$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa File: 33d98de7-82e5-3294-87bd-da0c96c9fa35.roa (raw, json) Hash identifier: mVYFzgDs/perQYAgqiWzLFJ420gv9IwgQKZIjAkRXRE= Subject key identifier: DE:FC:1A:A6:DD:AB:D5:10:E9:C7:B0:90:DB:1A:E2:BC:4D:23:8E:21 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814C9A1A65D757E0EC2440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4c:9a:1a:65:d7:57:e0:ec:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=218a64d3-6bcf-41e8-9931-c55bf0ce6734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:98:37:7b:ec:72:63:99:55:5b:fa:6e:d1: 13:38:c9:a6:b7:65:c8:75:a2:a4:fc:86:4e:89:54: 66:94:75:a4:b6:d1:83:c9:ba:9a:10:13:a7:e2:a8: 2c:df:b6:8e:3e:53:0b:2e:bf:85:d4:32:b8:8c:51: b2:f7:fc:f2:c4:e0:90:d2:a5:4d:31:ea:95:ab:51: 74:59:95:0c:58:62:2b:a0:18:a3:49:78:80:fe:9f: a8:b4:d4:98:ad:24:b3:56:6b:7d:e5:4a:aa:e4:9b: 8d:26:80:a1:e7:c3:28:e8:ba:ba:db:d5:27:7e:c3: 85:55:07:f8:4b:d5:73:07:c1:11:ae:27:60:3c:de: 76:f9:11:d0:0f:6e:91:cf:e0:d2:d7:3f:1d:1f:ac: 65:c2:c7:2b:59:68:c6:08:62:82:ce:2c:e5:63:e2: 5e:4d:3f:cb:36:e9:4d:d8:e5:54:41:ad:71:92:00: 2c:3f:69:a6:5c:4d:be:cd:aa:58:fc:97:11:67:10: cc:0c:5f:1d:33:c6:d9:8a:64:dd:7d:d3:59:9e:72: 24:5f:d8:15:43:6d:84:47:0a:28:f3:d2:4f:81:11: 82:b6:e0:27:4e:c0:8f:6c:e4:91:29:ec:38:af:c9: e1:fe:62:0a:78:01:22:f2:72:31:d7:0b:66:f0:bf: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FC:1A:A6:DD:AB:D5:10:E9:C7:B0:90:DB:1A:E2:BC:4D:23:8E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a8:d1:25:06:06:ed:b4:12:5c:52:18:67:c4:28:3e:f7:68: 62:3d:7b:30:d7:f3:29:53:98:16:18:4b:8f:f4:d7:c6:da:fd: 9e:dc:ae:17:f9:26:39:d2:a3:79:56:5a:e4:7b:cb:a6:57:9b: 2a:ee:3b:bc:5c:e2:99:06:0e:de:45:79:50:06:99:52:c5:80: b5:e5:09:73:68:77:20:e5:7c:a7:8c:36:c7:4a:c9:7b:c0:11: f4:27:56:bd:32:73:d0:cb:75:ba:ac:14:90:96:b1:9b:4b:95: 7b:c2:5f:81:0a:31:af:24:22:c7:61:4a:88:29:25:da:1a:05: d7:22:b7:ff:2b:69:01:e8:37:86:10:74:99:fb:cb:94:be:8b: c9:87:7f:5d:e3:e5:eb:ae:5a:3b:e7:42:7c:90:5c:4a:ce:e6: dc:04:0f:48:90:bf:00:c4:69:89:76:b0:b3:7c:92:b2:1a:ef: 2f:38:15:07:50:a3:6a:94:e5:73:fa:63:58:19:d0:42:37:4d: ae:58:ed:0d:7a:06:8c:ff:76:27:c0:fe:d0:9f:54:c6:91:85: 7b:a6:89:84:f8:b7:e9:38:11:3e:19:45:d8:c2:41:fc:65:d2: be:46:a9:02:30:ef:66:ad:b3:a3:40:48:d0:cc:de:a4:aa:01: 8b:44:92:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUyaGmXXV+DsJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjE4YTY0ZDMtNmJjZi00MWU4LTk5MzEtYzU1YmYwY2U2NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHCYN3vscmOZVVv6btETOMmmt2XIdaKk/IZO iVRmlHWkttGDybqaEBOn4qgs37aOPlMLLr+F1DK4jFGy9/zyxOCQ0qVNMeqVq1F0 WZUMWGIroBijSXiA/p+otNSYrSSzVmt95Uqq5JuNJoCh58Mo6Lq629UnfsOFVQf4 S9VzB8ERridgPN52+RHQD26Rz+DS1z8dH6xlwscrWWjGCGKCzizlY+JeTT/LNulN 2OVUQa1xkgAsP2mmXE2+zapY/JcRZxDMDF8dM8bZimTdfdNZnnIkX9gVQ22ERwoo 89JPgRGCtuAnTsCPbOSRKew4r8nh/mIKeAEi8nIx1wtm8L/GawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN78Gqbdq9UQ6cewkNsa4rxNI44hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNkOThkZTctODJlNS0z Mjk0LTg3YmQtZGEwYzk2YzlmYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPODMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGo0SUGBu20ElxSGGfEKD73aGI9ezDX8ylTmBYYS4/018ba/Z7crhf5 JjnSo3lWWuR7y6ZXmyruO7xc4pkGDt5FeVAGmVLFgLXlCXNodyDlfKeMNsdKyXvA EfQnVr0yc9DLdbqsFJCWsZtLlXvCX4EKMa8kIsdhSogpJdoaBdcit/8raQHoN4YQ dJn7y5S+i8mHf13j5euuWjvnQnyQXErO5twED0iQvwDEaYl2sLN8krIa7y84FQdQ o2qU5XP6Y1gZ0EI3Ta5Y7Q16Boz/difA/tCfVMaRhXumiYT4t+k4ET4ZRdjCQfxl 0r5GqQIw72ats6NASNDM3qSqAYtEkok= -----END CERTIFICATE-----Generated at Sat Apr 12 00:57:28 2025 by rpki-client