$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121cc18c-0912-3d8b-a52d-deed28211e88.roa File: 121cc18c-0912-3d8b-a52d-deed28211e88.roa (raw, json) Hash identifier: TxUpzcD9yyTd1K5vCV5skSmiyr2ZvDqdKjVezgKuG70= Subject key identifier: B6:8D:55:45:6C:AB:A0:5E:3F:62:5F:5B:8D:5C:AC:C5:89:83:A7:97 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581445A9AA83CF58E0D1360 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121cc18c-0912-3d8b-a52d-deed28211e88.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:44:5a:9a:a8:3c:f5:8e:0d:13:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1745f067-a1ec-498a-a411-d165d5987a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:18:75:39:8b:8c:cd:7c:a1:a9:8a:7e:38: ab:a5:45:f3:e8:96:8e:b6:03:d2:0e:83:1e:90:85: 21:02:f5:13:20:1d:94:92:a0:26:73:2d:f6:e3:c2: b3:87:42:ef:bb:a6:eb:f9:d6:54:e1:e0:33:6e:16: e2:d6:e4:8e:af:d6:d0:87:07:2a:e5:b1:2a:3a:4f: c7:c8:e3:7e:eb:9f:cc:b8:07:09:98:5b:02:01:2f: 0d:1d:c0:aa:9a:ee:f9:22:c9:dd:2f:2c:b5:39:85: 4b:56:d7:e1:d8:49:0d:23:cd:cb:d3:1f:22:b5:0a: 5d:e1:0c:e0:1c:f6:a4:f9:bc:7f:78:76:80:c3:a1: f9:33:bd:14:3c:a0:0d:04:b4:d2:3b:e2:ce:d2:a8: 73:2b:18:5c:ae:35:8e:14:69:b4:02:a4:9e:10:73: 33:9e:33:d4:1f:3e:51:7a:c9:f6:1d:cd:7e:a7:5c: b5:ab:84:9f:d9:16:bc:d4:da:c8:79:02:a6:14:d4: c8:b1:48:69:00:37:fa:00:cd:cc:0a:99:c2:b7:e5: 17:3a:65:0e:30:dc:ca:c7:82:5c:9b:c3:81:d3:63: ba:c0:c7:36:09:9d:ef:ca:2b:0d:c0:ff:ed:1f:a9: e0:6b:92:c6:ea:bc:c3:c2:fb:41:ef:4f:47:be:1e: 69:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8D:55:45:6C:AB:A0:5E:3F:62:5F:5B:8D:5C:AC:C5:89:83:A7:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121cc18c-0912-3d8b-a52d-deed28211e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4a:04:fd:20:fa:78:8a:bb:24:de:d5:06:f7:cf:5f:f4:4e: 0c:58:25:d3:ab:a5:7a:17:36:b9:9e:7a:e5:16:ba:4e:17:56: bc:1a:18:fe:72:e7:62:54:4d:60:66:43:c9:83:09:ab:d1:9b: 1c:a3:b8:3f:7a:63:77:c5:79:3d:f1:53:de:ba:f3:4d:39:f6: 92:df:3f:9a:51:75:b0:e0:a1:25:14:6f:f5:01:be:25:17:5b: 4e:99:d4:ed:93:c2:c1:e8:57:6d:d9:64:b7:41:db:cf:4b:64: e6:da:04:92:ac:4c:3e:df:c8:94:9e:18:38:b5:26:fb:0f:40: db:79:20:48:af:17:03:bf:e3:3e:b5:3a:0e:b6:7b:8b:ed:63: 5d:87:8b:48:83:09:de:85:dc:24:a8:61:36:11:78:62:e2:e3: 1c:0c:66:eb:77:63:15:b0:40:60:92:d2:74:d7:e5:58:78:89: 81:e1:ad:6b:c5:48:60:26:b8:6d:5e:a3:30:85:cb:5a:fa:ad: da:55:55:74:63:33:27:67:0b:d2:7f:ad:b9:89:e4:2f:5c:69: b8:13:0d:a5:7d:53:e8:d8:e8:89:59:61:82:db:d5:3b:b7:0f: 85:56:cc:21:e9:74:6a:94:00:2e:9a:9a:bd:84:ce:ad:d7:7c: 0d:fc:ae:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgURamqg89Y4NE2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTc0NWYwNjctYTFlYy00OThhLWE0MTEtZDE2NWQ1OTg3YTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFAYdTmLjM18oamKfjirpUXz6JaOtgPSDoMe kIUhAvUTIB2UkqAmcy3248Kzh0Lvu6br+dZU4eAzbhbi1uSOr9bQhwcq5bEqOk/H yON+65/MuAcJmFsCAS8NHcCqmu75IsndLyy1OYVLVtfh2EkNI83L0x8itQpd4Qzg HPak+bx/eHaAw6H5M70UPKANBLTSO+LO0qhzKxhcrjWOFGm0AqSeEHMznjPUHz5R esn2Hc1+p1y1q4Sf2Ra81NrIeQKmFNTIsUhpADf6AM3MCpnCt+UXOmUOMNzKx4Jc m8OB02O6wMc2CZ3vyisNwP/tH6nga5LG6rzDwvtB709Hvh5pdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaNVUVsq6BeP2JfW41crMWJg6eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTIxY2MxOGMtMDkxMi0z ZDhiLWE1MmQtZGVlZDI4MjExZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9KBP0g+niKuyTe1Qb3z1/0TgxYJdOrpXoXNrmeeuUWuk4XVrwaGP5y 52JUTWBmQ8mDCavRmxyjuD96Y3fFeT3xU96680059pLfP5pRdbDgoSUUb/UBviUX W06Z1O2TwsHoV23ZZLdB289LZObaBJKsTD7fyJSeGDi1JvsPQNt5IEivFwO/4z61 Og62e4vtY12Hi0iDCd6F3CSoYTYReGLi4xwMZut3YxWwQGCS0nTX5Vh4iYHhrWvF SGAmuG1eozCFy1r6rdpVVXRjMydnC9J/rbmJ5C9cabgTDaV9U+jY6IlZYYLb1Tu3 D4VWzCHpdGqUAC6amr2Ezq3XfA38ri0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:04 2025 by rpki-client