$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cd999c6-9b2f-3cd4-9a3e-d0ed8a02ec88.roa File: 1cd999c6-9b2f-3cd4-9a3e-d0ed8a02ec88.roa (raw, json) Hash identifier: Z4YNWvmPZvNIofXxQirewX1UHYIgZWIZEJozOwQhA4Q= Subject key identifier: 10:0B:DE:3C:FC:90:74:42:AE:2F:CF:72:45:CD:22:B9:85:F5:B9:93 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814C824394CE7078B87380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cd999c6-9b2f-3cd4-9a3e-d0ed8a02ec88.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4c:82:43:94:ce:70:78:b8:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=294b3b0e-3af9-44a9-b191-2d43d9ab6945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:08:f3:20:38:3c:3e:ed:58:3e:f9:13:0b:90: b0:26:05:19:5c:c8:c6:fb:cd:a6:71:47:26:55:39: 4f:36:17:8e:2f:e7:53:e2:f4:93:09:8c:88:d5:e4: 31:1b:83:3d:5f:cc:4b:2b:29:78:d7:72:09:9b:b9: a4:5d:7e:5b:04:c2:11:90:61:e8:56:78:44:b0:e0: 14:14:f3:ee:14:6f:61:f9:6d:3e:77:92:5d:7a:bd: 6d:4b:31:b3:06:13:10:17:07:3e:59:97:87:e0:86: 61:dc:14:69:a9:36:0e:e2:43:01:bf:89:a1:da:40: c6:0f:32:14:86:c3:8f:d7:71:15:f1:df:10:64:38: f8:e6:11:70:6c:74:fe:e0:68:67:95:ea:cc:53:d6: 14:a9:ea:71:a1:5a:e5:18:4f:c4:98:63:6e:76:40: c4:cf:0d:29:fe:21:c8:e9:9f:33:fa:1a:49:6e:5d: 66:1a:8e:9d:8a:cb:34:cf:02:5d:0b:62:f4:f8:97: d7:66:68:ea:a2:49:b5:3c:3f:fc:9f:11:8c:72:ff: 2a:95:04:c3:ea:d5:3a:ae:0a:de:52:be:3a:6a:35: 15:be:91:5c:51:8a:5a:7d:85:c5:8d:96:d4:52:ba: f0:9f:41:56:60:ec:db:ca:a3:e2:6f:00:dc:5b:90: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:DE:3C:FC:90:74:42:AE:2F:CF:72:45:CD:22:B9:85:F5:B9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cd999c6-9b2f-3cd4-9a3e-d0ed8a02ec88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:49:fd:e2:a2:70:4a:05:85:c5:60:a6:a9:d2:54:2b:71:f2: 7c:68:0b:d0:93:f7:e9:31:1e:6a:5e:0e:cf:f5:37:10:0d:bd: 35:cd:a8:d0:dc:53:21:81:c8:6b:0e:96:4e:f4:fc:b9:1b:fa: bd:6f:5b:17:50:e2:9a:93:67:6e:f4:04:43:4a:bf:33:e7:a9: 1b:de:fc:c3:ec:2e:d3:bd:e6:2c:94:19:42:94:3a:70:2c:54: 86:e7:49:a0:0e:c2:57:b7:53:df:47:7e:a6:a8:57:de:3c:a0: 27:de:3a:6f:aa:86:9a:99:93:44:94:10:e5:88:ec:16:15:40: 18:ed:0e:6d:14:e6:42:f2:c8:31:92:f4:55:7b:87:bc:25:57: ca:f1:2d:33:6a:73:23:14:aa:5b:25:3f:46:18:4e:08:01:ba: b4:c0:e3:2b:f0:a8:99:1f:3a:89:66:48:b2:ec:98:41:dd:9e: 9a:e0:a5:0f:fd:90:e3:f0:96:51:84:9c:7a:d6:d9:65:d5:a2: 45:f0:30:40:89:7b:3a:c8:5f:3d:d4:f3:44:f2:99:2f:b8:a3: 3d:61:c1:f7:b9:51:d3:0c:74:a4:4d:0d:4d:3d:85:9c:a5:10: bb:d7:79:48:c6:51:f0:04:d9:bd:93:4d:3b:f2:87:a8:1e:e7: 7f:c2:82:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUyCQ5TOcHi4c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Mjk0YjNiMGUtM2FmOS00NGE5LWIxOTEtMmQ0M2Q5YWI2OTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QjzIDg8Pu1YPvkTC5CwJgUZXMjG+82mcUcm VTlPNheOL+dT4vSTCYyI1eQxG4M9X8xLKyl413IJm7mkXX5bBMIRkGHoVnhEsOAU FPPuFG9h+W0+d5Jder1tSzGzBhMQFwc+WZeH4IZh3BRpqTYO4kMBv4mh2kDGDzIU hsOP13EV8d8QZDj45hFwbHT+4GhnlerMU9YUqepxoVrlGE/EmGNudkDEzw0p/iHI 6Z8z+hpJbl1mGo6diss0zwJdC2L0+JfXZmjqokm1PD/8nxGMcv8qlQTD6tU6rgre Ur46ajUVvpFcUYpafYXFjZbUUrrwn0FWYOzbyqPibwDcW5C3uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAL3jz8kHRCri/PckXNIrmF9bmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWNkOTk5YzYtOWIyZi0z Y2Q0LTlhM2UtZDBlZDhhMDJlYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdJ/eKicEoFhcVgpqnSVCtx8nxoC9CT9+kxHmpeDs/1NxANvTXNqNDc UyGByGsOlk70/Lkb+r1vWxdQ4pqTZ270BENKvzPnqRve/MPsLtO95iyUGUKUOnAs VIbnSaAOwle3U99HfqaoV948oCfeOm+qhpqZk0SUEOWI7BYVQBjtDm0U5kLyyDGS 9FV7h7wlV8rxLTNqcyMUqlslP0YYTggBurTA4yvwqJkfOolmSLLsmEHdnprgpQ/9 kOPwllGEnHrW2WXVokXwMECJezrIXz3U80TymS+4oz1hwfe5UdMMdKRNDU09hZyl ELvXeUjGUfAE2b2TTTvyh6ge53/Cgo4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:03:58 2025 by rpki-client