$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa File: 2af33beb-28bf-3e20-8796-37fd8256bd13.roa (raw, json) Hash identifier: XPs7Z88JAao3uNhYDFFYW8t2xMbs1nkxYTyqkF/bz80= Subject key identifier: A3:98:B7:F6:A4:1E:95:F4:29:A8:B4:32:37:C8:10:FA:2B:EA:97:5B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58149CB45C212CED410AA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:49:cb:45:c2:12:ce:d4:10:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c4119d81-b58e-4d2d-9647-8c58f850d7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e5:61:cc:a7:db:3b:5e:f4:32:23:4f:55:05: ea:af:cf:92:9d:d0:66:d9:11:8d:fb:37:39:1a:78: a3:85:89:d1:37:58:5d:7c:80:92:19:9b:13:fd:10: f8:61:7d:34:ae:c0:3b:68:bd:bd:25:de:36:1f:5c: 37:3a:a1:75:62:f7:f0:b5:a1:3b:3a:7e:ba:e2:22: 33:9a:12:21:f6:fa:f1:34:d4:20:66:b9:00:db:1c: e5:9a:c5:d1:60:73:19:bd:fc:2b:29:0e:0c:84:36: a4:b9:67:87:21:d5:8e:64:43:46:95:04:40:72:7b: 4e:20:e7:36:8a:a0:75:27:61:7e:de:15:c3:64:0b: eb:ea:93:f7:02:db:47:36:71:ce:93:fc:91:a1:88: a1:e5:06:e8:bb:21:fd:c1:e0:3b:bd:e7:0f:46:13: ef:6c:86:85:ac:cb:f2:6b:58:c9:ff:66:a6:60:04: 68:0d:91:2a:a7:ab:67:02:8c:66:53:95:31:c2:9e: 4c:63:67:fe:ea:5a:ea:4e:e3:a2:18:6d:7a:f4:80: b0:2a:cd:de:db:78:c7:eb:d4:9f:b8:08:40:e8:3d: 5d:87:cc:7a:02:8e:34:ae:d5:5b:b6:d4:1d:05:7c: c6:56:0d:2c:9c:ac:c1:36:86:f2:37:7a:08:5b:66: b3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:98:B7:F6:A4:1E:95:F4:29:A8:B4:32:37:C8:10:FA:2B:EA:97:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:04:a7:33:1b:c3:f5:ac:82:3f:92:2b:9c:c8:07:29:41:ae: 17:eb:0d:16:4c:66:49:b8:68:8b:25:9d:f0:4e:05:26:30:81: f5:1d:1e:dd:15:3a:70:fc:4a:78:85:a0:86:cd:82:40:ec:68: 06:80:c3:8a:6e:a4:f6:ff:67:67:9e:b6:58:9a:a2:68:3d:5f: 9f:3f:44:c7:22:fd:af:75:7f:33:33:14:26:41:d0:1e:0e:0f: ab:7e:7a:93:fd:43:b9:1a:47:3a:f8:81:09:a9:34:ad:e5:5f: cb:41:0f:df:3d:b0:ea:5f:ca:70:d2:31:91:66:de:06:eb:18: 2e:8a:3c:19:b0:19:ca:f8:b5:28:66:57:0e:24:83:a6:a5:aa: bd:21:09:fd:00:69:d9:7b:05:a0:b8:5f:98:df:dd:c9:e4:8f: 1f:a1:c5:52:dc:fe:5a:1f:1d:0c:94:64:95:31:aa:a0:3a:39: 05:b8:e7:23:0c:08:5d:db:ff:d9:80:ef:77:cf:7f:25:7d:3f: f4:3a:d1:64:8a:1d:98:5c:dc:93:56:61:78:21:9e:45:b7:31: 8d:05:18:07:23:87:6d:42:de:26:7e:0e:10:df:c2:d7:26:ea: bf:77:84:37:2f:58:8a:14:58:73:69:8c:fd:41:b4:14:4e:a2: 85:af:37:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUnLRcISztQQqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzQxMTlkODEtYjU4ZS00ZDJkLTk2NDctOGM1OGY4NTBkN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeVhzKfbO170MiNPVQXqr8+SndBm2RGN+zc5 GnijhYnRN1hdfICSGZsT/RD4YX00rsA7aL29Jd42H1w3OqF1YvfwtaE7On664iIz mhIh9vrxNNQgZrkA2xzlmsXRYHMZvfwrKQ4MhDakuWeHIdWOZENGlQRAcntOIOc2 iqB1J2F+3hXDZAvr6pP3AttHNnHOk/yRoYih5QbouyH9weA7vecPRhPvbIaFrMvy a1jJ/2amYARoDZEqp6tnAoxmU5Uxwp5MY2f+6lrqTuOiGG169ICwKs3e23jH69Sf uAhA6D1dh8x6Ao40rtVbttQdBXzGVg0snKzBNobyN3oIW2azbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOYt/akHpX0Kai0MjfIEPor6pdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmFmMzNiZWItMjhiZi0z ZTIwLTg3OTYtMzdmZDgyNTZiZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIEpzMbw/Wsgj+SK5zIBylBrhfrDRZMZkm4aIslnfBOBSYwgfUdHt0V OnD8SniFoIbNgkDsaAaAw4pupPb/Z2eetliaomg9X58/RMci/a91fzMzFCZB0B4O D6t+epP9Q7kaRzr4gQmpNK3lX8tBD989sOpfynDSMZFm3gbrGC6KPBmwGcr4tShm Vw4kg6alqr0hCf0Aadl7BaC4X5jf3cnkjx+hxVLc/lofHQyUZJUxqqA6OQW45yMM CF3b/9mA73fPfyV9P/Q60WSKHZhc3JNWYXghnkW3MY0FGAcjh21C3iZ+DhDfwtcm 6r93hDcvWIoUWHNpjP1BtBROooWvN7o= -----END CERTIFICATE-----Generated at Fri Mar 14 08:46:29 2025 by rpki-client