$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bba2bebe-fccc-3231-8e5e-83717ced2501.roa File: bba2bebe-fccc-3231-8e5e-83717ced2501.roa (raw, json) Hash identifier: TzZCGB9NRl8OG1k9pb2taXPoQY3op7CK8t7XQwJHs+Y= Subject key identifier: 28:9F:21:E3:98:4C:28:FB:A1:05:AD:FD:80:F5:66:64:51:46:18:65 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB33BBC5F9E72197E8C720 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bba2bebe-fccc-3231-8e5e-83717ced2501.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:33:bb:c5:f9:e7:21:97:e8:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8c2d2936-6e2b-4d32-bd75-8254d9715c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:75:63:01:c3:da:92:da:1f:22:0a:1a:9e:30: 45:b4:e1:46:25:ee:0a:77:20:53:67:cb:75:62:b3: e1:c2:f6:7a:81:59:b9:d0:33:83:f8:2c:d8:ac:fb: 30:5c:61:33:3d:ec:6e:e0:d3:a6:db:ae:74:da:50: c9:4f:9e:97:8c:e2:9d:ab:dd:a0:57:45:a8:a1:d8: b1:75:23:3e:f1:21:ae:87:cb:43:e3:d4:c7:6b:eb: 07:cb:d2:ba:4b:7d:31:9f:84:a1:a5:d8:32:6f:37: 26:63:c5:d1:09:06:aa:40:6d:ca:bd:72:1e:49:65: 94:99:52:2b:35:84:e3:4d:a1:7a:6d:e1:f1:93:66: 80:0e:e8:d4:08:7f:3f:65:70:f6:10:a4:5b:54:e3: 98:37:b7:4e:b8:f2:03:de:53:70:99:68:24:d1:09: 19:02:8a:95:3e:3d:86:ac:c0:ef:bd:dd:63:4b:e8: df:77:95:01:71:00:a7:e9:e8:74:bd:49:25:46:90: 0f:51:14:46:62:84:e1:bc:d7:1e:ce:8a:16:eb:dc: 33:89:cb:c0:2d:e4:b4:2a:2e:e6:68:b6:68:1a:ee: ee:d9:04:35:ac:d4:da:ec:f3:ac:97:8c:7e:6c:13: e8:05:6d:e0:17:8c:1c:0b:e1:45:b1:2f:8e:69:ae: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9F:21:E3:98:4C:28:FB:A1:05:AD:FD:80:F5:66:64:51:46:18:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bba2bebe-fccc-3231-8e5e-83717ced2501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1d:a4:0c:66:d1:da:91:06:f9:85:1b:4c:ee:f7:cc:9e:15: 54:62:87:a3:f6:24:96:99:f1:eb:55:3f:a4:7b:db:a4:7a:85: 6a:0b:99:d8:2a:1d:4c:56:1f:eb:52:a2:cc:1f:3c:86:d1:a0: c5:3d:1b:d6:f4:53:0b:05:55:d7:9b:12:e9:00:d4:3c:07:f3: 5b:c8:ca:07:cc:48:00:1a:e8:6b:1b:98:b0:d2:45:fb:b2:5b: 03:d5:56:11:2b:a5:83:55:c3:ab:12:1e:e3:ca:d7:ba:99:f6: 73:d5:ed:2f:17:68:4b:ab:64:81:c4:37:50:09:64:a0:ed:7c: b4:fa:e0:68:3b:e8:19:2c:81:68:bc:93:db:ba:20:6e:3f:f8: 36:b8:2e:26:29:cc:10:d2:7b:e1:2a:2a:dc:38:eb:de:9f:48: d9:2e:60:12:4c:1f:64:fc:92:66:31:2f:ed:97:0b:73:d7:be: 63:72:8d:18:87:4e:0b:3b:a9:b1:65:d6:41:17:f2:51:2f:98: 1b:d7:06:95:6d:9f:f4:c0:e4:bf:93:12:3e:af:60:73:99:99: 5c:7a:eb:22:64:b5:2e:45:df:c7:7e:b3:ab:af:c1:af:83:a9: 5b:98:1f:da:b3:1c:7a:f4:f5:23:82:6d:0d:02:93:26:ee:ba: d3:96:17:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzO7xfnnIZfoxyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGMyZDI5MzYtNmUyYi00ZDMyLWJkNzUtODI1NGQ5NzE1YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3VjAcPaktofIgoanjBFtOFGJe4KdyBTZ8t1 YrPhwvZ6gVm50DOD+CzYrPswXGEzPexu4NOm26502lDJT56XjOKdq92gV0Woodix dSM+8SGuh8tD49THa+sHy9K6S30xn4ShpdgybzcmY8XRCQaqQG3KvXIeSWWUmVIr NYTjTaF6beHxk2aADujUCH8/ZXD2EKRbVOOYN7dOuPID3lNwmWgk0QkZAoqVPj2G rMDvvd1jS+jfd5UBcQCn6eh0vUklRpAPURRGYoThvNcezooW69wzicvALeS0Ki7m aLZoGu7u2QQ1rNTa7POsl4x+bBPoBW3gF4wcC+FFsS+Oaa6P7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCifIeOYTCj7oQWt/YD1ZmRRRhhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmJhMmJlYmUtZmNjYy0z MjMxLThlNWUtODM3MTdjZWQyNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEdpAxm0dqRBvmFG0zu98yeFVRih6P2JJaZ8etVP6R726R6hWoLmdgq HUxWH+tSoswfPIbRoMU9G9b0UwsFVdebEukA1DwH81vIygfMSAAa6GsbmLDSRfuy WwPVVhErpYNVw6sSHuPK17qZ9nPV7S8XaEurZIHEN1AJZKDtfLT64Gg76BksgWi8 k9u6IG4/+Da4LiYpzBDSe+EqKtw4696fSNkuYBJMH2T8kmYxL+2XC3PXvmNyjRiH Tgs7qbFl1kEX8lEvmBvXBpVtn/TA5L+TEj6vYHOZmVx66yJktS5F38d+s6uvwa+D qVuYH9qzHHr09SOCbQ0CkybuutOWFwk= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:47 2025 by rpki-client