$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54c5c8b-834b-32c7-87dc-fa896ac93cd7.roa File: e54c5c8b-834b-32c7-87dc-fa896ac93cd7.roa (raw, json) Hash identifier: FFVavWvNUNqHMXpdn1k6wOSAlK1PPrBPFXF+tQUXHGs= Subject key identifier: 3E:2B:7F:F3:77:7D:00:D1:A7:1A:51:E9:72:E8:DF:19:46:8C:66:7B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB35B58D57A3C1F2E1D0C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54c5c8b-834b-32c7-87dc-fa896ac93cd7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:35:b5:8d:57:a3:c1:f2:e1:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7f34f2a0-d547-4019-b5e3-112b2347c59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:6c:5f:95:77:b4:cb:59:14:a1:65:c0:d1: ed:16:93:7c:ca:f2:6d:58:7a:02:8b:45:56:f1:5c: 03:79:44:04:79:34:59:d6:33:e0:a8:6d:22:fe:2b: c8:85:a0:9b:1f:b8:5e:da:4b:7d:27:05:de:b3:39: c4:e2:52:a3:70:46:63:97:8e:7f:71:11:b1:c8:6c: c9:8d:df:16:7e:25:d2:c7:d7:52:26:7b:d7:ba:78: 54:42:6c:74:9d:52:d7:12:59:c7:be:67:83:7f:d6: 6f:8f:25:12:f8:e3:38:36:82:a3:37:13:c3:f9:97: 54:cf:57:75:35:57:15:89:da:a9:23:2c:d7:57:59: ee:e3:9b:c6:8c:ad:b6:5a:d0:ed:98:bf:7f:8b:13: ca:9c:e7:ca:43:0a:40:da:e0:8c:dc:1a:29:da:5c: 7f:bc:f8:80:40:fd:03:50:c6:f2:40:5c:86:63:37: 92:6d:e5:48:bc:48:c6:ac:f5:e1:c5:7d:db:09:ab: 23:06:9a:f7:e7:3d:80:a9:ff:98:e6:d3:b6:00:5b: 1f:80:53:64:20:91:90:9f:b2:b0:61:99:39:8b:f3: f0:be:a9:75:34:91:ae:a7:43:c9:31:a5:30:d6:5c: bd:e8:8c:a7:b4:30:3d:f4:f2:15:c5:16:18:e0:29: c2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2B:7F:F3:77:7D:00:D1:A7:1A:51:E9:72:E8:DF:19:46:8C:66:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54c5c8b-834b-32c7-87dc-fa896ac93cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:6e:98:94:0b:d5:6d:07:87:7c:ab:e1:b4:3f:50:74:8e:25: fe:fb:f6:f6:bd:83:bf:b3:3b:d1:a3:94:9b:2c:1b:46:0f:15: d9:97:ee:69:0b:2f:c8:90:91:af:e4:9f:bc:89:f8:f1:8e:71: dd:ba:1a:bd:b5:84:75:d9:ef:85:2f:4a:b4:4b:15:95:d5:7d: b9:45:53:03:68:dd:0c:5a:52:08:73:c0:d3:4f:22:6e:50:f0: c2:a9:22:89:e6:24:be:42:3a:3f:53:1d:8b:6a:b3:b5:82:14: 5a:47:04:14:63:ed:ff:bd:0a:f2:64:7f:da:fc:eb:a3:c2:63: 73:28:da:db:81:8f:d3:ae:cf:59:c6:53:5b:6c:85:eb:25:46: b6:31:79:43:f1:d6:d5:9b:17:f2:51:2e:3e:d0:98:08:63:96: a0:9d:0f:3d:09:c0:03:fd:1d:a2:1e:29:bb:8f:34:5c:77:b4: 8d:1d:d8:2f:7b:68:37:f7:8c:4e:74:8e:02:08:73:90:a9:fb: 33:10:4e:87:fa:49:f0:6f:2e:1d:ea:13:9f:d8:61:fc:cd:f4: d3:d6:8a:0f:51:f2:64:4d:de:66:f2:f0:bc:87:98:fd:97:84: b2:c6:9d:08:fa:e2:46:6e:df:8f:7b:58:c9:16:97:bf:90:93: e2:43:23:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzW1jVejwfLh0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2YzNGYyYTAtZDU0Ny00MDE5LWI1ZTMtMTEyYjIzNDdjNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+tsX5V3tMtZFKFlwNHtFpN8yvJtWHoCi0VW 8VwDeUQEeTRZ1jPgqG0i/ivIhaCbH7he2kt9JwXesznE4lKjcEZjl45/cRGxyGzJ jd8WfiXSx9dSJnvXunhUQmx0nVLXElnHvmeDf9ZvjyUS+OM4NoKjNxPD+ZdUz1d1 NVcVidqpIyzXV1nu45vGjK22WtDtmL9/ixPKnOfKQwpA2uCM3Bop2lx/vPiAQP0D UMbyQFyGYzeSbeVIvEjGrPXhxX3bCasjBpr35z2Aqf+Y5tO2AFsfgFNkIJGQn7Kw YZk5i/Pwvql1NJGup0PJMaUw1ly96IyntDA99PIVxRYY4CnCxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4rf/N3fQDRpxpR6XLo3xlGjGZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTU0YzVjOGItODM0Yi0z MmM3LTg3ZGMtZmE4OTZhYzkzY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlumJQL1W0Hh3yr4bQ/UHSOJf779va9g7+zO9GjlJssG0YPFdmX7mkL L8iQka/kn7yJ+PGOcd26Gr21hHXZ74UvSrRLFZXVfblFUwNo3QxaUghzwNNPIm5Q 8MKpIonmJL5COj9THYtqs7WCFFpHBBRj7f+9CvJkf9r866PCY3Mo2tuBj9Ouz1nG U1tsheslRrYxeUPx1tWbF/JRLj7QmAhjlqCdDz0JwAP9HaIeKbuPNFx3tI0d2C97 aDf3jE50jgIIc5Cp+zMQTof6SfBvLh3qE5/YYfzN9NPWig9R8mRN3mby8LyHmP2X hLLGnQj64kZu3497WMkWl7+Qk+JDI+M= -----END CERTIFICATE-----Generated at Sun Apr 27 11:22:29 2025 by rpki-client