$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa File: 1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa (raw, json) Hash identifier: MNl1EmZu8NN9G2ASPl/UkeuHpy2KZo8KKU27vRgHY/U= Subject key identifier: C2:0B:BD:A4:8E:B5:B2:F6:25:A6:33:78:85:A8:50:88:A7:05:8E:72 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E07420A863BCA29499E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e0:74:20:a8:63:bc:a2:94:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=620ab8b9-cb4b-42d9-a643-228bfabf95e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4d:61:6c:3a:a9:a8:f6:fe:b7:07:e3:ab:60: 3d:69:b3:40:a4:99:f0:5e:25:a6:69:f5:d0:e5:b6: 45:b7:9f:07:71:7e:91:df:5e:6d:50:1c:d0:0a:5c: fc:6f:5e:fb:d7:23:a0:ba:54:6d:60:6a:4b:d2:31: c3:56:1b:82:6a:96:f3:ed:8f:b3:b6:02:32:1e:a3: 7d:80:81:db:fe:ea:4b:a7:a1:67:09:fb:d2:54:b8: 74:d0:90:e5:ec:99:9c:7c:7a:67:08:90:45:e4:c8: 0d:a0:be:9f:a7:fb:18:d1:45:b8:31:8e:8c:61:89: 06:d1:f8:67:50:20:0e:6a:2e:f7:a2:df:22:2f:1c: 2a:5f:40:b1:f3:86:68:de:ff:86:2c:7f:a3:a3:c0: 22:b9:7b:da:b0:fb:e1:d9:96:b1:d3:20:eb:7d:2a: e7:3c:68:a5:5c:0f:5e:16:c2:7e:46:38:2f:31:d9: c3:01:60:02:62:c5:f0:f7:c9:7f:62:84:cb:a8:9c: 51:5e:a9:c4:35:e9:3c:e4:30:2a:c3:10:82:2e:e5: 20:33:93:a1:0d:26:d2:2c:b6:4c:17:e6:9a:f1:d2: 4c:b4:13:26:58:87:2a:67:bd:70:16:bc:35:ec:33: 4c:51:5f:4d:05:b4:dc:dd:b7:fc:e4:03:5e:2c:03: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0B:BD:A4:8E:B5:B2:F6:25:A6:33:78:85:A8:50:88:A7:05:8E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e4:6c:a8:8f:95:31:70:89:3e:bc:e1:e2:98:55:82:12:04: e4:1c:49:db:fa:d1:3a:0d:63:cc:3e:49:16:30:78:c4:5a:61: 3e:9a:01:95:3f:e2:41:eb:1b:0f:7a:cd:3a:7d:2c:42:99:25: 20:ca:78:10:84:7d:19:af:7b:43:31:54:7f:40:c9:8b:0a:b3: 98:4a:c0:e2:19:6c:d6:2f:12:d8:f1:a7:36:24:de:41:11:26: 9e:cc:4c:66:ea:ab:0e:94:f7:39:c9:1a:ab:fe:0e:20:38:c1: 53:df:d3:10:c9:08:ce:9d:dd:85:c4:07:2e:17:28:d3:d0:cc: f9:5a:7f:2a:16:ba:5f:58:bf:62:d2:df:1e:1a:c3:1b:0a:48: ed:d5:ec:aa:41:cf:0a:c4:d6:26:75:55:da:68:39:14:30:27: 0b:6f:84:6b:74:df:d1:a3:dc:8f:36:4c:e2:69:dc:91:58:74: e6:6a:2b:87:bb:99:0a:bd:57:93:ce:96:4b:00:65:cb:0b:f4: 06:24:62:e0:e9:df:56:b5:3c:88:ef:99:44:2f:92:c8:d6:7e: 86:70:73:39:fa:d1:a1:7f:a3:99:65:38:42:d9:c0:98:f3:c8: b3:9b:5a:d5:99:a3:67:22:10:b0:60:33:3f:a1:80:6e:6f:8f: 53:bc:11:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeB0IKhjvKKUmeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjIwYWI4YjktY2I0Yi00MmQ5LWE2NDMtMjI4YmZhYmY5NWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU1hbDqpqPb+twfjq2A9abNApJnwXiWmafXQ 5bZFt58HcX6R315tUBzQClz8b1771yOgulRtYGpL0jHDVhuCapbz7Y+ztgIyHqN9 gIHb/upLp6FnCfvSVLh00JDl7JmcfHpnCJBF5MgNoL6fp/sY0UW4MY6MYYkG0fhn UCAOai73ot8iLxwqX0Cx84Zo3v+GLH+jo8AiuXvasPvh2Zax0yDrfSrnPGilXA9e FsJ+RjgvMdnDAWACYsXw98l/YoTLqJxRXqnENek85DAqwxCCLuUgM5OhDSbSLLZM F+aa8dJMtBMmWIcqZ71wFrw17DNMUV9NBbTc3bf85ANeLANV7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMILvaSOtbL2JaYzeIWoUIinBY5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWNjYTllYTYtMjNiMi0z MDk2LWFhNWMtMzg2NWY2Yjc5MDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDkbKiPlTFwiT684eKYVYISBOQcSdv60ToNY8w+SRYweMRaYT6aAZU/ 4kHrGw96zTp9LEKZJSDKeBCEfRmve0MxVH9AyYsKs5hKwOIZbNYvEtjxpzYk3kER Jp7MTGbqqw6U9znJGqv+DiA4wVPf0xDJCM6d3YXEBy4XKNPQzPlafyoWul9Yv2LS 3x4awxsKSO3V7KpBzwrE1iZ1VdpoORQwJwtvhGt039Gj3I82TOJp3JFYdOZqK4e7 mQq9V5POlksAZcsL9AYkYuDp31a1PIjvmUQvksjWfoZwczn60aF/o5llOELZwJjz yLObWtWZo2ciELBgMz+hgG5vj1O8ETg= -----END CERTIFICATE-----Generated at Sat Apr 12 00:11:47 2025 by rpki-client