$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d8621e9-9f84-31cf-9d75-505b44079a2a.roa File: 2d8621e9-9f84-31cf-9d75-505b44079a2a.roa (raw, json) Hash identifier: FIVc0Nq5LykOGQ4T6JFMbWefyKnEA/OrHXXudFq5jsk= Subject key identifier: F4:6C:F9:CF:42:C6:5E:72:59:1F:A2:6F:8A:A7:BC:57:4A:38:0B:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D52782C4777A84704980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d8621e9-9f84-31cf-9d75-505b44079a2a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d5:27:82:c4:77:7a:84:70:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5142faf9-0b59-425b-a0fa-9adca17449aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:a6:85:44:9f:77:06:e7:b1:46:b9:69:b2: a0:80:f3:b6:49:5e:b1:bc:56:a2:51:64:84:86:88: 8e:58:da:19:41:d7:92:5a:c0:03:73:b9:81:47:b0: 9c:63:b1:ea:b4:df:34:45:ae:24:0e:88:e3:56:ef: 49:44:38:d7:f7:01:51:a6:74:0e:cc:8c:84:ff:91: 6c:d6:ba:b3:b5:64:ad:14:69:af:8c:61:d8:25:f0: 44:ad:56:47:45:e8:90:74:f1:ee:15:3f:17:05:2c: 96:e8:05:66:14:f0:48:58:82:88:6e:34:e0:6d:2a: 8c:35:67:f5:e7:cc:45:85:7d:59:e9:6c:c0:3e:43: 49:1e:71:d5:07:f2:ae:25:c0:4c:3a:76:65:23:0b: 29:10:72:98:4f:2e:1c:ff:58:8b:df:3f:e7:c3:03: 5d:11:be:a4:6c:b4:a5:56:89:e0:15:48:33:51:4d: d4:6b:7b:e9:b8:f2:77:a2:e2:93:e6:89:e3:e7:22: 9c:4e:b1:ec:68:74:e3:ee:42:0c:cd:71:1e:14:83: b6:05:32:23:be:38:a3:35:08:e6:b0:5a:ca:8c:40: 7f:1a:8a:47:8c:40:ac:98:6b:f8:96:71:85:85:b6: cf:a8:e4:b9:0a:8a:df:ee:ae:88:27:15:37:8d:ba: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6C:F9:CF:42:C6:5E:72:59:1F:A2:6F:8A:A7:BC:57:4A:38:0B:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d8621e9-9f84-31cf-9d75-505b44079a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:96:69:64:ce:d6:20:77:3f:4a:05:77:01:0b:6e:01:4d:35: 9b:92:61:9a:1f:be:f1:f0:ef:99:57:8e:3e:d6:6e:30:58:b1: c2:98:1f:36:b2:06:79:a8:32:b0:8c:bf:1b:49:1e:aa:74:82: de:e7:32:39:e9:ca:fc:14:37:ff:05:36:f1:d6:fe:fb:da:89: f0:14:7a:b1:8e:68:e4:00:b8:65:17:ba:25:f2:64:00:41:41: e6:d1:49:26:27:ce:82:76:1f:7d:3a:35:80:48:72:ea:69:bc: f3:ca:e0:69:bd:24:49:5f:89:a7:0b:a1:ab:a0:2c:1e:8f:fc: 63:b5:53:b8:58:d8:ed:78:ce:01:b5:8b:e7:2d:af:aa:3f:95: 6a:27:b2:d3:83:71:c2:36:2c:e0:48:cf:dc:67:cb:f1:be:f2: 03:d5:a8:81:d1:56:fe:eb:b7:1f:bc:dd:d9:90:5b:44:d6:9c: 79:d3:e3:a2:94:a1:97:35:02:2f:7e:c8:40:39:aa:b3:6f:83: 31:82:a6:8a:0a:a9:4a:4e:b6:2f:62:ac:a2:20:1d:b4:5a:57: 73:aa:88:07:33:f2:49:e1:ce:fe:77:37:ef:73:4a:e3:fe:66: 85:eb:e5:26:3e:82:6d:56:04:c7:5d:f9:46:fb:9e:2e:84:d7: e5:5a:fd:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdUngsR3eoRwSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTE0MmZhZjktMGI1OS00MjViLWEwZmEtOWFkY2ExNzQ0OWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotKmhUSfdwbnsUa5abKggPO2SV6xvFaiUWSE hoiOWNoZQdeSWsADc7mBR7CcY7HqtN80Ra4kDojjVu9JRDjX9wFRpnQOzIyE/5Fs 1rqztWStFGmvjGHYJfBErVZHReiQdPHuFT8XBSyW6AVmFPBIWIKIbjTgbSqMNWf1 58xFhX1Z6WzAPkNJHnHVB/KuJcBMOnZlIwspEHKYTy4c/1iL3z/nwwNdEb6kbLSl VongFUgzUU3Ua3vpuPJ3ouKT5onj5yKcTrHsaHTj7kIMzXEeFIO2BTIjvjijNQjm sFrKjEB/GopHjECsmGv4lnGFhbbPqOS5Corf7q6IJxU3jbpMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRs+c9Cxl5yWR+ib4qnvFdKOAtKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmQ4NjIxZTktOWY4NC0z MWNmLTlkNzUtNTA1YjQ0MDc5YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGWaWTO1iB3P0oFdwELbgFNNZuSYZofvvHw75lXjj7WbjBYscKYHzay BnmoMrCMvxtJHqp0gt7nMjnpyvwUN/8FNvHW/vvaifAUerGOaOQAuGUXuiXyZABB QebRSSYnzoJ2H306NYBIcuppvPPK4Gm9JElfiacLoaugLB6P/GO1U7hY2O14zgG1 i+ctr6o/lWonstODccI2LOBIz9xny/G+8gPVqIHRVv7rtx+83dmQW0TWnHnT46KU oZc1Ai9+yEA5qrNvgzGCpooKqUpOti9irKIgHbRaV3OqiAcz8knhzv53N+9zSuP+ ZoXr5SY+gm1WBMdd+Ub7ni6E1+Va/Zc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:18 2025 by rpki-client