61:f3:17:d0:27:fc: a6:f5:7d:8e:4c:d1:c6:c8:59:d1:f4:9b:55:93:ab: af:ae:5f:28:72:ce:63:da:99:90:ba:f8:35:54:c8: ed:55:3b:a7:30:01:9d:33:87:fc:d6:1e:9e:09:0e: ed:fe:94:4a:85:34:21:aa:28:5c:4b:7f:d7:57:43: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:99:68:77:68:25:FF:2C:2B:EF:C4:30:76:14:62:86:2D:0E:91:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/48750e6c-16c3-399a-9f40-d94bab7450dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8e:ac:5c:46:e3:22:bf:35:42:06:b2:08:10:37:1c:96:b1: 5e:35:63:aa:da:d9:bf:3c:83:f0:9d:e2:6d:f9:9f:1c:08:18: 89:66:b0:c6:8c:4c:01:30:4b:11:47:ca:84:2d:63:ee:f4:73: ac:65:b4:cb:ba:57:7c:4c:54:1e:bc:02:6d:a9:39:90:2b:27: ed:8d:e9:7d:de:4e:75:0b:a3:0e:97:83:64:62:2c:f3:ba:3b: 0c:49:af:44:b0:ae:9d:da:80:0b:47:de:fc:8c:74:9e:48:36: c3:66:df:2f:fe:96:71:01:5b:df:12:15:be:29:6a:f8:b5:5f: dc:d3:94:78:ca:e4:46:1e:ce:26:4b:e1:a0:ec:25:52:7a:84: d5:6f:dd:e0:b7:02:af:e7:15:10:4a:2f:19:b1:c2:4e:62:47: 94:9e:c1:19:2e:d1:38:48:a5:05:6c:fd:ab:20:47:9b:14:f7: 1f:f2:13:b1:a9:5e:fe:8d:4d:29:eb:aa:61:5b:01:25:76:b9: f5:ac:cd:9b:7a:79:cd:57:56:15:3d:51:bf:ef:ca:bb:bc:7e: 8e:16:4c:ab:cb:39:ab:d6:1e:67:7f:ac:ed:31:cb:e8:b5:46: 6d:1c:4d:24:2d:b0:79:6e:d5:3a:09:68:fa:83:1a:84:92:25: b8:af:81:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupA2vIDurtFdcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTE2OGViNjMtMzI3Ny00ODIwLTkzMDctNGRmMWZjMjBiNzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTBbxPGIgWr+gJJUaQEaz3+Jqe5lV+AvfbO/ 5+lw01jJBPkRkGi8pfa0CiwFYJD4j6lHKMWXUmj3nve9TTCRWZFxfHf7ILCjWVEN Xl0/u/UvhQqo6vuJBm6e3NL+8+wSZbBqvxiNOVzPdQP+3VSq0FUt93Gg2Fw50W09 V452yBBGOFGUCg41t0AdGpxdN9vYyZsUmady/TiyHd9sDYqpdoZovNYegRa6JOWc CcJuRY8vMBMM6hfH49kXp4dh8xfQJ/ym9X2OTNHGyFnR9JtVk6uvrl8ocs5j2pmQ uvg1VMjtVTunMAGdM4f81h6eCQ7t/pRKhTQhqihcS3/XV0O6KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWZaHdoJf8sK+/EMHYUYoYtDpEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDg3NTBlNmMtMTZjMy0z OTlhLTlmNDAtZDk0YmFiNzQ1MGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGOrFxG4yK/NUIGsggQNxyWsV41Y6ra2b88g/Cd4m35nxwIGIlmsMaM TAEwSxFHyoQtY+70c6xltMu6V3xMVB68Am2pOZArJ+2N6X3eTnULow6Xg2RiLPO6 OwxJr0Swrp3agAtH3vyMdJ5INsNm3y/+lnEBW98SFb4pavi1X9zTlHjK5EYeziZL 4aDsJVJ6hNVv3eC3Aq/nFRBKLxmxwk5iR5SewRku0ThIpQVs/asgR5sU9x/yE7Gp Xv6NTSnrqmFbASV2ufWszZt6ec1XVhU9Ub/vyru8fo4WTKvLOavWHmd/rO0xy+i1 Rm0cTSQtsHlu1ToJaPqDGoSSJbivgQo= -----END CERTIFICATE-----Generated at Sun Apr 27 10:57:52 2025 by rpki-client