$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbff48dd-87f6-3825-a9a9-4c06cf242be8.roa File: fbff48dd-87f6-3825-a9a9-4c06cf242be8.roa (raw, json) Hash identifier: qO3qHqidcaf/uZNFuqAOP7d92WhxYwYb+GrUc2DYle4= Subject key identifier: D3:FC:CE:B9:7C:AD:87:9A:B5:37:6B:CA:16:67:35:C0:34:EA:5F:98 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA934730A6051B932C7380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbff48dd-87f6-3825-a9a9-4c06cf242be8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 172.242.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:93:47:30:a6:05:1b:93:2c:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a67a3d8b-571e-4726-b5d4-094c48f384e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f3:2a:e1:69:25:0d:be:60:e2:01:f5:f8:80: 72:86:33:b1:65:6a:a4:ec:5d:20:0a:c9:00:f6:a2: 95:46:e4:08:26:44:2c:3e:f3:80:a5:e7:21:80:04: 10:5f:d8:9e:12:39:4c:dc:5e:26:3e:85:8d:79:ad: 22:ae:fc:7f:f8:b9:e3:70:41:e8:12:26:14:13:7c: 69:e7:cc:28:76:cf:15:12:71:28:25:1d:a3:c6:b3: bb:19:b4:36:11:06:67:59:10:9e:88:2e:13:84:13: 37:32:ab:fb:9a:04:fb:40:9d:0d:3b:21:f1:65:1d: c3:64:37:e2:02:a6:42:76:88:58:26:71:61:ad:d4: dd:89:9d:03:3a:49:be:0a:6e:3d:a8:13:cb:d3:ec: d6:dc:63:00:e2:fb:84:a7:78:29:b7:6b:33:8f:84: eb:47:1f:e3:ee:19:7d:db:b8:f3:b0:96:2d:15:72: af:a1:0e:10:b4:c4:0c:45:15:47:61:0c:08:5d:89: 5f:80:00:9b:8a:97:44:4a:f6:38:e6:2c:b3:b6:b1: c4:cc:15:a0:aa:01:4c:35:02:39:70:18:9c:e9:4e: 7b:69:de:fb:d7:a7:af:9b:2a:c7:ce:04:1c:aa:76: f6:fb:21:74:3f:8d:03:d8:15:91:67:09:88:91:90: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FC:CE:B9:7C:AD:87:9A:B5:37:6B:CA:16:67:35:C0:34:EA:5F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbff48dd-87f6-3825-a9a9-4c06cf242be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:cf:01:19:76:3d:77:60:32:4e:26:51:ef:8c:d0:2c:9b:a5: e2:ac:e9:0b:e6:bd:a0:5a:8f:68:73:b6:c7:d0:70:5f:75:80: 80:89:01:4c:c5:2a:31:60:8c:c8:ea:31:f5:6d:22:55:f3:9d: fd:33:00:20:f2:5a:4d:1e:3a:73:9c:ab:ee:67:7a:5d:2c:51: 9e:7a:fe:b1:03:b3:e0:1f:37:8b:24:bc:28:f1:57:4d:04:d8: d7:56:a7:01:18:2b:e3:2b:08:67:7c:3b:e5:7a:0f:a9:2d:2a: 2d:8b:af:9d:b3:c6:0e:b4:bf:d2:88:23:a0:21:85:de:5f:a5: fe:03:f1:94:9d:0b:da:6e:23:bd:45:f8:89:53:64:62:7c:cf: 74:09:ef:9a:ef:b8:c9:ea:fa:bf:ca:d9:ce:c3:2e:bf:92:76: df:4c:03:89:8e:80:d9:b4:c6:07:7c:43:b0:bb:f0:ec:9a:bd: bc:c0:1d:84:1a:c8:c4:c9:da:27:8d:22:a2:13:cd:0c:cb:54: 5a:d0:22:a0:82:ab:dc:19:34:85:75:bd:0c:ca:b3:6d:54:31: 03:03:80:d0:02:0e:66:d8:07:1c:4c:a0:fe:88:d0:39:47:30: 56:48:f9:fb:e5:c4:d9:01:8d:f6:b7:01:da:59:c8:b3:ab:e8: 68:5a:08:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkupNHMKYFG5Msc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTY3YTNkOGItNTcxZS00NzI2LWI1ZDQtMDk0YzQ4ZjM4NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPMq4WklDb5g4gH1+IByhjOxZWqk7F0gCskA 9qKVRuQIJkQsPvOApechgAQQX9ieEjlM3F4mPoWNea0irvx/+LnjcEHoEiYUE3xp 58wods8VEnEoJR2jxrO7GbQ2EQZnWRCeiC4ThBM3Mqv7mgT7QJ0NOyHxZR3DZDfi AqZCdohYJnFhrdTdiZ0DOkm+Cm49qBPL0+zW3GMA4vuEp3gpt2szj4TrRx/j7hl9 27jzsJYtFXKvoQ4QtMQMRRVHYQwIXYlfgACbipdESvY45iyztrHEzBWgqgFMNQI5 cBic6U57ad7716evmyrHzgQcqnb2+yF0P40D2BWRZwmIkZChFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP8zrl8rYeatTdryhZnNcA06l+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmJmZjQ4ZGQtODdmNi0z ODI1LWE5YTktNGMwNmNmMjQyYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXPARl2PXdgMk4mUe+M0CybpeKs6QvmvaBaj2hztsfQcF91gICJAUzF KjFgjMjqMfVtIlXznf0zACDyWk0eOnOcq+5nel0sUZ56/rEDs+AfN4skvCjxV00E 2NdWpwEYK+MrCGd8O+V6D6ktKi2Lr52zxg60v9KII6Ahhd5fpf4D8ZSdC9puI71F +IlTZGJ8z3QJ75rvuMnq+r/K2c7DLr+Sdt9MA4mOgNm0xgd8Q7C78OyavbzAHYQa yMTJ2ieNIqITzQzLVFrQIqCCq9wZNIV1vQzKs21UMQMDgNACDmbYBxxMoP6I0DlH MFZI+fvlxNkBjfa3AdpZyLOr6GhaCLg= -----END CERTIFICATE-----Generated at Sun Apr 27 02:31:59 2025 by rpki-client