$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa File: 0248a708-1e5d-3bac-8f01-bf8e608bb045.roa (raw, json) Hash identifier: LS6minMQMkL+98x6gOi2De7q6BXbBFgEXCkg1h6sFUs= Subject key identifier: 29:3D:42:23:62:77:16:93:1C:72:A1:5F:96:FB:9E:35:B6:95:C4:BC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814CB3961735706C440900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4c:b3:96:17:35:70:6c:44:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=fa72a219-10de-44ac-9976-b48e1d4b5117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:06:d9:71:5d:b0:5e:79:a1:cb:d7:cd:4b: f0:3d:39:e6:0b:99:c1:7b:9c:3c:ae:91:6c:85:25: 95:7f:22:00:1d:96:6a:ec:cb:ab:fc:a1:33:8e:1a: 56:16:d2:bc:3c:fe:9c:3c:88:ad:01:b4:cb:c2:42: 8e:a9:37:3f:59:60:b5:f2:8f:b2:7b:40:31:44:7a: 6d:b6:c9:2c:a3:9a:2e:e7:9a:7e:7a:8d:ea:97:46: c8:01:1c:68:7e:70:66:dc:6e:5c:d3:62:6b:ef:8e: 66:77:94:9a:e9:57:28:40:84:af:e8:c3:f0:bb:6a: bb:0c:d3:2e:d3:bf:a4:0e:6f:51:b8:1a:bb:31:2e: cd:ac:63:17:90:ef:fb:ea:b9:61:ef:b8:12:2e:8c: 96:5e:14:2b:21:71:7b:3b:57:28:2b:38:76:d9:63: 68:83:29:cc:f3:42:0a:65:c6:7c:51:0d:a9:ea:e1: e4:3c:1d:60:60:7c:b5:ad:2e:de:e7:1f:f1:e0:ea: bb:fe:11:ae:80:05:3b:5f:40:d4:1a:11:99:fd:7f: b2:77:04:36:dc:fa:39:23:cd:c9:ee:ad:1d:29:8a: b5:c6:1c:8d:17:4b:e7:c3:a8:0d:1a:3e:41:d2:37: e8:bb:ed:41:68:be:18:b3:53:f0:6f:87:17:a0:27: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3D:42:23:62:77:16:93:1C:72:A1:5F:96:FB:9E:35:B6:95:C4:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0248a708-1e5d-3bac-8f01-bf8e608bb045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8b:7d:3d:23:46:a2:03:d8:96:e7:73:8e:77:44:0f:b8:cd: 15:31:2a:c2:64:0e:25:4d:ed:d4:cf:4d:65:54:f3:da:3f:b8: e7:67:21:2f:aa:86:4d:02:45:9c:1c:dd:b3:dc:58:d1:b4:26: 07:6b:47:7e:16:42:58:c9:bc:d3:60:66:2b:c8:87:80:6d:10: 4c:75:a9:14:46:d5:8a:76:ef:00:17:66:25:ad:93:67:9b:73: 1e:f4:2e:1a:e8:8a:d4:50:86:35:70:f4:c1:b4:9c:e9:90:59: 0a:c6:5c:c1:c9:55:a3:b0:09:7b:e9:07:26:6f:b6:4e:90:a4: ea:89:7e:ca:42:64:75:08:bb:ac:37:cb:2f:64:a8:ef:a9:b2: bc:d5:f8:11:9d:38:e5:46:4f:b4:d5:4b:cc:97:06:9b:04:7c: f3:13:36:04:9b:3d:73:af:70:e1:cf:74:ce:58:b1:d9:25:29: 35:98:77:d9:f3:c9:8c:4a:1d:d3:ae:0c:fc:60:56:4b:bc:0f: 65:de:f6:74:3d:d4:c3:69:a9:33:56:48:27:5e:55:db:6b:f6: 19:1b:11:77:b0:d8:03:60:74:5d:5c:d2:a0:4a:a9:6d:26:6e: e9:66:e9:8a:da:50:26:51:ec:fd:bc:f5:24:71:c8:b4:85:57: fa:a5:a5:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUyzlhc1cGxECQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmE3MmEyMTktMTBkZS00NGFjLTk5NzYtYjQ4ZTFkNGI1MTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0cG2XFdsF55ocvXzUvwPTnmC5nBe5w8rpFs hSWVfyIAHZZq7Mur/KEzjhpWFtK8PP6cPIitAbTLwkKOqTc/WWC18o+ye0AxRHpt tskso5ou55p+eo3ql0bIARxofnBm3G5c02Jr745md5Sa6VcoQISv6MPwu2q7DNMu 07+kDm9RuBq7MS7NrGMXkO/76rlh77gSLoyWXhQrIXF7O1coKzh22WNogynM80IK ZcZ8UQ2p6uHkPB1gYHy1rS7e5x/x4Oq7/hGugAU7X0DUGhGZ/X+ydwQ23Po5I83J 7q0dKYq1xhyNF0vnw6gNGj5B0jfou+1BaL4Ys1Pwb4cXoCfo0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk9QiNidxaTHHKhX5b7njW2lcS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDI0OGE3MDgtMWU1ZC0z YmFjLThmMDEtYmY4ZTYwOGJiMDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOLfT0jRqID2Jbnc453RA+4zRUxKsJkDiVN7dTPTWVU89o/uOdnIS+q hk0CRZwc3bPcWNG0JgdrR34WQljJvNNgZivIh4BtEEx1qRRG1Yp27wAXZiWtk2eb cx70LhroitRQhjVw9MG0nOmQWQrGXMHJVaOwCXvpByZvtk6QpOqJfspCZHUIu6w3 yy9kqO+psrzV+BGdOOVGT7TVS8yXBpsEfPMTNgSbPXOvcOHPdM5YsdklKTWYd9nz yYxKHdOuDPxgVku8D2Xe9nQ91MNpqTNWSCdeVdtr9hkbEXew2ANgdF1c0qBKqW0m bulm6YraUCZR7P289SRxyLSFV/qlpT4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:00 2025 by rpki-client