$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa File: 2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa (raw, json) Hash identifier: ZkyJ6ifyS5+qlSVD+s8j3Dv1U0Cp/IrIaWlHx1VG6Ks= Subject key identifier: 98:25:F4:DE:19:F7:AA:74:FF:F4:3E:28:AD:52:D6:8A:C3:1D:AD:BA Certificate issuer: /CN=03e6c5f3-022a-4861-841a-18b0ed6faafb Certificate serial: 010D0C9F4328584930DE7473C577CAA53DFEF460 Authority key identifier: 24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 399519 IP address blocks: 172.82.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:74:73:c5:77:ca:a5:3d:fe:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e6c5f3-022a-4861-841a-18b0ed6faafb Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=97ba366e-56a2-4196-ada5-b9146ff30dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:be:8a:f6:c2:c7:a7:13:00:e3:25:40:d3: 53:02:87:a9:47:7f:74:d2:d9:76:ef:eb:76:25:f4: c3:50:f9:de:71:f3:ba:86:c4:6d:e4:66:ed:e2:fd: 21:2f:b3:7e:66:8b:c1:37:bc:4b:c8:59:8e:13:ca: 3d:12:82:1f:6e:86:8f:b4:9f:c9:22:86:03:e5:fb: 41:fb:ec:bc:3a:32:a5:cd:4d:2e:26:21:f4:cf:a6: a7:cd:27:1a:9b:03:6d:0c:cf:85:6c:62:d3:53:08: 09:cb:24:28:7e:2f:6d:41:9d:f1:55:02:e2:ac:d8: 46:55:b5:c5:c1:89:28:ca:73:af:3f:ab:56:9e:56: 1e:7b:b7:7a:25:5f:0e:e4:0a:8b:4e:49:3b:38:68: 8b:ac:78:42:bd:52:9a:f5:32:d3:f2:f0:cd:72:c7: b7:43:1b:fe:54:54:fa:cb:8d:8e:16:45:7b:5c:cf: 71:c0:39:df:e5:54:6a:8c:09:69:32:2c:07:fd:61: ef:31:c4:45:e1:f0:0f:a8:bf:82:c8:8e:fa:ef:89: 50:67:17:60:4c:d3:7c:3d:61:06:97:4b:49:e4:db: 32:a1:ef:3d:0f:92:ce:88:b6:54:57:26:e1:4f:ee: 61:45:6b:1b:5f:23:16:4b:44:46:8f:6c:ac:98:0d: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:25:F4:DE:19:F7:AA:74:FF:F4:3E:28:AD:52:D6:8A:C3:1D:AD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/2bfb5c80-2cf6-34f8-91fb-8b00fb8c5c3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb/03e6c5f3-022a-4861-841a-18b0ed6faafb.crl X509v3 Authority Key Identifier: keyid:24:8B:BB:78:E6:8B:B6:6F:95:BC:B9:8C:4A:18:BA:DF:2F:B6:69:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03e6c5f3-022a-4861-841a-18b0ed6faafb.cer sbgp-ipAddrBlock: critical IPv4: 172.82.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:4d:10:d0:3d:56:3f:20:b3:6e:70:6a:9e:2e:ff:54:2c:ea: 66:91:e6:78:23:44:df:9b:69:34:17:6f:5e:fd:ed:19:65:ed: 1f:62:fb:5f:0d:52:4d:d6:0c:5c:2f:25:76:62:0f:d4:74:63: 07:d6:30:d6:4c:ba:17:21:3a:73:d2:d1:18:9b:a9:4a:3f:c4: b0:3d:3f:6d:4e:3d:21:7a:5a:22:bc:7d:2c:4a:9d:87:72:60: 0a:ad:6c:3f:f8:b0:b9:1f:16:e5:d9:40:05:3a:0e:d4:f5:88: 93:77:9d:af:fe:d1:e1:58:89:51:0e:b0:23:1a:49:7d:fe:c7: 93:c7:6b:6f:2e:c7:ad:4d:85:37:0a:95:42:7a:47:5b:4c:55: 48:c0:5e:7d:b9:90:01:82:49:5b:65:d3:3c:d5:2c:89:1c:69: 78:e2:66:e0:06:5e:8e:f0:d3:74:f0:02:6f:53:7f:fb:47:91: 52:ce:16:81:b5:4d:8e:ff:f3:13:d1:69:76:c2:51:30:59:40: 2f:61:4e:b5:0d:02:8a:0c:6f:32:a6:80:d4:f8:84:6b:f0:9a: 70:7a:23:f8:7c:8f:47:11:45:4d:3f:77:54:51:5a:8c:f0:db: 16:7a:9d:b8:2e:36:d6:9b:28:8d:69:39:90:45:27:07:0d:05: 64:f5:96:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nRzxXfKpT3+9GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNlNmM1ZjMtMDIyYS00ODYxLTg0MWEtMThiMGVkNmZh YWZiMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk OTdiYTM2NmUtNTZhMi00MTk2LWFkYTUtYjkxNDZmZjMwZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb2+ivbCx6cTAOMlQNNTAoepR3900tl27+t2 JfTDUPnecfO6hsRt5Gbt4v0hL7N+ZovBN7xLyFmOE8o9EoIfboaPtJ/JIoYD5ftB ++y8OjKlzU0uJiH0z6anzScamwNtDM+FbGLTUwgJyyQofi9tQZ3xVQLirNhGVbXF wYkoynOvP6tWnlYee7d6JV8O5AqLTkk7OGiLrHhCvVKa9TLT8vDNcse3Qxv+VFT6 y42OFkV7XM9xwDnf5VRqjAlpMiwH/WHvMcRF4fAPqL+CyI7674lQZxdgTNN8PWEG l0tJ5Nsyoe89D5LOiLZUVybhT+5hRWsbXyMWS0RGj2ysmA0s/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgl9N4Z96p0//Q+KK1S1orDHa26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2U2 YzVmMy0wMjJhLTQ4NjEtODQxYS0xOGIwZWQ2ZmFhZmIvMmJmYjVjODAtMmNmNi0z NGY4LTkxZmItOGIwMGZiOGM1YzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDNlNmM1ZjMtMDIyYS00ODYxLTg0 MWEtMThiMGVkNmZhYWZiLzAzZTZjNWYzLTAyMmEtNDg2MS04NDFhLTE4YjBlZDZm YWFmYi5jcmwwHwYDVR0jBBgwFoAUJIu7eOaLtm+VvLmMShi63y+2aU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wM2U2YzVmMy0wMjJhLTQ4NjEtODQxYS0xOGIw ZWQ2ZmFhZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFNENA9Vj8gs25wap4u/1Qs6maR5ngjRN+baTQXb1797Rll7R9i+18N Uk3WDFwvJXZiD9R0YwfWMNZMuhchOnPS0RibqUo/xLA9P21OPSF6WiK8fSxKnYdy YAqtbD/4sLkfFuXZQAU6DtT1iJN3na/+0eFYiVEOsCMaSX3+x5PHa28ux61NhTcK lUJ6R1tMVUjAXn25kAGCSVtl0zzVLIkcaXjiZuAGXo7w03TwAm9Tf/tHkVLOFoG1 TY7/8xPRaXbCUTBZQC9hTrUNAooMbzKmgNT4hGvwmnB6I/h8j0cRRU0/d1RRWozw 2xZ6nbguNtabKI1pOZBFJwcNBWT1lmA= -----END CERTIFICATE-----Generated at Sun May 11 20:26:25 2025 by rpki-client