$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa File: 1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa (raw, json) Hash identifier: rnpZytJSu+/JvQfEeZPBHt4eUMB1I7mRxXgvrYg6uyk= Subject key identifier: 7E:76:40:CE:9E:58:8C:47:6B:99:9B:0C:8E:9B:7E:4B:1C:6D:2B:40 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814B39333DE535DCA61B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4b:39:33:3d:e5:35:dc:a6:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=53ab6a8e-527e-40ea-9696-f42aa7966c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:c3:5e:35:06:f8:0c:60:99:85:a4:b2:4a: 84:af:9e:0a:0b:20:0c:7e:4b:a0:95:49:96:3c:b7: 55:86:e6:ec:d0:25:36:62:79:f5:4c:95:0f:c1:69: 4a:ba:5d:ea:c2:d8:d7:61:0d:ac:bf:b9:2a:98:d2: b5:3a:75:bd:6d:6d:b8:fb:3b:97:56:a0:a6:20:cc: f9:84:9f:37:b3:07:e4:cf:c5:cc:1b:25:c7:5f:cb: e2:a0:a9:6a:5a:15:f4:f6:f1:ee:fb:e0:16:b5:29: db:e3:05:4d:43:ca:93:6e:a3:15:0e:3f:c1:0b:74: f5:25:ae:86:0a:e4:f4:38:3f:da:e6:d5:51:73:3a: ae:2b:4a:38:3a:18:97:69:5d:d1:98:05:9a:ef:ad: 03:8f:ce:ed:cb:c8:ff:fa:92:92:b4:c7:3d:03:5d: 91:00:e5:89:1a:99:18:4a:a5:95:4b:e3:17:d1:23: e3:46:ed:1a:4a:dc:c6:b0:fa:81:a3:bd:9d:7a:1b: d9:96:b5:93:de:58:e1:fd:e3:32:43:ce:47:82:9b: 4e:f4:92:a0:59:fa:02:02:7e:c1:95:69:fa:f3:ec: 03:33:3b:bd:e3:e0:24:fe:81:ff:ea:88:9a:f2:94: e3:06:8e:d0:cd:a8:a0:af:cd:5d:75:97:f6:54:75: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:76:40:CE:9E:58:8C:47:6B:99:9B:0C:8E:9B:7E:4B:1C:6D:2B:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f5:a3:5b:6d:62:74:72:b0:98:b7:4d:59:f6:84:21:49:93: c5:c8:b4:07:fb:1d:97:ac:3b:e2:1a:9d:3e:9b:f3:94:d6:2b: 0f:a0:93:48:7c:ae:6b:f1:e3:ea:bb:30:0b:9b:df:22:6a:21: 56:c4:68:99:15:8b:5b:83:4a:3c:fe:e2:a9:e1:1c:48:81:9a: ad:39:17:41:96:02:cf:91:1e:5d:a9:a2:e7:64:af:d3:e2:98: 1a:71:7e:5c:58:03:1e:9e:93:4d:9b:df:8a:f6:8c:b5:8f:da: 02:20:ac:4b:95:6e:a1:b3:69:85:17:31:2d:fa:3e:96:fb:97: fa:82:d8:d5:ee:7b:dc:6c:d6:78:4a:d5:47:7a:df:b6:04:20: b2:58:69:90:2a:c7:c9:e3:af:ba:c2:8f:aa:15:bf:f3:ce:35: ca:14:ad:c1:7e:3e:db:e8:c7:44:d3:0c:41:25:ae:60:e8:e1: 8c:f4:02:d0:72:c1:d8:0f:11:97:83:c5:55:b1:b1:f8:9b:31: 23:10:8d:47:e4:db:ee:13:cc:1f:a6:c0:86:e8:62:74:f5:d3: 4b:8d:1f:58:f1:21:60:94:85:43:45:5c:23:e0:91:7b:79:c8: 98:ac:8f:7d:e2:14:b2:15:ef:34:14:a2:78:98:d7:70:3d:10: 9f:72:dc:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUs5Mz3lNdymG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTNhYjZhOGUtNTI3ZS00MGVhLTk2OTYtZjQyYWE3OTY2YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNrDXjUG+AxgmYWkskqEr54KCyAMfkuglUmW PLdVhubs0CU2Ynn1TJUPwWlKul3qwtjXYQ2sv7kqmNK1OnW9bW24+zuXVqCmIMz5 hJ83swfkz8XMGyXHX8vioKlqWhX09vHu++AWtSnb4wVNQ8qTbqMVDj/BC3T1Ja6G CuT0OD/a5tVRczquK0o4OhiXaV3RmAWa760Dj87ty8j/+pKStMc9A12RAOWJGpkY SqWVS+MX0SPjRu0aStzGsPqBo72dehvZlrWT3ljh/eMyQ85HgptO9JKgWfoCAn7B lWn68+wDMzu94+Ak/oH/6oia8pTjBo7Qzaigr81ddZf2VHXG8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH52QM6eWIxHa5mbDI6bfkscbStAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWNmYzgzOWUtZDZjYy0z YWIzLThmNDAtOTE1NmY0Zjk3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT1o1ttYnRysJi3TVn2hCFJk8XItAf7HZesO+IanT6b85TWKw+gk0h8 rmvx4+q7MAub3yJqIVbEaJkVi1uDSjz+4qnhHEiBmq05F0GWAs+RHl2poudkr9Pi mBpxflxYAx6ek02b34r2jLWP2gIgrEuVbqGzaYUXMS36Ppb7l/qC2NXue9xs1nhK 1Ud637YEILJYaZAqx8njr7rCj6oVv/PONcoUrcF+Ptvox0TTDEElrmDo4Yz0AtBy wdgPEZeDxVWxsfibMSMQjUfk2+4TzB+mwIboYnT100uNH1jxIWCUhUNFXCPgkXt5 yJisj33iFLIV7zQUoniY13A9EJ9y3O0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:11 2025 by rpki-client