$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa File: 17e38567-d7a8-3785-88e8-65dc6ba74930.roa (raw, json) Hash identifier: 9A0uZtvoxvRvBGVKoA3y3u5JzzcgefQKudp93vW5hHk= Subject key identifier: 1B:52:29:4F:DE:A5:21:D3:D3:20:CE:E6:C8:78:EF:D2:34:75:17:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DEA169781B7780B60000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:de:a1:69:78:1b:77:80:b6:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1cc9eaf3-353a-4d5e-be43-ae0bb96da0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5d:5e:a7:ef:38:f5:8d:66:b4:53:ae:eb:ee: ca:08:ee:3b:8b:6c:3f:d1:ce:e8:4e:35:34:04:69: ca:cc:fa:e4:8c:62:7d:54:46:ea:0e:6e:4a:ea:d7: f1:7e:e5:a3:d2:52:73:a1:1b:7f:b9:c1:47:25:bf: 51:7e:e9:c7:1c:1c:62:44:c8:32:84:23:13:b0:2a: 8a:a5:34:b6:97:1e:f0:b5:09:8c:81:c3:f9:5a:32: b2:ec:3a:db:e2:d7:38:e1:fd:bf:72:7b:45:0e:7a: a4:ab:71:51:0b:92:4d:cd:7b:56:05:fe:26:a2:79: 88:59:30:6b:43:7b:ac:d5:65:52:64:a4:6f:82:55: 11:1e:2d:88:9d:e4:9b:e0:12:84:7a:ca:e7:52:2d: b9:96:96:e5:71:da:f6:54:10:81:35:bb:50:64:01: 12:24:89:b7:f8:60:61:6e:34:02:ab:f1:bc:5f:ce: cc:75:80:6f:1d:0f:f9:67:cb:a1:10:1a:29:86:2c: 90:e6:d4:eb:cf:50:21:16:39:b4:d9:71:ec:8d:71: c3:fe:c4:e9:42:79:20:fb:1e:f1:02:32:4c:c3:73: bc:17:9d:cb:76:18:42:5d:f6:cf:25:d0:14:16:b0: 6a:0e:6e:67:39:7a:7e:53:34:58:6a:36:75:8e:99: e9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:52:29:4F:DE:A5:21:D3:D3:20:CE:E6:C8:78:EF:D2:34:75:17:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b7:a3:01:1b:e0:5d:de:0c:cd:03:42:e4:94:cf:f7:c3:ea: 1d:4f:78:31:2a:f8:0c:33:8f:2e:1c:9d:8b:12:90:9f:be:e8: 0e:46:c7:d3:0e:8c:5d:ed:d3:e8:e9:3b:42:e7:8d:32:ba:0a: a4:da:c0:3e:09:da:b9:15:22:b2:88:6b:db:b9:62:75:47:69: 04:7a:b4:43:0b:aa:19:ea:a5:5a:35:5e:64:93:c2:0d:a9:ec: bf:96:7f:54:f3:0c:dd:9b:52:90:51:df:9f:82:9f:43:fd:0d: ae:da:85:40:56:93:e2:98:6f:48:cc:7f:be:a0:bf:6e:c3:93: 07:5c:ba:d4:ae:f7:17:9d:ff:c9:69:9f:2f:c1:b4:4f:63:c2: e7:48:7f:3a:2d:d0:5e:b0:14:7d:5a:48:b8:ab:29:57:6e:5f: 58:f5:9f:ed:6f:38:38:42:f8:e5:64:e2:42:93:04:46:74:3b: 0e:45:6c:ba:f5:6c:a6:14:84:1c:d1:1a:69:eb:ab:79:b0:f4: 92:fd:00:79:13:a4:0e:52:1e:f7:b1:a3:57:e8:f0:ff:43:40: 88:da:a8:2f:96:f9:40:d7:a3:b1:5c:bb:57:ff:89:c0:a2:dc: 2e:3a:b3:21:7b:bb:4d:36:7b:a9:cc:80:63:ac:ff:76:b8:ad: ca:4c:fe:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd6haXgbd4C2AAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWNjOWVhZjMtMzUzYS00ZDVlLWJlNDMtYWUwYmI5NmRhMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8F1ep+849Y1mtFOu6+7KCO47i2w/0c7oTjU0 BGnKzPrkjGJ9VEbqDm5K6tfxfuWj0lJzoRt/ucFHJb9RfunHHBxiRMgyhCMTsCqK pTS2lx7wtQmMgcP5WjKy7Drb4tc44f2/cntFDnqkq3FRC5JNzXtWBf4monmIWTBr Q3us1WVSZKRvglURHi2IneSb4BKEesrnUi25lpblcdr2VBCBNbtQZAESJIm3+GBh bjQCq/G8X87MdYBvHQ/5Z8uhEBophiyQ5tTrz1AhFjm02XHsjXHD/sTpQnkg+x7x AjJMw3O8F53LdhhCXfbPJdAUFrBqDm5nOXp+UzRYajZ1jpnpsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtSKU/epSHT0yDO5sh479I0dRcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTdlMzg1NjctZDdhOC0z Nzg1LTg4ZTgtNjVkYzZiYTc0OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi3owEb4F3eDM0DQuSUz/fD6h1PeDEq+Awzjy4cnYsSkJ++6A5Gx9MO jF3t0+jpO0LnjTK6CqTawD4J2rkVIrKIa9u5YnVHaQR6tEMLqhnqpVo1XmSTwg2p 7L+Wf1TzDN2bUpBR35+Cn0P9Da7ahUBWk+KYb0jMf76gv27DkwdcutSu9xed/8lp ny/BtE9jwudIfzot0F6wFH1aSLirKVduX1j1n+1vODhC+OVk4kKTBEZ0Ow5FbLr1 bKYUhBzRGmnrq3mw9JL9AHkTpA5SHvexo1fo8P9DQIjaqC+W+UDXo7Fcu1f/icCi 3C46syF7u002e6nMgGOs/3a4rcpM/ug= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:48 2025 by rpki-client