$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa File: 21249c04-184a-348a-8117-43a314e9ce2a.roa (raw, json) Hash identifier: NVvxlRHu5WyEFhEGIgKRrD8wzCPqUhgBO5IhbJaX+DE= Subject key identifier: 27:C3:43:DC:95:E1:1A:89:21:FB:81:B3:F6:A8:F1:DD:11:68:7A:9E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581477A3D4C015D999D1B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:47:7a:3d:4c:01:5d:99:9d:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=198de70d-1a0f-4064-8104-3b14cc34246f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:7e:e1:39:fd:a9:b5:97:66:d5:88:d6:59: 13:8c:5f:13:7b:fd:66:e6:61:d6:cd:10:d2:8f:5e: 9a:e5:01:f9:58:f2:c8:62:78:ab:60:7c:57:f8:c9: e0:c0:22:38:96:f9:a7:ce:2e:b9:fd:1b:18:f7:80: c2:54:9b:4f:4a:04:a1:7f:76:88:51:7f:bf:bb:98: dd:6f:b6:11:db:70:4c:fc:7a:60:80:4b:12:5d:a0: f8:ca:b8:9c:0d:8b:fb:83:46:40:d8:16:9c:e8:88: c2:2b:1c:d3:28:0c:3f:2d:3e:61:67:23:9e:25:86: 7f:fa:b1:3f:db:7e:d1:90:ae:14:a4:04:81:0f:75: a6:8e:a2:29:cd:d6:a0:b5:58:59:e8:2f:97:e6:18: a1:dd:0b:f3:e9:3d:5d:92:9a:d6:61:aa:76:67:cf: 3c:84:f7:2a:17:6e:d3:1c:6a:7a:91:0e:6e:b2:c7: d7:0d:11:18:92:47:a6:6e:0e:06:12:a1:8e:69:60: 3f:5e:06:9b:45:48:f2:fa:cf:cb:8d:6c:34:92:46: 44:27:01:d5:76:c6:9e:af:4d:2a:d9:f0:2e:7f:89: b7:ff:47:dd:ca:d4:2e:9d:f4:59:5d:e4:6f:3a:fb: 8a:24:33:cb:8c:94:5f:bb:15:72:7c:42:5c:51:a9: 3e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C3:43:DC:95:E1:1A:89:21:FB:81:B3:F6:A8:F1:DD:11:68:7A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:be:1d:19:6f:fe:98:7e:86:b6:20:ce:63:1e:57:b4:a3:b5: a7:1d:3d:10:94:13:6b:55:e7:8c:08:ca:a0:da:c6:5c:55:15: 7b:50:42:89:4b:ad:77:fd:b9:6f:5e:03:34:28:25:75:17:1f: 3a:75:9c:9e:b6:2c:2a:f9:f3:20:73:29:52:8e:af:64:e8:aa: ce:6e:c4:95:8c:72:61:58:3f:97:d3:ea:7b:6c:a0:64:d9:f2: 98:82:61:1c:74:a8:59:1e:ba:fb:f5:df:69:5d:41:56:e4:95: e3:15:66:b8:14:98:4f:45:8c:2d:70:1b:fe:f1:26:ee:f0:be: 34:e3:a3:a7:f1:94:d5:36:32:ba:c6:3f:a4:50:4d:ca:0f:7f: 0a:6c:32:49:c6:0c:f5:71:97:d9:f3:9d:d0:96:3e:0c:d7:30: d7:90:64:dc:2d:64:52:11:5d:41:84:c9:62:fa:bd:2e:8b:20: 88:cb:95:73:91:87:5e:98:78:6c:0f:16:38:bb:2b:3b:b3:43: c0:74:6a:dc:9f:62:8f:8e:07:bc:32:51:7c:d6:4d:59:a5:19: 6b:e8:25:8d:87:1f:8a:ce:47:4f:2e:ef:62:a2:21:9b:db:c6: c2:03:0d:ad:77:33:7d:b4:62:3a:19:28:ab:ac:1f:56:1d:f3: 13:d0:1f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUd6PUwBXZmdG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTk4ZGU3MGQtMWEwZi00MDY0LTgxMDQtM2IxNGNjMzQyNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLt+4Tn9qbWXZtWI1lkTjF8Te/1m5mHWzRDS j16a5QH5WPLIYnirYHxX+MngwCI4lvmnzi65/RsY94DCVJtPSgShf3aIUX+/u5jd b7YR23BM/HpggEsSXaD4yricDYv7g0ZA2Bac6IjCKxzTKAw/LT5hZyOeJYZ/+rE/ 237RkK4UpASBD3WmjqIpzdagtVhZ6C+X5hih3Qvz6T1dkprWYap2Z888hPcqF27T HGp6kQ5ussfXDREYkkembg4GEqGOaWA/XgabRUjy+s/LjWw0kkZEJwHVdsaer00q 2fAuf4m3/0fdytQunfRZXeRvOvuKJDPLjJRfuxVyfEJcUak+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfDQ9yV4RqJIfuBs/ao8d0RaHqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjEyNDljMDQtMTg0YS0z NDhhLTgxMTctNDNhMzE0ZTljZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi+HRlv/ph+hrYgzmMeV7SjtacdPRCUE2tV54wIyqDaxlxVFXtQQolL rXf9uW9eAzQoJXUXHzp1nJ62LCr58yBzKVKOr2Toqs5uxJWMcmFYP5fT6ntsoGTZ 8piCYRx0qFkeuvv132ldQVbkleMVZrgUmE9FjC1wG/7xJu7wvjTjo6fxlNU2MrrG P6RQTcoPfwpsMknGDPVxl9nzndCWPgzXMNeQZNwtZFIRXUGEyWL6vS6LIIjLlXOR h16YeGwPFji7KzuzQ8B0atyfYo+OB7wyUXzWTVmlGWvoJY2HH4rOR08u72KiIZvb xsIDDa13M320YjoZKKusH1Yd8xPQH4k= -----END CERTIFICATE-----Generated at Fri Apr 11 22:44:08 2025 by rpki-client