$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/31d11128-7316-3ee2-8bcd-d753890928ec.roa File: 31d11128-7316-3ee2-8bcd-d753890928ec.roa (raw, json) Hash identifier: 0ao/kWqrKg2ObgXe/aBIW/W6tSJlRE1wxsg4x1PI48A= Subject key identifier: 59:91:88:F2:87:B5:27:78:DC:C8:7F:BC:76:AE:F1:D2:57:BC:01:D9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814307409C16A0C6750380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/31d11128-7316-3ee2-8bcd-d753890928ec.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:43:07:40:9c:16:a0:c6:75:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8a6c670c-b770-42f9-8f3f-546ac9e7aa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:38:4f:7c:6b:4d:0f:25:64:fe:9b:55:33: a2:d9:aa:d5:2e:57:02:f0:4d:06:9a:f8:54:b5:50: 8c:2c:00:04:ef:35:2a:98:e8:a8:af:fc:d4:cb:3b: 3a:1f:ed:c8:d4:af:39:d0:9b:80:dd:a1:a8:09:4d: cb:83:d3:37:5d:8d:1d:1c:c8:6e:7b:50:c8:30:a1: 15:b7:19:d5:57:3a:fc:e9:ca:25:c3:03:c7:66:63: 70:e4:61:9f:5e:9e:f9:67:3d:78:1d:a5:23:1e:ae: ad:c3:d7:12:3f:d8:89:4e:a8:9b:b0:c8:3e:5a:c8: 0c:1f:21:b9:01:78:85:1e:95:74:5c:39:42:09:75: 85:ea:91:24:80:3b:73:be:60:06:96:59:39:d4:28: 78:65:33:93:14:ae:ba:dc:39:20:77:5f:0b:c3:67: 6b:43:f8:2e:73:8d:a5:6b:c7:c9:80:1c:9b:0c:c4: b9:64:1c:f5:b8:4a:ab:de:d1:c1:69:60:01:6a:30: 69:3f:b8:10:eb:59:3c:27:ac:66:fb:46:0c:0e:58: bb:aa:2c:f0:4e:c5:a7:ff:08:b7:9a:8f:cb:ed:ba: bd:4e:b5:51:01:9d:f8:6e:c9:06:29:95:4a:39:cc: 24:ab:5a:3d:ed:ca:4e:92:33:9f:b4:f3:6d:09:da: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:91:88:F2:87:B5:27:78:DC:C8:7F:BC:76:AE:F1:D2:57:BC:01:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/31d11128-7316-3ee2-8bcd-d753890928ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:64:59:1b:d0:a8:1e:05:28:1a:80:87:fc:4c:3b:19:f5:ae: 04:78:86:69:20:4c:7d:fb:78:7d:4e:69:bf:9a:bb:1f:0f:5a: f9:98:72:66:6c:a4:46:41:9a:a3:7c:62:5f:10:8c:2b:af:af: 24:a2:e0:6e:fe:e2:d3:86:96:b3:e9:e4:12:3e:7c:5e:97:90: 1d:13:0d:ce:3c:38:21:8f:7f:cb:35:88:8f:c6:b3:20:00:5a: 8e:77:12:55:85:d7:59:ab:2a:b6:14:98:5a:86:97:a2:a5:3e: b6:f5:88:f2:c8:63:9b:ba:1b:58:05:48:46:f9:4e:f4:23:73: 2a:d9:93:61:f8:cb:38:9a:45:2e:c0:c1:0c:2e:f1:c2:5e:3f: 01:83:a6:f8:1f:57:eb:97:62:87:ae:af:aa:38:4c:a9:82:c7: f3:22:7c:17:d5:d5:96:5a:c8:72:fd:1f:00:d8:e7:4c:53:17: 69:04:79:98:27:6b:1f:f4:2c:53:32:7b:6b:f4:4d:2d:da:09: 91:d7:57:30:21:70:a2:af:92:3d:75:b8:48:76:36:7d:6b:63: 8e:30:49:27:f9:42:fa:25:64:73:52:e7:0c:5a:f5:a3:ab:3e: 2d:39:40:48:60:c7:92:26:59:57:de:32:c5:3a:8a:35:55:88: fe:4a:b9:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUMHQJwWoMZ1A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGE2YzY3MGMtYjc3MC00MmY5LThmM2YtNTQ2YWM5ZTdhYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMA4T3xrTQ8lZP6bVTOi2arVLlcC8E0GmvhU tVCMLAAE7zUqmOior/zUyzs6H+3I1K850JuA3aGoCU3Lg9M3XY0dHMhue1DIMKEV txnVVzr86colwwPHZmNw5GGfXp75Zz14HaUjHq6tw9cSP9iJTqibsMg+WsgMHyG5 AXiFHpV0XDlCCXWF6pEkgDtzvmAGllk51Ch4ZTOTFK663Dkgd18Lw2drQ/guc42l a8fJgBybDMS5ZBz1uEqr3tHBaWABajBpP7gQ61k8J6xm+0YMDli7qizwTsWn/wi3 mo/L7bq9TrVRAZ34bskGKZVKOcwkq1o97cpOkjOftPNtCdplBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmRiPKHtSd43Mh/vHau8dJXvAHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzFkMTExMjgtNzMxNi0z ZWUyLThiY2QtZDc1Mzg5MDkyOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJkWRvQqB4FKBqAh/xMOxn1rgR4hmkgTH37eH1Oab+aux8PWvmYcmZs pEZBmqN8Yl8QjCuvrySi4G7+4tOGlrPp5BI+fF6XkB0TDc48OCGPf8s1iI/GsyAA Wo53ElWF11mrKrYUmFqGl6KlPrb1iPLIY5u6G1gFSEb5TvQjcyrZk2H4yziaRS7A wQwu8cJePwGDpvgfV+uXYoeur6o4TKmCx/MifBfV1ZZayHL9HwDY50xTF2kEeZgn ax/0LFMye2v0TS3aCZHXVzAhcKKvkj11uEh2Nn1rY44wSSf5QvolZHNS5wxa9aOr Pi05QEhgx5ImWVfeMsU6ijVViP5Kuac= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:28 2025 by rpki-client