$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa File: da586d84-433b-3f79-a0e6-17aa74076e21.roa (raw, json) Hash identifier: 8tuC2FxFsejeCF34xzduBgL9PuZZS+t5R17VHvYC178= Subject key identifier: 89:40:CB:FC:D5:7E:15:D5:A8:7C:59:E3:3A:AF:02:09:9B:A4:6D:CC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA8EF06976B6E8E073EC80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:8e:f0:69:76:b6:e8:e0:73:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1cea396b-5f00-45e6-b872-5cd9eb35aea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:61:db:f1:fe:d5:ce:2b:8c:2f:fc:4e:e6: 0c:75:4c:19:54:fd:a5:5b:38:4c:6a:aa:da:b3:80: 35:1b:6c:38:d4:9c:a8:16:17:18:b5:be:55:5b:98: 65:17:99:ba:b9:12:1d:87:19:b7:14:cc:6f:71:db: 0f:87:97:aa:59:87:74:0d:39:18:a8:21:c3:f1:fb: 4f:4d:79:8e:2d:6e:dc:3c:d7:06:cb:5e:81:fd:c8: 0b:37:5f:7f:ee:cf:3e:85:7f:05:9f:6c:37:8e:10: cf:26:f3:16:2e:28:bd:c1:2c:14:cf:8e:8f:fa:86: 8b:db:b0:ee:97:a3:cc:82:b2:3e:0d:be:7c:76:02: 64:44:f7:d3:17:45:26:4f:79:8d:c2:30:e4:57:e3: e1:a8:50:9e:be:94:1f:fa:2b:58:d5:6f:1f:ca:b9: dc:4a:40:74:2e:32:21:38:31:b9:2b:08:ee:ab:39: 72:16:4c:21:82:dd:ad:be:02:19:f1:c7:32:1b:3b: 5d:f7:a7:95:4b:05:16:9a:7b:26:7d:97:2d:9b:b2: 41:2e:34:67:ce:eb:48:b2:f9:ed:97:62:bf:17:38: 95:9b:cb:52:ea:1f:b0:01:90:2d:1c:23:c2:c7:6d: a4:68:a8:86:3d:2c:49:d9:e7:6a:ea:f8:42:81:33: 97:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:CB:FC:D5:7E:15:D5:A8:7C:59:E3:3A:AF:02:09:9B:A4:6D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2c:99:c9:12:c9:43:25:67:42:4b:c3:16:90:cb:e1:7f:f8: 97:6a:22:87:6d:81:c5:84:d1:c4:05:e6:af:17:2c:8e:ed:79: d7:a8:dc:ff:12:74:f2:ac:6e:47:e3:3c:f3:4a:1e:b2:6a:8f: 2d:4a:cb:b4:b9:bb:09:ee:36:fa:0c:67:a6:6e:2a:3b:7c:bd: 3c:40:44:cb:f3:db:73:1b:69:f0:fe:e4:6d:87:db:59:a7:df: 74:ed:94:cb:a0:bc:34:13:ad:04:69:7d:38:bc:d8:d1:45:2f: 50:84:92:54:5b:b4:5c:29:4e:3b:63:b6:b6:42:f2:7e:1a:db: 01:a0:bc:39:03:7e:9a:0c:12:76:c9:28:b8:2c:6b:30:bc:19: b5:c7:6f:74:17:02:a9:e9:aa:a8:de:d9:5d:5c:04:95:65:38: 56:ec:97:ea:eb:ad:2b:f6:cf:84:b3:4a:16:f1:3a:4f:c4:a1: 44:ed:3a:41:44:6a:14:f4:f2:e8:58:1b:63:ec:3b:0e:cf:cb: ae:ad:55:41:1b:1b:98:69:9a:f6:dc:6c:fc:ec:6f:59:81:b4: 88:a2:6b:27:00:fb:00:64:c1:de:d2:d3:be:0d:cb:f3:5c:b5: cd:71:cd:27:af:cd:a2:38:75:f1:f6:de:85:dc:fc:09:ac:af: f4:d0:a4:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuo7waXa26OBz7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWNlYTM5NmItNWYwMC00NWU2LWI4NzItNWNkOWViMzVhZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOFh2/H+1c4rjC/8TuYMdUwZVP2lWzhMaqra s4A1G2w41JyoFhcYtb5VW5hlF5m6uRIdhxm3FMxvcdsPh5eqWYd0DTkYqCHD8ftP TXmOLW7cPNcGy16B/cgLN19/7s8+hX8Fn2w3jhDPJvMWLii9wSwUz46P+oaL27Du l6PMgrI+Db58dgJkRPfTF0UmT3mNwjDkV+PhqFCevpQf+itY1W8fyrncSkB0LjIh ODG5KwjuqzlyFkwhgt2tvgIZ8ccyGztd96eVSwUWmnsmfZctm7JBLjRnzutIsvnt l2K/FziVm8tS6h+wAZAtHCPCx22kaKiGPSxJ2edq6vhCgTOXqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlAy/zVfhXVqHxZ4zqvAgmbpG3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGE1ODZkODQtNDMzYi0z Zjc5LWEwZTYtMTdhYTc0MDc2ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgsmckSyUMlZ0JLwxaQy+F/+JdqIodtgcWE0cQF5q8XLI7tedeo3P8S dPKsbkfjPPNKHrJqjy1Ky7S5uwnuNvoMZ6ZuKjt8vTxARMvz23MbafD+5G2H21mn 33TtlMugvDQTrQRpfTi82NFFL1CEklRbtFwpTjtjtrZC8n4a2wGgvDkDfpoMEnbJ KLgsazC8GbXHb3QXAqnpqqje2V1cBJVlOFbsl+rrrSv2z4SzShbxOk/EoUTtOkFE ahT08uhYG2PsOw7Py66tVUEbG5hpmvbcbPzsb1mBtIiiaycA+wBkwd7S074Ny/Nc tc1xzSevzaI4dfH23oXc/Amsr/TQpCg= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:19 2025 by rpki-client