$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3d69486-1672-3356-9399-9b5dcc1a0108.roa File: f3d69486-1672-3356-9399-9b5dcc1a0108.roa (raw, json) Hash identifier: N+x2N7YsF/yGsTPuYEo52/RBprH2zJL/GtKYybAsYk4= Subject key identifier: F7:FC:A6:42:34:B2:C8:7E:9A:01:AA:06:D4:02:2A:38:31:B1:4E:B4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BB35A9A9F5D60352D4E500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3d69486-1672-3356-9399-9b5dcc1a0108.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:35:a9:a9:f5:d6:03:52:d4:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=24efdfc7-69af-4a6d-8e93-04b4ecc6427e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7c:d7:5b:25:19:7f:70:f3:43:e2:fd:ae:62: 96:b6:df:60:6f:40:29:22:ea:2d:f3:5f:8f:c3:1e: 3a:7c:f4:eb:35:7d:54:a7:8f:a3:ce:6c:d5:ac:6a: 0c:d4:e5:5a:56:e7:a9:c8:57:aa:f5:dc:7a:ea:20: 36:10:3e:6c:d2:e5:d9:05:3b:78:ce:2f:c7:78:b1: 6f:2b:be:14:45:8c:c7:18:09:fb:89:7e:3e:68:61: 56:14:87:f2:b2:56:70:b6:52:b9:65:e2:ef:bd:82: 73:45:7c:28:f5:cc:c8:20:eb:51:dc:3a:40:42:9c: 46:f1:cf:ce:e5:aa:a1:d2:5c:eb:02:06:52:06:78: 6d:87:cd:61:be:f0:88:2e:87:32:6e:b5:15:9d:f8: 66:ad:45:b8:13:5e:b6:fc:8d:ff:d2:10:f8:e1:77: 0e:b9:c0:77:79:60:09:c8:6f:48:82:e9:c2:db:58: fb:e9:ef:7b:f6:89:0b:bf:71:d7:db:ba:36:f0:6b: 35:e1:ed:79:0e:29:79:d0:89:ff:fb:b7:f5:7b:cc: eb:da:48:82:30:e3:da:5f:34:d9:19:70:f4:b5:d8: 83:d6:16:6b:4f:22:37:89:3b:51:02:07:a4:b2:f9: e4:0c:cc:9a:3a:03:35:99:2b:b9:ac:de:23:68:5e: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:A6:42:34:B2:C8:7E:9A:01:AA:06:D4:02:2A:38:31:B1:4E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3d69486-1672-3356-9399-9b5dcc1a0108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:df:82:0d:6d:cf:d6:68:0b:67:33:94:0f:7c:bb:46:0f:e8: d2:e8:7b:d2:74:2e:87:47:2c:7b:bf:c2:6f:c3:75:48:07:40: ff:a6:3f:5b:1b:26:35:f6:9a:39:61:f2:24:68:7e:55:0f:c5: 6e:66:ed:d8:76:d2:03:5d:51:8a:4a:31:b3:19:66:93:00:5f: 31:c2:20:91:90:8b:dd:d9:8d:5b:bb:f3:16:c5:4a:10:1f:2e: 22:fd:c1:0d:d7:93:95:ce:0e:92:75:28:ea:2f:75:6f:d7:b8: 1f:45:39:99:d9:c7:6f:45:28:51:82:fd:c6:b4:25:83:fd:10: 4d:41:3c:d6:0c:55:d9:47:30:70:ff:63:f7:62:e6:f8:c4:85: f9:06:3a:2b:c9:77:36:e9:d5:f3:27:12:74:9a:66:94:c7:fe: 47:7e:33:77:b6:a9:3e:63:05:98:13:f1:35:98:e7:fc:1d:a7: b5:01:85:2b:d3:fb:5c:13:59:69:5e:b7:fe:a9:4b:e8:09:e5: 6f:2f:94:2d:1e:19:ed:32:83:35:80:fa:a7:e5:30:7b:8d:72: d5:86:38:8c:7c:7e:41:a7:a5:2f:06:7c:89:6e:4e:67:d7:6d: bd:4d:ce:e4:d8:4a:65:8b:51:f4:d1:cc:df:db:20:a4:45:74: d7:bb:25:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuzWpqfXWA1LU5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjRlZmRmYzctNjlhZi00YTZkLThlOTMtMDRiNGVjYzY0MjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXzXWyUZf3DzQ+L9rmKWtt9gb0ApIuot81+P wx46fPTrNX1Up4+jzmzVrGoM1OVaVuepyFeq9dx66iA2ED5s0uXZBTt4zi/HeLFv K74URYzHGAn7iX4+aGFWFIfyslZwtlK5ZeLvvYJzRXwo9czIIOtR3DpAQpxG8c/O 5aqh0lzrAgZSBnhth81hvvCILocybrUVnfhmrUW4E162/I3/0hD44XcOucB3eWAJ yG9IgunC21j76e979okLv3HX27o28Gs14e15Dil50In/+7f1e8zr2kiCMOPaXzTZ GXD0tdiD1hZrTyI3iTtRAgeksvnkDMyaOgM1mSu5rN4jaF4G/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf8pkI0ssh+mgGqBtQCKjgxsU60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjNkNjk0ODYtMTY3Mi0z MzU2LTkzOTktOWI1ZGNjMWEwMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHfgg1tz9ZoC2czlA98u0YP6NLoe9J0LodHLHu/wm/DdUgHQP+mP1sb JjX2mjlh8iRoflUPxW5m7dh20gNdUYpKMbMZZpMAXzHCIJGQi93ZjVu78xbFShAf LiL9wQ3Xk5XODpJ1KOovdW/XuB9FOZnZx29FKFGC/ca0JYP9EE1BPNYMVdlHMHD/ Y/di5vjEhfkGOivJdzbp1fMnEnSaZpTH/kd+M3e2qT5jBZgT8TWY5/wdp7UBhSvT +1wTWWlet/6pS+gJ5W8vlC0eGe0ygzWA+qflMHuNctWGOIx8fkGnpS8GfIluTmfX bb1NzuTYSmWLUfTRzN/bIKRFdNe7JTk= -----END CERTIFICATE-----Generated at Sun Apr 27 00:23:49 2025 by rpki-client