$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10fde5ab-4915-3775-90a1-f14546b552f8.roa File: 10fde5ab-4915-3775-90a1-f14546b552f8.roa (raw, json) Hash identifier: lzswyqOyc2Dg0t2ctN9oEDz2d4YMZo7cGQ/hUqhrG1s= Subject key identifier: 30:E2:0F:F6:46:A3:F9:A8:78:0F:83:68:24:A0:A4:0A:80:C1:68:EB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D81E73B135016568FD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10fde5ab-4915-3775-90a1-f14546b552f8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d8:1e:73:b1:35:01:65:68:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d96fa59e-55ab-41db-aea4-9426a1ea2059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:35:3f:23:26:dd:fb:f1:e7:f2:20:e0:18:fc: f7:0f:d0:a8:f1:04:23:9f:b8:57:46:15:65:44:4a: 83:3e:bc:8b:f0:cf:e9:61:61:a3:20:50:76:48:63: 92:05:1c:25:6e:59:ac:41:54:f5:6a:ab:08:80:ba: a7:2b:30:ca:15:05:ca:12:51:3e:21:b6:c8:28:67: 57:0d:69:d1:f7:af:ac:30:12:69:a3:92:f4:81:ef: f2:68:0b:ca:39:b7:13:80:60:fe:ff:ff:fb:93:94: aa:39:3a:67:56:a6:42:95:98:6a:60:d0:79:c9:69: 5f:3c:ed:12:1f:81:ed:de:2e:16:cf:e7:20:c0:fd: 01:28:49:6c:1d:5b:13:5c:45:24:26:77:e4:9f:ec: 6e:e8:bc:4c:31:6d:4e:d2:c0:6c:00:97:ad:3b:6c: 98:21:1f:01:75:23:51:80:d4:56:1d:21:b5:b6:82: c6:ee:ca:68:9c:85:37:10:2b:bf:ef:f3:e8:cb:ce: d3:a5:e6:2c:17:97:3c:69:8d:37:90:a0:3e:47:6c: bb:8a:d3:8b:be:3d:62:7f:75:5a:cc:45:31:d5:92: 68:b9:f0:9a:f7:43:04:82:31:77:bf:5c:2f:fd:96: eb:8b:e5:46:b5:7a:f7:e3:65:e1:94:47:00:2a:cc: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E2:0F:F6:46:A3:F9:A8:78:0F:83:68:24:A0:A4:0A:80:C1:68:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10fde5ab-4915-3775-90a1-f14546b552f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f4:fd:8a:5f:e4:d5:98:96:3f:a8:4f:9a:0c:5f:7c:54:0a: 07:96:30:12:54:5e:04:22:e1:21:03:1f:58:9a:ea:50:25:d6: 2f:47:a6:e4:0d:76:fa:10:7a:37:d8:56:27:d6:c8:e5:db:26: c6:3d:78:a7:dd:6a:22:19:bd:93:ba:f0:c6:8a:c9:dd:d9:80: 9a:ea:88:3b:b1:59:6c:c5:6a:5a:8d:29:91:ac:6f:3f:32:fa: 09:f3:6f:1f:78:38:3d:0a:55:ff:19:de:4c:b2:2e:8b:a8:ac: 67:a9:5a:39:56:08:49:b0:2a:7a:7a:11:33:01:c6:a9:1c:e9: c9:7c:f3:4a:2c:6e:21:7a:79:5e:89:c8:cc:3e:d7:cb:33:7f: 53:fe:ba:25:81:f6:9e:9a:89:af:9d:be:48:53:a8:25:90:63: a2:20:87:42:5a:e6:f1:cb:77:46:44:40:28:85:a6:3f:87:5b: 9f:82:dc:c4:49:b4:6f:1d:ea:1b:b3:a6:67:8e:98:2a:8d:f1: 1b:d5:ac:26:eb:5c:27:78:fb:08:8b:74:9d:2e:45:6c:9c:43: 27:4b:40:06:fd:2c:c2:1c:04:50:f9:62:3f:80:48:7a:10:fc: 6e:6a:f1:e3:4e:5c:1e:64:a3:a5:6c:1d:17:f1:70:06:bb:fd: 73:ad:f8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdgec7E1AWVo/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDk2ZmE1OWUtNTVhYi00MWRiLWFlYTQtOTQyNmExZWEyMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jU/Iybd+/Hn8iDgGPz3D9Co8QQjn7hXRhVl REqDPryL8M/pYWGjIFB2SGOSBRwlblmsQVT1aqsIgLqnKzDKFQXKElE+IbbIKGdX DWnR96+sMBJpo5L0ge/yaAvKObcTgGD+///7k5SqOTpnVqZClZhqYNB5yWlfPO0S H4Ht3i4Wz+cgwP0BKElsHVsTXEUkJnfkn+xu6LxMMW1O0sBsAJetO2yYIR8BdSNR gNRWHSG1toLG7sponIU3ECu/7/Poy87TpeYsF5c8aY03kKA+R2y7itOLvj1if3Va zEUx1ZJoufCa90MEgjF3v1wv/Zbri+VGtXr342XhlEcAKsz75QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDiD/ZGo/moeA+DaCSgpAqAwWjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTBmZGU1YWItNDkxNS0z Nzc1LTkwYTEtZjE0NTQ2YjU1MmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv0/Ypf5NWYlj+oT5oMX3xUCgeWMBJUXgQi4SEDH1ia6lAl1i9HpuQN dvoQejfYVifWyOXbJsY9eKfdaiIZvZO68MaKyd3ZgJrqiDuxWWzFalqNKZGsbz8y +gnzbx94OD0KVf8Z3kyyLouorGepWjlWCEmwKnp6ETMBxqkc6cl880osbiF6eV6J yMw+18szf1P+uiWB9p6aia+dvkhTqCWQY6Igh0Ja5vHLd0ZEQCiFpj+HW5+C3MRJ tG8d6huzpmeOmCqN8RvVrCbrXCd4+wiLdJ0uRWycQydLQAb9LMIcBFD5Yj+ASHoQ /G5q8eNOXB5ko6VsHRfxcAa7/XOt+Kc= -----END CERTIFICATE-----Generated at Fri Mar 14 13:18:43 2025 by rpki-client