$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14952819-48aa-3a8d-9fb5-811a0df0e0cb.roa File: 14952819-48aa-3a8d-9fb5-811a0df0e0cb.roa (raw, json) Hash identifier: DNpA0OVTaO542c6YlaXTVTu7zTnRPYwIMq5rcN31Kg4= Subject key identifier: 88:83:60:93:64:45:65:43:76:0C:AA:55:70:52:3A:EA:79:09:BA:D2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DC223F85CA836D99F780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14952819-48aa-3a8d-9fb5-811a0df0e0cb.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:dc:22:3f:85:ca:83:6d:99:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f865f63a-14dc-48f3-b10b-d741d789f66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:b1:ea:c6:70:08:ee:6e:d4:c1:ca:06:b7: 0b:af:90:57:f4:0e:99:78:e9:8b:6e:37:6c:9c:50: 36:3e:86:df:04:37:37:52:17:b7:96:16:d4:2d:06: 53:8c:3e:56:fb:a2:95:6e:fc:f5:28:f9:b2:d6:90: 26:9a:22:d8:90:8e:90:3c:00:df:bf:e0:cb:1e:a8: 48:f6:42:e2:42:41:5c:a8:3c:90:f4:91:fa:22:82: b7:89:ae:b1:3c:8b:65:bc:d5:4b:4b:47:8b:b1:31: fe:44:09:b7:c3:fb:77:b8:67:1e:3b:d5:b6:9c:17: 2f:98:ac:20:5f:f8:b5:a8:c7:e5:cb:1c:91:cd:9b: 6f:d8:64:d8:27:da:f0:d8:66:c2:de:15:8b:45:b8: 77:27:25:a1:72:ed:fa:cd:d8:07:17:dd:70:75:a9: 7f:15:d7:0a:10:aa:9f:2a:45:69:c9:fe:6e:a9:88: 7c:49:a5:65:f6:32:9e:14:b8:0c:ff:2a:96:2b:fc: ce:29:de:9f:ca:0c:a3:7d:8b:57:1f:cb:08:6b:16: 1b:5a:63:4d:74:96:4f:23:37:ee:ed:ce:4a:4f:b1: e8:ef:8d:40:11:81:08:95:a0:35:d8:46:4c:e3:88: 08:f0:d7:e4:b2:61:14:4e:26:3b:c8:bb:24:bc:6d: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:83:60:93:64:45:65:43:76:0C:AA:55:70:52:3A:EA:79:09:BA:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14952819-48aa-3a8d-9fb5-811a0df0e0cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:50:83:f2:9d:69:b2:45:39:43:98:bf:ec:d8:4e:7c:2e:ff: f0:f4:6f:85:cc:9c:cd:fe:0b:80:2f:b3:a1:7e:ae:bf:27:0a: 9d:d1:32:ca:85:3d:06:55:2d:d6:a2:55:c3:fa:14:47:bf:a3: 44:c2:60:68:6d:35:38:bd:7c:df:97:ef:a1:e3:ab:58:ba:b4: dd:fc:13:3b:86:5f:97:ea:51:fa:84:bd:2e:e6:c6:a9:a6:ce: 41:35:8d:cf:ad:34:96:cb:1d:f1:4b:fc:e1:56:4d:c1:a9:2e: 9d:73:fc:34:21:f0:ae:44:82:7c:ff:1a:57:82:74:b5:7c:96: 01:1a:e7:79:8c:b1:33:73:0f:cb:c6:85:65:78:53:2f:2f:1e: 6f:5b:90:66:73:37:f3:09:b2:86:68:e6:8b:ea:d2:f3:9c:e9: 39:1e:71:47:8d:1a:ed:89:05:92:d4:d0:98:6b:ba:fb:b7:3e: 2a:77:ba:a5:94:26:97:53:f3:3e:9a:01:81:39:40:1f:c5:d8: 3b:9f:e8:b2:2b:a4:30:82:a7:17:87:bf:b2:e0:04:90:c9:ae: d7:e8:f3:34:f2:6b:b7:58:39:27:d2:e6:5f:08:2b:93:aa:8f: 98:6d:e9:14:34:44:43:dd:0d:2a:c3:93:32:65:c2:c8:73:28: bb:be:12:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdwiP4XKg22Z94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Zjg2NWY2M2EtMTRkYy00OGYzLWIxMGItZDc0MWQ3ODlmNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vux6sZwCO5u1MHKBrcLr5BX9A6ZeOmLbjds nFA2PobfBDc3Uhe3lhbULQZTjD5W+6KVbvz1KPmy1pAmmiLYkI6QPADfv+DLHqhI 9kLiQkFcqDyQ9JH6IoK3ia6xPItlvNVLS0eLsTH+RAm3w/t3uGceO9W2nBcvmKwg X/i1qMflyxyRzZtv2GTYJ9rw2GbC3hWLRbh3JyWhcu36zdgHF91wdal/FdcKEKqf KkVpyf5uqYh8SaVl9jKeFLgM/yqWK/zOKd6fygyjfYtXH8sIaxYbWmNNdJZPIzfu 7c5KT7Ho741AEYEIlaA12EZM44gI8NfksmEUTiY7yLskvG0ZTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiDYJNkRWVDdgyqVXBSOup5CbrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTQ5NTI4MTktNDhhYS0z YThkLTlmYjUtODExYTBkZjBlMGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM1Qg/KdabJFOUOYv+zYTnwu//D0b4XMnM3+C4Avs6F+rr8nCp3RMsqF PQZVLdaiVcP6FEe/o0TCYGhtNTi9fN+X76Hjq1i6tN38EzuGX5fqUfqEvS7mxqmm zkE1jc+tNJbLHfFL/OFWTcGpLp1z/DQh8K5Egnz/GleCdLV8lgEa53mMsTNzD8vG hWV4Uy8vHm9bkGZzN/MJsoZo5ovq0vOc6TkecUeNGu2JBZLU0Jhruvu3Pip3uqWU JpdT8z6aAYE5QB/F2Duf6LIrpDCCpxeHv7LgBJDJrtfo8zTya7dYOSfS5l8IK5Oq j5ht6RQ0REPdDSrDkzJlwshzKLu+Evo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:15 2025 by rpki-client