$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa File: 2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa (raw, json) Hash identifier: lePwlJ1tQdXyQ6yIznDeAVScKDJgzsqzPdDrQkPYDJg= Subject key identifier: 6D:F4:03:54:B1:08:19:8D:8B:15:96:85:38:18:34:D7:FC:31:E4:F4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DAABB06BACABB3B17B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:da:ab:b0:6b:ac:ab:b3:b1:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=44ed4e4d-493e-43f5-bce0-acac68d1fd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:a7:75:e2:a4:e4:4e:d5:3a:36:39:ab:8d: 86:08:93:0e:68:b9:ab:04:98:da:cc:71:1c:c7:3c: 1d:71:7c:80:e9:bd:af:52:cf:94:41:72:e5:5c:cb: 7b:a3:ed:a2:10:39:a0:3f:ca:6a:b7:2b:8a:ed:bd: ec:b6:36:ac:8d:fa:4e:08:6d:c8:3c:86:76:ec:94: 12:68:c7:08:0a:ad:ba:e5:26:d9:60:b3:41:5d:37: 15:fa:c0:81:59:35:fe:07:f8:be:73:c4:9b:72:1f: 7a:fb:72:79:bc:9d:18:fe:de:70:a5:ad:8f:12:77: ea:39:30:5b:55:14:da:c6:73:39:4c:27:55:b8:21: 52:30:91:a0:53:f5:c1:0c:24:65:ee:88:ab:f7:34: ab:0b:ce:23:42:4e:e0:8b:a7:4c:8d:eb:68:be:43: 16:f6:ac:98:04:86:68:0d:d2:bc:ed:65:40:39:cd: 45:7c:4b:8c:3b:e9:4d:89:97:91:13:a0:d1:12:46: 38:ca:da:21:ea:c2:89:d5:7a:9e:49:48:1e:39:46: 27:a5:ff:cc:4d:a8:b3:28:ad:a6:b4:f8:f3:7f:f5: 7a:eb:29:dd:02:2b:c3:06:37:59:9d:6c:1f:db:c7: 2a:8f:52:84:1a:34:1d:3d:d6:71:9c:19:56:53:7e: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F4:03:54:B1:08:19:8D:8B:15:96:85:38:18:34:D7:FC:31:E4:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4a:b0:ba:2a:58:5d:6d:af:0f:8d:5d:6e:bb:6a:87:85:01: 9c:05:4d:47:49:6a:1b:bf:0a:c1:1c:dc:54:04:56:6e:f4:14: 66:35:0b:8c:c2:1e:b1:39:5d:9f:dc:04:00:88:34:04:42:64: 02:ab:6e:d9:e3:42:9f:9c:ba:99:c5:54:08:4c:af:9d:27:08: ef:40:1c:4e:2b:06:e1:59:a9:3e:9f:57:6e:87:78:23:49:a8: 55:1f:b4:c7:81:58:98:7d:ec:58:66:16:b8:d3:a8:64:c8:f1: c2:8f:5d:4e:3c:48:ba:42:5a:96:f6:dc:fd:59:3d:18:9c:bc: ee:5b:7e:5e:e5:2e:bf:b0:1f:c1:1d:3c:f3:c5:3d:ad:8f:6c: 2e:ea:1c:1b:8b:49:07:5c:ce:f3:ae:17:e1:8a:0c:7a:5e:a4: 01:d5:80:90:9b:f2:a2:c1:9b:5e:19:cd:e2:36:80:3b:be:d2: 74:26:5c:58:ac:aa:ee:b2:69:76:3a:39:e6:a2:31:e7:95:69: 24:d3:d5:92:78:98:73:82:72:5f:64:f2:f3:b2:64:fc:49:81: 14:d9:e3:ea:10:b5:79:dd:f9:59:ae:eb:b4:8e:49:75:8c:e9: f1:20:b4:ab:de:fb:07:93:d8:e8:fd:79:68:1d:02:47:87:b3: 2b:ab:b6:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdqrsGusq7Oxe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDRlZDRlNGQtNDkzZS00M2Y1LWJjZTAtYWNhYzY4ZDFmZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdSndeKk5E7VOjY5q42GCJMOaLmrBJjazHEc xzwdcXyA6b2vUs+UQXLlXMt7o+2iEDmgP8pqtyuK7b3stjasjfpOCG3IPIZ27JQS aMcICq265SbZYLNBXTcV+sCBWTX+B/i+c8Sbch96+3J5vJ0Y/t5wpa2PEnfqOTBb VRTaxnM5TCdVuCFSMJGgU/XBDCRl7oir9zSrC84jQk7gi6dMjetovkMW9qyYBIZo DdK87WVAOc1FfEuMO+lNiZeRE6DREkY4ytoh6sKJ1XqeSUgeOUYnpf/MTaizKK2m tPjzf/V66yndAivDBjdZnWwf28cqj1KEGjQdPdZxnBlWU340TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG30A1SxCBmNixWWhTgYNNf8MeT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE3NTM1N2EtZDRhZi0z Y2Y1LTk3MDMtNTIyNmFlNWQ5ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJKsLoqWF1trw+NXW67aoeFAZwFTUdJahu/CsEc3FQEVm70FGY1C4zC HrE5XZ/cBACINARCZAKrbtnjQp+cupnFVAhMr50nCO9AHE4rBuFZqT6fV26HeCNJ qFUftMeBWJh97FhmFrjTqGTI8cKPXU48SLpCWpb23P1ZPRicvO5bfl7lLr+wH8Ed PPPFPa2PbC7qHBuLSQdczvOuF+GKDHpepAHVgJCb8qLBm14ZzeI2gDu+0nQmXFis qu6yaXY6OeaiMeeVaSTT1ZJ4mHOCcl9k8vOyZPxJgRTZ4+oQtXnd+Vmu67SOSXWM 6fEgtKve+weT2Oj9eWgdAkeHsyurtvo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:04 2025 by rpki-client