$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa File: 04e49c50-9249-3f9c-afea-d6ba87234992.roa (raw, json) Hash identifier: MmZKW93KK5ftQ3S4sYvv4OXq3yy7A/baBQ4FyxpxmlU= Subject key identifier: A1:55:79:AD:AD:E5:42:65:53:A6:88:9B:8E:2F:F3:80:11:10:85:55 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D79AAECCA0C4C6E62DA0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d7:9a:ae:cc:a0:c4:c6:e6:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8f1540ae-4b8a-4d96-8417-655f20e1217a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:96:d0:02:58:b3:1a:df:48:61:51:75:b2: 39:9c:e4:55:76:8c:49:3a:c0:ca:c8:be:16:b2:8d: 8f:7c:e0:33:3b:91:a3:02:b9:06:6d:c0:d4:b4:df: 08:93:b0:36:c2:17:46:cc:62:39:04:10:71:55:66: 87:13:2b:26:01:e7:08:da:d2:1a:6f:af:98:39:fe: 67:14:4b:8e:d7:5a:5f:5c:7a:fa:af:24:c1:9c:4a: 72:9e:32:79:40:66:e5:9c:69:e6:a2:7a:00:81:3b: c0:30:57:a5:75:1a:19:20:91:27:c1:51:31:24:e4: 30:8c:a8:6a:bf:32:bf:68:47:41:4e:56:2a:1a:2b: c4:8d:69:0d:d0:09:35:67:c6:36:8b:1e:db:85:f2: c6:dc:d5:53:5d:28:67:b4:e4:23:d1:01:a7:36:c1: 7c:6e:c2:fd:9e:60:f9:09:c5:76:eb:d0:d5:25:f6: cd:33:f4:a6:04:c0:e8:3e:c1:97:f6:ee:be:c0:94: 27:f4:3b:b8:fa:c8:f0:08:ba:d8:fc:0e:4e:7e:db: 7c:e9:3a:54:2b:ad:7a:3e:a6:27:3f:53:bc:7d:44: 2f:80:d2:66:67:9d:5b:59:b6:5d:c1:58:6d:8d:65: 8d:fd:99:0c:e0:81:72:72:58:c6:ee:99:97:7f:e2: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:55:79:AD:AD:E5:42:65:53:A6:88:9B:8E:2F:F3:80:11:10:85:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:c2:f4:36:80:0e:1d:7b:25:3c:d3:e8:e4:93:b4:f5:c9:06: ff:2f:f8:70:dc:f7:5d:0d:04:3f:0f:aa:47:9f:07:8a:bb:9a: b9:3d:05:21:55:79:b1:fc:92:85:84:a2:37:ff:e5:e4:87:64: b7:aa:5d:40:70:3f:4c:29:b8:54:c8:1b:f9:81:2c:79:3e:7d: e5:87:37:de:3f:ba:38:55:ac:38:ea:f8:ea:85:6b:87:5d:f3: d4:99:81:a1:9f:4a:6e:28:ef:99:61:95:53:04:0c:17:e4:ae: a5:a2:a3:90:88:e5:0e:26:7f:a8:f3:02:e0:05:14:35:64:1c: 12:5a:55:5f:68:da:9a:8f:76:3f:f3:fb:2a:d8:2b:d4:8f:36: 94:0f:9f:49:d6:8e:d3:b0:43:af:ac:d1:9e:8a:ed:57:63:0d: d1:e9:dd:10:12:56:1c:8e:6b:ba:10:09:7f:e7:09:2a:a7:08: c8:ac:fd:1d:76:8c:dc:08:93:a1:9a:df:26:c3:6b:7d:c4:46: d0:2f:c8:7e:6b:60:34:d0:7c:87:03:0d:ad:1b:8a:d8:c3:20: a6:f4:ca:c8:74:d7:10:30:03:fd:5d:e9:3a:17:e1:4a:1b:11: 42:06:06:13:55:db:6c:03:67:cc:13:36:2c:fc:b3:51:96:80: d4:8d:57:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdearsygxMbmLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGYxNTQwYWUtNGI4YS00ZDk2LTg0MTctNjU1ZjIwZTEyMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBiW0AJYsxrfSGFRdbI5nORVdoxJOsDKyL4W so2PfOAzO5GjArkGbcDUtN8Ik7A2whdGzGI5BBBxVWaHEysmAecI2tIab6+YOf5n FEuO11pfXHr6ryTBnEpynjJ5QGblnGnmonoAgTvAMFeldRoZIJEnwVExJOQwjKhq vzK/aEdBTlYqGivEjWkN0Ak1Z8Y2ix7bhfLG3NVTXShntOQj0QGnNsF8bsL9nmD5 CcV269DVJfbNM/SmBMDoPsGX9u6+wJQn9Du4+sjwCLrY/A5Oftt86TpUK616PqYn P1O8fUQvgNJmZ51bWbZdwVhtjWWN/ZkM4IFycljG7pmXf+LM8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFVea2t5UJlU6aIm44v84AREIVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRlNDljNTAtOTI0OS0z ZjljLWFmZWEtZDZiYTg3MjM0OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjC9DaADh17JTzT6OSTtPXJBv8v+HDc910NBD8PqkefB4q7mrk9BSFV ebH8koWEojf/5eSHZLeqXUBwP0wpuFTIG/mBLHk+feWHN94/ujhVrDjq+OqFa4dd 89SZgaGfSm4o75lhlVMEDBfkrqWio5CI5Q4mf6jzAuAFFDVkHBJaVV9o2pqPdj/z +yrYK9SPNpQPn0nWjtOwQ6+s0Z6K7VdjDdHp3RASVhyOa7oQCX/nCSqnCMis/R12 jNwIk6Ga3ybDa33ERtAvyH5rYDTQfIcDDa0bitjDIKb0ysh01xAwA/1d6ToX4Uob EUIGBhNV22wDZ8wTNiz8s1GWgNSNV/M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:34 2025 by rpki-client