$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa File: a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa (raw, json) Hash identifier: h80JrWuj+aRIhO1brFByMhaMFgA//nbNnntw+g7u7NU= Subject key identifier: B8:C1:CF:94:62:56:2B:6C:04:6D:42:72:E2:7E:AC:8A:BB:19:3E:D7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB33507916FAA0A6044200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:33:50:79:16:fa:a0:a6:04:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4da3f2ea-c373-4fcf-b3b8-5f0e41d6b245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:96:9e:e7:e7:06:aa:3e:18:9a:65:85:fa: a1:a8:03:88:4c:e2:bf:1f:36:9d:2c:eb:d8:f7:46: f1:d5:b7:41:a9:eb:44:a1:f3:bb:d6:68:b9:36:c0: 2a:88:7c:8e:c5:46:19:d8:41:69:74:63:5c:4c:90: eb:7f:b8:4a:79:16:e9:51:0c:64:a0:5a:44:83:e1: 83:49:c3:86:d6:70:d1:5b:10:a0:6c:ab:0c:f6:a5: ef:55:99:6c:b1:12:4e:c0:fb:58:87:d7:f2:d7:f3: 9b:9f:b1:2d:98:37:7b:66:e7:62:ae:24:6f:08:53: 10:82:33:d7:59:a0:75:cd:98:f8:ed:84:29:34:b9: 72:49:fd:8a:1c:3f:fe:e4:cb:a7:a6:a0:1a:31:6e: a5:f6:3b:dd:79:4d:24:e3:c2:ce:d1:09:5b:5d:00: 99:7d:01:b2:2e:00:5f:9b:9e:e2:0e:e6:0a:f3:d8: 14:1c:a1:02:0b:cd:f8:14:b9:ad:57:9d:5e:9a:74: 76:64:15:61:c7:9b:14:84:70:f9:bf:eb:f2:62:51: ca:66:b9:00:8c:fc:9f:96:54:a6:d2:c4:c5:e4:9f: a2:64:fa:4d:9e:74:6d:c7:ba:75:50:b4:aa:b7:28: 08:92:47:1a:ca:7d:55:e9:e0:02:e9:ba:69:ff:b7: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C1:CF:94:62:56:2B:6C:04:6D:42:72:E2:7E:AC:8A:BB:19:3E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:db:e4:fa:f0:4c:57:b5:39:f1:74:c8:b0:8f:0e:f4:dc:04: f3:64:42:11:5d:7b:96:2e:50:42:b7:4a:1d:c9:3f:7f:25:94: 95:09:b6:c4:05:d7:1a:56:e2:d5:10:37:67:43:47:cb:d7:60: 5a:d3:84:d3:74:8d:14:36:e0:5b:2b:4d:b6:b3:20:ce:bd:2b: 4c:33:07:2f:d4:f3:d9:cd:c9:98:9c:77:3f:60:02:03:64:80: 99:3a:6b:71:01:80:0e:a7:a2:03:3f:86:52:ea:29:ca:51:db: 55:60:4b:bb:45:d5:73:4f:33:18:38:b7:80:07:14:b1:8e:f0: 86:e6:d8:40:80:81:13:99:ad:b3:f5:d9:d1:03:e9:f3:d6:ef: 26:31:b8:3d:e7:6f:3f:78:7c:60:4b:07:23:6b:b4:a3:7f:fa: c0:9b:4b:18:3c:2c:c7:45:75:d0:65:02:4f:f7:65:7e:e6:82: 1e:4c:0a:e0:b2:01:52:78:44:89:71:a2:3c:b5:57:00:fe:65: 60:7f:36:25:92:d3:df:9b:63:47:0b:e3:a4:63:91:2b:95:db: 9a:03:07:3e:f6:a2:21:90:c9:0e:f2:54:5c:ae:78:7a:99:c3: 2c:25:73:af:36:48:63:1c:3b:02:f5:d2:28:2d:7f:4e:cf:31: 52:53:7f:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzNQeRb6oKYEQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGRhM2YyZWEtYzM3My00ZmNmLWIzYjgtNWYwZTQxZDZiMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww6WnufnBqo+GJplhfqhqAOITOK/HzadLOvY 90bx1bdBqetEofO71mi5NsAqiHyOxUYZ2EFpdGNcTJDrf7hKeRbpUQxkoFpEg+GD ScOG1nDRWxCgbKsM9qXvVZlssRJOwPtYh9fy1/Obn7EtmDd7ZudiriRvCFMQgjPX WaB1zZj47YQpNLlySf2KHD/+5MunpqAaMW6l9jvdeU0k48LO0QlbXQCZfQGyLgBf m57iDuYK89gUHKECC834FLmtV51emnR2ZBVhx5sUhHD5v+vyYlHKZrkAjPyfllSm 0sTF5J+iZPpNnnRtx7p1ULSqtygIkkcayn1V6eAC6bpp/7d2PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjBz5RiVitsBG1CcuJ+rIq7GT7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTI4ZTFjOTctMDVhOS0z NmUyLWFiYmYtMDA5Y2Q0ZDgwOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDb5PrwTFe1OfF0yLCPDvTcBPNkQhFde5YuUEK3Sh3JP38llJUJtsQF 1xpW4tUQN2dDR8vXYFrThNN0jRQ24FsrTbazIM69K0wzBy/U89nNyZicdz9gAgNk gJk6a3EBgA6nogM/hlLqKcpR21VgS7tF1XNPMxg4t4AHFLGO8Ibm2ECAgROZrbP1 2dED6fPW7yYxuD3nbz94fGBLByNrtKN/+sCbSxg8LMdFddBlAk/3ZX7mgh5MCuCy AVJ4RIlxojy1VwD+ZWB/NiWS09+bY0cL46RjkSuV25oDBz72oiGQyQ7yVFyueHqZ wywlc682SGMcOwL10igtf07PMVJTf7E= -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:40 2025 by rpki-client